Re: Continuing problems in a bridged VNET setup

2019-12-21 Thread Patrick M. Hausen
Hi all, kp@ and bz@ stepped in to help, now that we finally have a non-productive test system that is capable of reproducing the problem. Seems like it is related or identical to this bug: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=227100 Just to keep everyone informed and justify the no

Re: Continuing problems in a bridged VNET setup

2019-12-21 Thread Patrick M. Hausen
Hi all, Now my two most problematic systems stall about once a day. And I can reliably stall my test system after I increased the number of VNET jails to 100. So now I have an unused test system that is in the wedged state. What now? I could provide SSH access if needed. Kind regards, Patrick --

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Julian Elischer
On 12/20/19 10:09 AM, Nick Wolff wrote: Marko, Are you aware of any write ups for using ng_eiface and ng_bridge instead of if_bridge? look in /usr/share/examples/netgraph here are a couple of examples of exactly what you ask for. Thanks, Nick Wolff On Fri, Dec 20, 2019 at 6:22 AM Marko Zec

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Marko Zec
On Fri, 20 Dec 2019 13:09:52 -0500 Nick Wolff wrote: > Marko, > > Are you aware of any write ups for using ng_eiface and ng_bridge > instead of if_bridge? It is not that complex at all: # kldload ng_ether # ifconfig em0 promisc # ngctl mkpeer em0: bridge lower link0 # ngctl name em0:lower b0 #

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Ryan Moeller
See /usr/share/examples/jails/README On Fri, Dec 20, 2019 at 1:09 PM Nick Wolff wrote: > > Marko, > > Are you aware of any write ups for using ng_eiface and ng_bridge instead of > if_bridge? > > Thanks, > > Nick Wolff > > On Fri, Dec 20, 2019 at 6:22 AM Marko Zec wrote: > > > Perhaps you could d

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Wallace Barrow
This might help you out. https://www.youtube.com/watch?v=aoW7pWuhT_A&t=2133s -- Wallace Barrow in...@incin.me On Fri, Dec 20, 2019, at 12:09 PM, Nick Wolff wrote: > Marko, > > Are you aware of any write ups for using ng_eiface and ng_bridge instead of > if_bridge? > > Thanks, > > Nick Wo

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Nick Wolff
Marko, Are you aware of any write ups for using ng_eiface and ng_bridge instead of if_bridge? Thanks, Nick Wolff On Fri, Dec 20, 2019 at 6:22 AM Marko Zec wrote: > Perhaps you could ditch if_bridge(4) and epair(4), and try ng_eiface(4) > with ng_bridge(4) instead? Works rock-solid 24/7 here

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Marko Zec
On Fri, 20 Dec 2019 11:31:59 + Goran Mekić wrote: > On December 20, 2019 11:22:01 AM UTC, Marko Zec wrote: > >Perhaps you could ditch if_bridge(4) and epair(4), and try > >ng_eiface(4) with ng_bridge(4) instead? Works rock-solid 24/7 here > >on 11.2 / 11.3. > > Does it work with pf? In th

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Goran Mekić via freebsd-net
On December 20, 2019 11:22:01 AM UTC, Marko Zec wrote: >Perhaps you could ditch if_bridge(4) and epair(4), and try ng_eiface(4) >with ng_bridge(4) instead? Works rock-solid 24/7 here on 11.2 / 11.3. > >Marko > >On Fri, 20 Dec 2019 11:19:24 +0100 >"Patrick M. Hausen" wrote: > >> Hi all, >> >> we

Re: Continuing problems in a bridged VNET setup

2019-12-20 Thread Marko Zec
Perhaps you could ditch if_bridge(4) and epair(4), and try ng_eiface(4) with ng_bridge(4) instead? Works rock-solid 24/7 here on 11.2 / 11.3. Marko On Fri, 20 Dec 2019 11:19:24 +0100 "Patrick M. Hausen" wrote: > Hi all, > > we still experience occasional network outages in production, > yet h

Continuing problems in a bridged VNET setup

2019-12-20 Thread Patrick M. Hausen
Hi all, we still experience occasional network outages in production, yet have not been able to find the root cause. We run around 50 servers with VNET jails. some of them with a handful, the busiest ones with 50 or more jails each. Every now and then the jails are not reachable over the net, an