RE: Multicast routing, IGMP, IPTV doubts..

2014-11-02 Thread rozhuk . im
pass out quick inet proto udp to 224.0.0.0/4 no state allow-opts pass out quick inet proto igmp to 224.0.0.0/4 no state allow-opts pass out quick inet6 proto udp to ff00::/8 no state allow-opts # Allow send multicast pass out quick inet6 proto icmp6 no state allow-opts # mld (igmp6) also here pas

RE: Setting User Priority Bits in VLAN Tag

2012-06-19 Thread rozhuk . im
Use ng_patch > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.org] On Behalf Of David Somayajulu > Sent: Wednesday, June 20, 2012 6:51 AM > To: freebsd-net@freebsd.org > Cc: davi...@freebsd.org > Subject: Setting User Priority Bits in VLAN T

RE: fast bcopy...

2012-05-03 Thread rozhuk . im
> > guess this is a good time to thank the FreeBSD hackers for that FPU > > stack FILD/FISTP idea! > > I'll append the copy related notes of our doc/memperf.txt. > > Thanks, > > I made an implementation of fpu unwinding and mmx copy to see if they > were really making a difference years ago (reimp

RE: Cloning VLAN interfaces

2012-03-19 Thread rozhuk . im
Remove space: name re0-hub:downstream re0-vlan > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.org] On Behalf Of jammin2night > Sent: Tuesday, March 20, 2012 2:12 AM > To: freebsd-net@freebsd.org > Subject: RE: Cloning VLAN interfaces > >

RE: Cloning VLAN interfaces

2012-03-19 Thread rozhuk . im
#!/bin/sh ngctl shutdown re0:lower ngctl shutdown re0:upper ngctl mkpeer re0: hub lower lower ngctl name re0:lower re0-hub ngctl connect re0: re0-hub: upper upper ngctl mkpeer re0-hub: vlan downstream downstream ngctl name re0-hub: downstream re0-vlan ngctl mkpeer re0-vlan: eiface vlan10 ether

RE: problem with vlan interfaces tagging/untagging in a simulated switch box

2012-03-04 Thread rozhuk . im
Use netgraph nodes. > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.org] On Behalf Of h bagade > Sent: Sunday, March 04, 2012 3:31 PM > To: freebsd-net > Subject: problem with vlan interfaces tagging/untagging in a simulated > switch box >

ipfw and DSCP / ECN

2012-02-23 Thread rozhuk . im
Hi! "ip_tos" (ipv4) and "Traffic Class" (ipv6) field in the header of ip packet may contain a DSCP and ECN. "iptos" and "ipprecedence" options in ipfw does not allow to use these fields in the header of packets. May want to add two additional options for working with them in the ipv4 and ipv6 pa

RE: m_pullup - fail

2012-02-02 Thread rozhuk . im
I am writing a netgraph node for processing UDP packets passing through the router / bridge. Node must fully inspect the entire contents of the package, in some cases, change them. Node is connected to ng_ether (lower, upper). I was faced with the fact that all packets are processed normally, exce

RE: m_pullup - fail

2012-02-02 Thread rozhuk . im
The function does not allow access to data if m_flags & M_EXT size and more MHLEN, although the data is actually available. Why if there is no m_flags & M_PKTHDR size anyway MHLEN instead MLEN? As an improvement, you can try to copy the data from the current m in m_next, if m is not enough space

m_pullup - fail

2012-02-01 Thread rozhuk . im
Hello! The function always returns an error and remove the chain MBUF for two or more generated on the same host. If the pre-call m_defrag no error occurs. This is normal behavior? How to know in advance the maximum size for MBUF that does not cause a failure in m_pullup? mbuf: 0xfe0074fc06

ng_bridge and locks

2012-01-23 Thread rozhuk . im
Hi! I found a comment in the code: /* * This node has all kinds of stuff that could be screwed by SMP. * Until it gets it's own internal protection, we go through in * single file. This could hurt a machine bridging beteen two * GB ethernets so it sho

RE: kern/161908: [netgraph] [patch] ng_vlan update for QinQ support

2011-12-30 Thread rozhuk . im
Who can commit? > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.org] On Behalf Of ead...@freebsd.org > Sent: Monday, October 24, 2011 7:35 AM > To: ead...@freebsd.org; freebsd-b...@freebsd.org; freebsd- > n...@freebsd.org > Subject: Re: ke

RE: Netgraph VLAN in VLAN (q-in-q)

2011-12-28 Thread rozhuk . im
Hi! If you need custom encap tag, use this: http://www.freebsd.org/cgi/query-pr.cgi?pr=161908 Scheme: ng_ether <-> ng_vlan(outer/metro tag) <-> ng_vlan(inner/customer tag) <-> ng_eiface > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.or

igmpprixy replacement

2011-12-08 Thread rozhuk . im
Hi! igmpprixy and mrouted - did not work, I wrote on netgraph replacement. This is a good example of the opportunities ng_bpf I propose to place in: /usr/share/examples/netgraph http://www.netlab.linkpc.net/download/software/FreeBSD/mcastbridge/mcastbr2. sh

RE: pppoe reconnection issue

2011-11-01 Thread rozhuk . im
I have same problem with one ISP some years ago, but config file is lost ) Try this config for mpd5. If not help - read mpd5 manuals and play with config file. ### Rozhuk Ivan 2009 - 2010 ### MPD configuration file ### startup: ###set user foo bar admin ###set user foo1 bar1

Re: kern/161908: [netgraph] [patch] ng_vlan update for QinQ support

2011-10-25 Thread rozhuk . im
The following reply was made to PR kern/161908; it has been noted by GNATS. From: rozhuk...@gmail.com To: , Cc: Subject: Re: kern/161908: [netgraph] [patch] ng_vlan update for QinQ support Date: Tue, 25 Oct 2011 21:38:40 +0900 This is a multi-part message in MIME format. --=_Ne

RE: QinQ support: implement details - need help!

2011-10-22 Thread rozhuk . im
http://www.freebsd.org/cgi/query-pr.cgi?pr=161908 All done. IEEE 802.1Q + IEEE 802.1p IEEE 802.1ad (IEEE 802.1QinQ) - if two ng_vlan node + ethernet_type for VLAN encapsulation is tunable, default is: 0x8100 (33024) + PCP (Priority Code Point) and CFI (Canonical Format Indicator) for VLAN encap

RE: ether_demux does not handle frames with embedded vlan tags

2011-10-18 Thread rozhuk . im
> > In what cases vlan-tagged packet can be received by > ng_ether_rcv_upper ? > > If another node attaches to an ng_ether node's upper hook and sends a > vlan tagged packet to the hook. This may be a wrong configuration or QinQ: packet may have M_VLAN tag is set and still vlan-tagged (ether_type

RE: ether_demux does not handle frames with embedded vlan tags

2011-10-18 Thread rozhuk . im
> ether_demux currently assumes that all vlan-tagged packets that it > sees have had the vlan stripped out and the M_VLAN tag is set, so it > never checks the ether type for a vlan. However ng_ether_rcv_upper > currently does not guarantee that this is the case(and there may be > other code paths

QinQ support: implement details - need help!

2011-10-14 Thread rozhuk . im
... IEEE 802.1ad (802.1QinQ) specifies architecture and bridge protocols to provide separate instances of the MAC services to multiple independent users of a Bridged Local Area Network in a manner that does not require cooperation among the users, and requires a minimum of cooperation between the

RE: Which module contains functins(arptimer)?

2011-09-07 Thread rozhuk . im
Arp - is a part of INET (ipv4). But arp proto can be used with any other L3 proto to resolve L2 addr from L3 addr. TCP/IP is L4 proto and it can work without IPv4 - on IPv6.   -- Rozhuk Ivan   > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@free

ng_vlan improvements

2011-06-24 Thread rozhuk . im
Diffs   -- Rozhuk Ivan   ng_vlan.h.orig.patch Description: Binary data ng_vlan.c.orig.patch Description: Binary data ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "

ng_vlan improvements

2011-06-23 Thread rozhuk . im
Hi! Changes: 1. list + hash was replaced by array of hooks: its simple and faster 2. added encap setting. "getencap" and "setencap" messages for control it: Default = 1 (do the VLAN encapsulation) 0: no encapsulation, just: m->m_flags |= M_VLANTAG; m->m_pkthdr.ether_vtag = (vlan & EVL_VLID_M

RE: FreeBSD 8.2 and MPD5 stability issues

2011-06-23 Thread rozhuk . im
net.inet.ip.fastforwarding - double check incoming packet, if: dst = this host / multicast / contain options - all packets processing by one cpu core This option is good for one cpu core routers. -- Rozhuk Ivan > -Original Message- > From: Mike Tancsa [mailto:m...@sentex.net] > S

RE: FreeBSD 8.2 and MPD5 stability issues

2011-06-23 Thread rozhuk . im
Try: net.inet.ip.fastforwarding = 0 net.isr.bindthreads = 1 net.isr.direct = 0 net.isr.direct_force = 0 -- Rozhuk Ivan > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.org] On Behalf Of Mike Tancsa > Sent: Friday, June 24, 2011 4:56

RE: H/W offload VLAN/PPPoE/NAT

2011-06-23 Thread rozhuk . im
Hi! Another way for vlans is: "ng_ether + ng_vlan + ng_iface". See in sources: VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM I don’t see any profits with hardware PPPoE, mpd5 is fast. For hardware NAT you can try make "closed" netgraph based interface. Node like "ng_ether + ng_nat" = ng_hwnat, compatible

jumbo frames + geom_mirror = no net

2011-02-08 Thread rozhuk . im
Hi! I have 8.2 + latest updates, em + gigabit net, few HDDs in mirror. Samba for share HDDs to win hosts. (E5300, G33 + ICH9R, 2GB, PCI-E intel desktop GB adapter) ifconfig_em0="inet 172.16.0.254 netmask 255.255.255.0 mtu 9000" Then I start copy files to mirror (trough net or using cp from oth

RE: divert rewrite

2011-02-08 Thread rozhuk . im
> -Original Message- > From: Sergey Matveychuk [mailto:s...@freebsd.org] > Sent: Wednesday, February 09, 2011 12:53 AM > To: rozhuk...@gmail.com > Cc: freebsd-net@freebsd.org > Subject: Re: divert rewrite > > 08.02.2011 19:08, rozhuk...@gmail.com wrote: > > Did you try ng_ether + ng_ksocke

RE: divert rewrite

2011-02-08 Thread rozhuk . im
> -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.org] On Behalf Of Sergey Matveychuk > Sent: Monday, February 07, 2011 11:37 PM > To: Julian Elischer > Cc: Ivo Vachkov; FreeBSD Net > Subject: Re: divert rewrite > > 06.02.2011 4:42, Julian Eli

RE: Virtual Network Interface Card

2010-12-17 Thread rozhuk . im
Hi, Alex! You can make virtual NIC via netgraph. 1. ng_ether automatic attached to every physical NICs on load module. 2. connect ng_bridge to upper and lower hooks on ng_ether 3. create and connect ng_eiface to ng_bridge and you will get new NIC ngethX with its own MAC address and IP addrs too.

kern/152141: [vlan] encapsulate vlan in ng_ether before output to if

2010-12-16 Thread rozhuk . im
Hi! What I need to do to include this patch to main source tree?   -- Rozhuk Ivan   ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org

RE: [arp] possible DoS, fixes and improvements

2010-12-09 Thread rozhuk . im
Hi! > I wonder which version of netinet/if_ether.c you are working from? uname -a FreeBSD firewall 9.0-CURRENT FreeBSD 9.0-CURRENT #2: Wed Dec 8 02:53:50 IRKT 2010 r...@firewall:/usr/obj/usr/src/sys/RIMx64 amd64   -- Rozhuk Ivan   > -Original Message- > From: Chuck Swiger [mailto:

[arp] possible DoS, fixes and improvements

2010-12-07 Thread rozhuk . im
Hi! 1. ah->ar_hln - is depend from ar_hrd? Yes, and for ARPHRD_ETHER is 6 (ETHER_ADDR_LEN) For ARPHRD_IEEE1394 - sizeof(struct fw_hwaddr) ah->ar_hln ignored in ether_output: bcopy(ar_tha(ah), edst, ETHER_ADDR_LEN); check in in_arpinput: if (ifp->if_addrlen != ah->ar_hln) {

ip_fastfwd - statistic

2010-12-04 Thread rozhuk . im
Hi! More correct statistic update in ip_fastfwd ip_input not affected Please, add patch to source.   -- Rozhuk Ivan   ip_fastfwd.patch Description: Binary data ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/fre

kern/152141: [vlan] encapsulate vlan in ng_ether before output to if

2010-11-15 Thread rozhuk . im
This is a patched version of original function code /* * If underlying interface can not do VLAN tag insertion itself * then attach a packet tag that holds it. */ if ((m->m_flags & M_VLANTAG) && (ifp->if_capenable & IFCAP_VLAN_HWTAGGING) == 0)