Re: Re : Re: netgraph and vpp

2023-11-26 Thread Jim Thompson
On Nov 25, 2023 at 4:09:29 AM, Benoit Chesneau wrote: > > Thanks for your answer. So i guess if we want to build a modern router > without custom code, vpp is the way to go in term de performance? > Well, that’s the path I chose back in 2016, yes. (Might note that I also run the pfsense project

Re : Re: netgraph and vpp

2023-11-25 Thread Benoit Chesneau
Thanks for your answer. So i guess if we want to build a modern router without custom code, vpp is the way to go in term de performance? One thing i really miss ito cross connect 2 interfaces without using a bridge. Somethibg really easy and performant with vpp... Benoit Le sam. 25 nov. 2023 à

Re: netgraph and vpp

2023-11-24 Thread Jim Thompson
On Nov 24, 2023 at 12:48:07 AM, Benoit Chesneau wrote: > netgraph and vpp looks similar in their intent. Both are graphs to > process packets. > > I thought that usinv netgraph sounds interresting to build a modern > router or cpe. What about the perforance? Did anyone compRe? Also is there > an

Re: netgraph with ng_netflow and ng_gridge nodes

2021-02-06 Thread petru garstea
If you like to understand your network, try: # ngctl dot [-c] and paste the output to http://www.webgraphviz.com/ I used it when was building the graph :) On 2/6/21 11:48 AM, Lutz Donnerhacke wrote: On Sat, Feb 06, 2021 at 11:10:29AM -0500, petru garstea wrote: Greetings, I have come up with

Re: netgraph with ng_netflow and ng_gridge nodes

2021-02-06 Thread petru garstea
Greetings, I have come up with a graph with no use of ng_tee, ng_hub or ng_one2many. Also I validated the flows on a collector In case anybody has the same use case I am sharing the graph mkpeer re0: netflow lower iface0 name re0:lower netflow connect re0: netflow: upper out1 mkpeer netflow: b

Re: netgraph with ng_netflow and ng_gridge nodes

2021-02-06 Thread Lutz Donnerhacke
On Sat, Feb 06, 2021 at 11:10:29AM -0500, petru garstea wrote: > Greetings, > > I have come up with a graph with no use of ng_tee, ng_hub or ng_one2many. > > Also I validated the flows on a collector > > In case anybody has the same use case I am sharing the graph > > mkpeer re0: netflow lower ifac

Re: netgraph with ng_netflow and ng_gridge nodes

2021-02-02 Thread Lutz Donnerhacke
On Tue, Feb 02, 2021 at 09:16:49PM +0100, Lutz Donnerhacke wrote: > fxp0.lower -- iface0.netgraph.out0 -- link1.bridge.link2 -- upper.fxp0 > \.link3 -- ether.eiface The strange thing is, that both fxp0 and eiface provide an interface to the kernel I

Re: netgraph with ng_netflow and ng_gridge nodes

2021-02-02 Thread Lutz Donnerhacke
On Tue, Feb 02, 2021 at 10:05:15AM -0500, petru garstea wrote: > Hi, > > I need help to unify 2 netgraphs > > 1st ng_bridge netgraph > > ngctl mkpeer fxp0: bridge lower link0 > ngctl connect fxp0: em0:lower upper link1 > ngctl name fxp0:lower em0Bridge > ngctl mkpeer fxp0:lower eiface link3 ether

Re: Netgraph VLANs on Hyper-V

2020-04-10 Thread Paul Thornton
Hi, I have recently been testing with jails, vnet and netgraph on ESXi - so not Hyper-V - but to make this work I needed to: ngctl msg vmx0: setpromisc 1 ngctl msg vmx0: setautosrc 0 outside of the jail when setting up netgraph (where vmx0 is the "real" NIC that the ng_vlans are part of).

Re: Netgraph VLANs on Hyper-V

2020-04-10 Thread Reshad Patuck
Hi Sami, I the interfaces in the VNET jails are both epair interfaces with auto-generated mac addresses in the 02:xx:xx:xx:xx:xx range. When I use if_vlan I can connect to the IP address in the jail. For ng_vlan I can not connect to the IP address in the jail. I will test again using a mac addre

Re: Netgraph VLANs on Hyper-V

2020-04-10 Thread Sami Halabi
Hi, If I recall correctly it has something to do with Mac addresses netgraph expose not recognized by Hyper-v and maybe other Hypetvisors. Myabe someone can shed more light on it. Sami בתאריך יום ו׳, 10 באפר׳ 2020, 10:07, מאת Reshad Patuck ‏< reshadpatu...@gmail.com>: > Hi, > > I am trying to u

Re: NETGRAPH- bridge vlans using netgraph help

2018-05-10 Thread Julian Elischer
On 9/5/18 11:24 pm, Abdullah Tariq wrote: a picture would do wonders to understand what he wants.  Apologies for being AWOL  Attaching an image link: https://ibb.co/nt1s4S Ok so, it looks like there i a problem in concepts. FreeBSD doesn't really know about tags inside the machine.. It

Re: NETGRAPH- bridge vlans using netgraph help

2018-05-09 Thread Eugene Grosbein
09.05.2018 22:24, Abdullah Tariq wrote: > a picture would do wonders to understand what he wants. > > Apologies for being AWOL > Attaching an image link: https://ibb.co/nt1s4S As I've previously said, this pictures switch-style behaviour. FreeBSD is not a switch, and you get exactly same

Re: NETGRAPH- bridge vlans using netgraph help

2018-05-09 Thread Abdullah Tariq
> > a picture would do wonders to understand what he wants. Apologies for being AWOL Attaching an image link: https://ibb.co/nt1s4S On Tue, May 1, 2018 at 8:39 PM, Julian Elischer wrote: > On 1/5/18 11:16 pm, Freddie Cash wrote: > > On Tue, May 1, 2018 at 6:08 AM, Julian Elischer > wrote: >

Re: NETGRAPH- bridge vlans using netgraph help

2018-05-01 Thread Julian Elischer
On 1/5/18 11:16 pm, Freddie Cash wrote: On Tue, May 1, 2018 at 6:08 AM, Julian Elischer >wrote: On 1/5/18 2:08 am, Eugene Grosbein wrote: 01.05.2018 1:03, Freddie Cash wrote: On Mon, Apr 30, 2018 at 10:59 AM, Eugene Grosbein mailto

Re: NETGRAPH- bridge vlans using netgraph help

2018-05-01 Thread Freddie Cash
On Tue, May 1, 2018 at 6:08 AM, Julian Elischer wrote: > On 1/5/18 2:08 am, Eugene Grosbein wrote: > >> 01.05.2018 1:03, Freddie Cash wrote: >> >> On Mon, Apr 30, 2018 at 10:59 AM, Eugene Grosbein >> >wrote: >>> >>> > What the OP is trying to do is have PC1 send un

Re: NETGRAPH- bridge vlans using netgraph help

2018-05-01 Thread Julian Elischer
On 1/5/18 2:08 am, Eugene Grosbein wrote: 01.05.2018 1:03, Freddie Cash wrote: On Mon, Apr 30, 2018 at 10:59 AM, Eugene Grosbein mailto:eu...@grosbein.net>>wrote: > What the OP is trying to do is have PC1 send untagged packets to igb0 on FreeBSD which is configured for tagged vlan 5.

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-30 Thread Eugene Grosbein
01.05.2018 1:03, Freddie Cash wrote: > On Mon, Apr 30, 2018 at 10:59 AM, Eugene Grosbein >wrote: > > > What the OP is trying to do is have PC1 send untagged packets to igb0 > on FreeBSD which is configured for tagged vlan 5. > > Then bridge the packets to igb1

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-30 Thread Freddie Cash
On Mon, Apr 30, 2018 at 10:59 AM, Eugene Grosbein wrote: > 30.04.2018 23:46, Freddie Cash wrote: > > > What the OP is trying to do is have PC1 send untagged packets to igb0 on > FreeBSD which is configured for tagged vlan 5. > > Then bridge the packets to igb1 which is also configured for tagged

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-30 Thread Eugene Grosbein
30.04.2018 23:46, Freddie Cash wrote: > What the OP is trying to do is have PC1 send untagged packets to igb0 on > FreeBSD which is configured for tagged vlan 5. > Then bridge the packets to igb1 which is also configured for tagged vlan 5. > Then send the packets out, untagged, to PC2. Why wou

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-30 Thread Freddie Cash
On Sat, Apr 28, 2018 at 12:55 PM, Eugene Grosbein wrote: > 28.04.2018 21:57, Freddie Cash wrote: > > > If you want to think of it in switch terms, FreeBSD supports access > ports (untagged vlan) and trunk ports (tagged vlans). > > But there's no support for hybrid ports (tagged vlans with a PVID

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-29 Thread Abdullah
>and read this: >https://people.freebsd.org/~julian/netgraph.htm Will look into it too, thanks Julian. Regards Abdullah On Sun, Apr 29, 2018, 21:41 Julian Elischer wrote: > On 28/4/18 8:28 pm, Eugene Grosbein wrote: > > 28.04.2018 19:10, Abdulla

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-29 Thread Julian Elischer
On 28/4/18 8:28 pm, Eugene Grosbein wrote: 28.04.2018 19:10, Abdullah Tariq wrote: However, we still have several ways to bridge tagged traffic by means of creation multiple bridges (one per vlan) or using ng_vlan+ng_bridge to do the same. bridge1 will contain vlan 1 bridge2 will

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-29 Thread Abdullah
> Sorry but getting a little confused here. > Lets say i have 2 interfaces igb0, igb1 and i want them to have tagged traffic. > I create vlan1 tagged 10 on igb0 > and vlan2 tagged 10 on igb1 > Next i create bridge0, assign vlan1 and vlan2 (no IPs on either the bridge, physical interface on VLANs)?

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-29 Thread Abdullah
Yes. Regards Abdullah On Sun, Apr 29, 2018, 00:50 Eugene Grosbein wrote: > 28.04.2018 20:16, Abdullah Tariq wrote: > > > Sorry but getting a little confused here. > > Lets say i have 2 interfaces igb0, igb1 and i want them to have tagged > traffic. > > I create vlan1 tagged 10 on igb0 > > and v

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Eugene Grosbein
28.04.2018 21:57, Freddie Cash wrote: > If you want to think of it in switch terms, FreeBSD supports access ports > (untagged vlan) and trunk ports (tagged vlans). > But there's no support for hybrid ports (tagged vlans with a PVID on the port > that adds tags to untagged traffic). Not entirely

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Eugene Grosbein
28.04.2018 20:16, Abdullah Tariq wrote: > Sorry but getting a little confused here. > Lets say i have 2 interfaces igb0, igb1 and i want them to have tagged > traffic. > I create vlan1 tagged 10 on igb0 > and vlan2 tagged 10 on igb1 > Next i create bridge0, assign vlan1 and vlan2 (no IPs on eith

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Abdullah Tariq
> > If you want to think of it in switch terms, FreeBSD supports access ports > (untagged vlan) and trunk ports (tagged vlans). But there's no support for > hybrid ports (tagged vlans with a PVID on the port that adds tags to > untagged traffic). > > What you are trying to do is create a hybrid por

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Freddie Cash
If you want to think of it in switch terms, FreeBSD supports access ports (untagged vlan) and trunk ports (tagged vlans). But there's no support for hybrid ports (tagged vlans with a PVID on the port that adds tags to untagged traffic). What you are trying to do is create a hybrid port with a vlan

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Freddie Cash
On Sat, Apr 28, 2018, 6:17 AM Abdullah Tariq wrote: > > > > No, its simplier: single bridge contains all interfaces corresponting to > > ports of single vlan. > > You can bridge plain igb* interfaces for untagged ports; or bridge > > interface igbX with interface vlanY > > when one port carries u

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Abdullah Tariq
> > No, its simplier: single bridge contains all interfaces corresponting to > ports of single vlan. > You can bridge plain igb* interfaces for untagged ports; or bridge > interface igbX with interface vlanY > when one port carries untagged frames of vlan and another ports carries > tagged frames o

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Eugene Grosbein
28.04.2018 19:10, Abdullah Tariq wrote: > However, we still have several ways to bridge tagged traffic > by means of creation multiple bridges (one per vlan) or using > ng_vlan+ng_bridge to do the same. > > bridge1 will contain vlan 1 > bridge2 will containn vlan2 > > and bridge3 sho

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Eugene Grosbein
28.04.2018 19:10, Abdullah Tariq wrote: > You are still ignoring requests to not top-post and I'm getting tired to > fix it for you. > I may just stop responding. > Apologies again, last i thought i had replied to all after your first > pointing out😷 You don't understand what top-posti

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Abdullah Tariq
> > You are still ignoring requests to not top-post and I'm getting tired to > fix it for you. > I may just stop responding. > Apologies again, last i thought i had replied to all after your first pointing out😷 If you really want to bridge 802.1q trunks, you should be stating so from > the beginn

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Eugene Grosbein
28.04.2018 16:26, Abdullah wrote: You are still ignoring requests to not top-post and I'm getting tired to fix it for you. I may just stop responding. >> You still top-posting. Please don't. >> It is possible to replicate *behaviour* but not configuration style. >> Unless you have re

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Abdullah
Configuration style doesn't really matter. I am trying to figure out how to make tagged traffic talk in a bridge. I have always had good support from bsd people over the last 4 5 years since i started using it, maybe it's time to add something to it :) What gives me hope is that linux (cumulus lin

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Eugene Grosbein
28.04.2018 12:49, Abdullah Tariq wrote: You still top-posting. Please don't. > > And please do not top-post and reply to the list, not privately. > Thank you. > > sorry for that. > > They do but that's not what you need. You deal with untagged frames > on igb5, > > s

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-28 Thread Abdullah Tariq
So it is not possible to replicate behaviour of standard L2 switches using freebsd where we have different VLANs, access and trunk ports? On Fri, Apr 27, 2018 at 9:16 PM, Eugene Grosbein wrote: > 27.04.2018 22:57, Abdullah Tariq wrote: > > > And please do not top-post and reply to the list,

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-27 Thread Eugene Grosbein
27.04.2018 22:57, Abdullah Tariq wrote: > And please do not top-post and reply to the list, not privately. Thank > you. > > sorry for that. > > > They do but that's not what you need. You deal with untagged frames on > igb5, > so do not create any vlan on top on igb5 but use

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-27 Thread Abdullah Tariq
> > And please do not top-post and reply to the list, not privately. Thank you. sorry for that. > > They do but that's not what you need. You deal with untagged frames on > igb5, > so do not create any vlan on top on igb5 but use it directly: > ifconfig bridge10 create addm igb5 addm vlan3 up s

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-27 Thread Eugene Grosbein
27.04.2018 21:39, Abdullah Tariq wrote: > > No, i am trying to bridge untagged frames between vlans of these > interfaces. Is it doable? > > Sure. If you need to accept untagged frames from igb5, add tag 5 and send > over igb6, > just create a bridge and add igb5 and vlan2 (vlan 5 v

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-27 Thread Slawa Olhovchenkov
On Fri, Apr 27, 2018 at 01:13:48AM +0700, Eugene Grosbein wrote: > 27.04.2018 0:58, Abdullah Tariq wrote: > > > I am trying to make 2 systems connected to freebsd box directly to be able > > to communicated with each other. Explanation diagram is attached > > > > ifconfig vlan2 create vlan 5 vla

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-27 Thread Eugene Grosbein
27.04.2018 21:28, Abdullah Tariq wrote: > No, i am trying to bridge untagged frames between vlans of these interfaces. > Is it doable? Sure. If you need to accept untagged frames from igb5, add tag 5 and send over igb6, just create a bridge and add igb5 and vlan2 (vlan 5 vlandev igb6) to the br

Re: NETGRAPH- bridge vlans using netgraph help

2018-04-26 Thread Eugene Grosbein
27.04.2018 0:58, Abdullah Tariq wrote: > I am trying to make 2 systems connected to freebsd box directly to be able > to communicated with each other. Explanation diagram is attached > > ifconfig vlan2 create vlan 5 vlandev igb5 > ifconfig vlan3 create vlan 5 vlandev igb6 > ifconfig bridge10 crea

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-25 Thread Eugene Grosbein
25.04.2018 21:40, Reshad Patuck пишет: > Hey, > ​ > I have tried to write some c code to add a bpf filter to my ng_bpf node, but > its just segfaulting. > My c is not good enough to debug this. > ​ > What baffles me is that when I load a filter for 250 IP addresses using the > command in this lin

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-25 Thread Reshad Patuck
Hey, ​ I have tried to write some c code to add a bpf filter to my ng_bpf node, but its just segfaulting. My c is not good enough to debug this. ​ What baffles me is that when I load a filter for 250 IP addresses using the command in this link https://paste.ee/d/BHOoG/3 it loads fine. If I use 'n

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Eugene Grosbein
31.03.2018 20:46, Reshad Patuck wrote: ​ > Please let me know what I am doing wrong with the ngctl config file and > if there is another way, maybe something more direct to load a binary bpf > filter directly into ng_bpf. There is also netgraph(3) - Netgraph User Library. You can use it within y

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Eugene Grosbein
01.04.2018 23:19, Reshad Patuck wrote: > Yes I do remove the \" and replace it with just " in the file I use with the > `ngctl -f` command. > ​ > Here is the link to the file and everything that I am using to setup the BPF > program. > ​ > https://paste.ee/p/BHOoG > ​ > It contains the following

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Reshad Patuck
Hi Eugene, ​ Yes I do remove the \" and replace it with just " in the file I use with the `ngctl -f` command. ​ Here is the link to the file and everything that I am using to setup the BPF program. ​ https://paste.ee/p/BHOoG ​ It contains the following: - ngtl-command -> the ngctl command which r

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Eugene Grosbein
01.04.2018 15:36, Reshad Patuck пишет: > Hi Eugene, > ​ > Thanks for your quick reply. > ​ > The issue that I am facing is for a list of 250 IP addresses, I can generate > a bpf filter that works when I specify it on the command line. > ``` > # ngctl msg em1-bpf: setprogram { thisHook=\"in\" ifMat

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Reshad Patuck
Hi Eugene, ​ Thanks for your quick reply. ​ The issue that I am facing is for a list of 250 IP addresses, I can generate a bpf filter that works when I specify it on the command line. ``` # ngctl msg em1-bpf: setprogram { thisHook=\"in\" ifMatch=\"out\" bpf_prog_len=258 bpf_prog=[ { code=40 jt=0

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-03-31 Thread Eugene Grosbein
31.03.2018 20:46, Reshad Patuck wrote: [skip] > Please let me know what I am doing wrong with the ngctl config file and if > there is another way, > maybe something more direct to load a binary bpf filter directly into ng_bpf. [skip] Please read ngctl(8) manual page carefully. There are other

Re: netgraph: item->depth not set properly for some queued items

2012-09-25 Thread Julian Elischer
On 9/25/12 1:07 PM, Ryan Stone wrote: When ng_snd_item tries to send an item, has to acquire a "lock" on the node that it's sending to (I put lock in quotes because this isn't a standard FreeBSD synchronization primitive like a rw_lock or anything; netgraph has rolled its own synchronization prim

Re: Netgraph and Netflow-v9

2012-06-11 Thread Kolasinski, Brent D.
It appears that it may be something with my current collector. While debugging today, I decided to attempt to run Silk locally on the FreeBSD netflow box. When exporting locally, it is reading the netflow-v9 records. Yay! Our collector is an older Linux box with a manually compiled current ve

Re: Netgraph and Netflow-v9

2012-06-11 Thread Alexander V. Chernikov
On 11.06.2012 20:55, Kolasinski, Brent D. wrote: On 6/9/12 5:01 AM, "Alexander V. Chernikov" wrote: It should disappear after 5-10 minutes. We're using several FreeBSD v9 sensors with flowd and it seems to run fine (except first 5 minutes while waiting for template). I'm aware about the probl

Re: Netgraph and Netflow-v9

2012-06-11 Thread Kolasinski, Brent D.
On 6/9/12 5:01 AM, "Alexander V. Chernikov" wrote: >It should disappear after 5-10 minutes. We're using several FreeBSD v9 >sensors with flowd and it seems to run fine (except first 5 minutes >while waiting for template). I'm aware about the problem with templates >timeout working incorrectly an

Re: Netgraph and Netflow-v9

2012-06-09 Thread Alexander V. Chernikov
On 09.06.2012 00:04, Kolasinski, Brent D. wrote: Hi All, I have been doing some tests with the FreeBSD ng_netflow module for netflow generation. I am trying to export v9 netflow records to another server running SiLK (which can receive v9 Netlfow from our Cisco routers just fine). When exporti

Re: Netgraph message size limitation.

2012-03-27 Thread Julian Elischer
On 3/27/12 9:58 AM, Arnaud Lacombe wrote: Hi Julian, In `sys/netgraph/ng_base.c', there is the following: static int ng_generic_msg(node_p here, item_p item, hook_p lasthook) { case NGM_BINARY2ASCII: { int bufSize = 20 * 1024; /* XXX hard coded constant */ [...] c

Re: Netgraph VLAN in VLAN (q-in-q)

2011-12-28 Thread Adrian Chadd
On 28 December 2011 11:37, wrote: > Hi! > > > If you need custom encap tag, use this: > http://www.freebsd.org/cgi/query-pr.cgi?pr=161908 > > Scheme: ng_ether <-> ng_vlan(outer/metro tag) <-> ng_vlan(inner/customer > tag) <-> ng_eiface Hm, have you found someone to review this and commit it to F

RE: Netgraph VLAN in VLAN (q-in-q)

2011-12-28 Thread rozhuk . im
Hi! If you need custom encap tag, use this: http://www.freebsd.org/cgi/query-pr.cgi?pr=161908 Scheme: ng_ether <-> ng_vlan(outer/metro tag) <-> ng_vlan(inner/customer tag) <-> ng_eiface > -Original Message- > From: owner-freebsd-...@freebsd.org [mailto:owner-freebsd- > n...@freebsd.or

Re: Netgraph multithreading

2011-11-11 Thread Alexander Motin
Hi. > Is Netgraph supports multithreading in FreeBSD 8.1? Generally yes, but there are many different cases. Netgraph uses direct function calls to handle traffic. It means that when it is possible it runs directly in network card interrupt threads contexts, or if net.isr.direct sysctl set to 0 (

Re: Netgraph udp tunneling

2011-07-05 Thread Arnaud Lacombe
Hi, 2011/7/4 Alexey V. Panfilov : > Hi! > > We've three servers, connected as S1 <-ng_tunnel-> S2 <-ng_tunnel-> S3. > > Over tunnels runs BGP with full-view. > > Sometimes on S2 occures fatal trap with automatic reboot or without reboot > at all. It not depends of net loading (mbps or pps). > > If

Re: Netgraph udp tunneling

2011-07-05 Thread Alexey V. Panfilov
05.07.2011 20:57, Arnaud Lacombe wrote: Hi, 2011/7/4 Alexey V. Panfilov: Hi! We've three servers, connected as S1<-ng_tunnel-> S2<-ng_tunnel-> S3. Over tunnels runs BGP with full-view. Sometimes on S2 occures fatal trap with automatic reboot or without reboot at all. It not depends of net

Re: Netgraph/mpd5 stability issues

2011-03-16 Thread Eugene Grosbein
On 16.03.2011 19:21, Mike Tancsa wrote: > A new one it seems. On the console, I have one with full crashdump too. Crashdump and other files are available on request. GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public Lice

Re: Netgraph/mpd5 stability issues

2011-03-01 Thread Eugene Grosbein
Something new in my logs yesterday: Mar 1 16:06:38 k-45-pc-1 kernel: Accessing freed node node: ID [2e5c7a]: type 'tee', 0 hooks, flags 0x9, 0 refs, mpd11699-vlan373-781-lt: Mar 1 16:06:38 k-45-pc-1 kernel: Last active @ /home/src/sys/netgraph/ng_base.c, line 2257 Mar 1 16:06:38 k-45-pc-1 ker

Re: Netgraph/mpd5 stability issues

2011-02-16 Thread Przemyslaw Frasunek
> On 14.01.2011 18:46, Mike Tancsa wrote: > I also have very loaded mpd/PPPoE servers that panic all the time: > > http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/153255 > http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/153671 I've just got yet another panic on mpd5 box after about 30 days of upt

Re: Netgraph/mpd5 stability issues

2011-02-16 Thread Gleb Smirnoff
On Wed, Feb 16, 2011 at 03:04:09PM +0600, Eugene Grosbein wrote: E> On 16.02.2011 14:46, Gleb Smirnoff wrote: E> > On Wed, Feb 16, 2011 at 10:13:59AM +0600, Eugene Grosbein wrote: E> > E> I run AMD64 with 4GB of memory, lots of memory is free and E> > E> I still get panics often, sometimes two in a

Re: Netgraph/mpd5 stability issues

2011-02-16 Thread Eugene Grosbein
On 16.02.2011 14:46, Gleb Smirnoff wrote: > On Wed, Feb 16, 2011 at 10:13:59AM +0600, Eugene Grosbein wrote: > E> I run AMD64 with 4GB of memory, lots of memory is free and > E> I still get panics often, sometimes two in a couple of hours. > E> It does not seem memory exhaustion to me. It seems as

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Mike Tancsa
On 1/31/2011 12:10 PM, Julian Elischer wrote: > On 1/31/11 8:58 AM, Julian Elischer wrote: >> On 1/31/11 7:13 AM, Przemyslaw Frasunek wrote: And in this one, can you please show *hook->hk_peer ? >>> (kgdb) print *hook->hk_peer >>> $2 = { >>>hk_name = "\b\000\000\000 >>> \000\000\000\004\00

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Julian Elischer
On 1/31/11 8:58 AM, Julian Elischer wrote: On 1/31/11 7:13 AM, Przemyslaw Frasunek wrote: And in this one, can you please show *hook->hk_peer ? (kgdb) print *hook->hk_peer $2 = { hk_name = "\b\000\000\000 \000\000\000\004\000\000\000\001\000\000\000ŐRí\003\003ö\0248cmd4\000\000\000", hk_p

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Julian Elischer
On 1/31/11 7:13 AM, Przemyslaw Frasunek wrote: And in this one, can you please show *hook->hk_peer ? (kgdb) print *hook->hk_peer $2 = { hk_name = "\b\000\000\000 \000\000\000\004\000\000\000\001\000\000\000ŐRí\003\003ö\0248cmd4\000\000\000", hk_private = 0x0, hk_flags = 0, hk_refs = 0, hk_

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Przemyslaw Frasunek
> And in this one, can you please show *hook->hk_peer ? (kgdb) print *hook->hk_peer $2 = { hk_name = "\b\000\000\000 \000\000\000\004\000\000\000\001\000\000\000ŐRí\003\003ö\0248cmd4\000\000\000", hk_private = 0x0, hk_flags = 0, hk_refs = 0, hk_type = 0, hk_peer = 0x0, hk_node = 0x0, hk_hooks

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Przemyslaw Frasunek
> (kgdb) print *ng_name_hash[116].lh_first It looks like this one is corrupted: (kgdb) print *ng_name_hash[116].lh_first.nd_nodes.le_next.nd_nodes.le_next.nd_nodes.le_next.nd_nodes.le_next $19 = {nd_name = "ng258", '\0' , nd_type = 0xc61871a0, nd_flags = 0, nd_refs = 1, nd_numhooks = 0, nd_priv

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Gleb Smirnoff
On Mon, Jan 31, 2011 at 02:40:55PM +0100, Przemyslaw Frasunek wrote: P> > In this dump, can we seek for where did 0x74 came from? Can you look at P> > ng_name_hash[hash]? P> P> (kgdb) print hash P> No symbol "hash" in current context. P> (kgdb) info all P> eax0xff9a -102 P> e

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Przemyslaw Frasunek
> In this dump, can we seek for where did 0x74 came from? Can you look at > ng_name_hash[hash]? (kgdb) print hash No symbol "hash" in current context. (kgdb) info all eax0xff9a -102 ecx0xe7ce6895 -405903211 edx0xff9a -102 ebx

Re: Netgraph/mpd5 stability issues

2011-01-31 Thread Gleb Smirnoff
On Fri, Jan 14, 2011 at 10:05:31AM +0100, Przemyslaw Frasunek wrote: P> Hello, P> P> I'm using mpd 5.5 on three PPPoE routers, each servicing about 300 PPPoE P> concurrent sessions. Routers are based on Intel SR1630GP hardware platforms and P> runs FreeBSD 7.3-RELEASE. P> P> I'm experiencing sta

Re: Netgraph/mpd5 stability issues

2011-01-18 Thread Mike Tancsa
On 1/17/2011 11:14 AM, Eugene Grosbein wrote: > On 17.01.2011 17:41, Mike Tancsa wrote: > I also have stability issues on RELENG_8. http://www.freebsd.org/cgi/query-pr.cgi?pr=153497 >>> >>> Do you change net.isr.direct from default 1 to 0 for your box? >> >> No, I leave it at 1 >> >

Re: Netgraph/mpd5 stability issues

2011-01-17 Thread Mike Tancsa
Thanks, I will give those values a try! ---Mike On 1/17/2011 11:14 AM, Eugene Grosbein wrote: > On 17.01.2011 17:41, Mike Tancsa wrote: > I also have stability issues on RELENG_8. http://www.freebsd.org/cgi/query-pr.cgi?pr=153497 >>> >>> Do you change net.isr.direc

Re: Netgraph/mpd5 stability issues

2011-01-17 Thread Eugene Grosbein
On 17.01.2011 17:41, Mike Tancsa wrote: >>> I also have stability issues on RELENG_8. >>> >>> http://www.freebsd.org/cgi/query-pr.cgi?pr=153497 >> >> Do you change net.isr.direct from default 1 to 0 for your box? > > No, I leave it at 1 > > ---Mike I was experiencing some instability with

Re: Netgraph/mpd5 stability issues

2011-01-17 Thread Mike Tancsa
On 1/17/2011 5:48 AM, Eugene Grosbein wrote: > On 14.01.2011 18:46, Mike Tancsa wrote: > >> I also have stability issues on RELENG_8. >> >> http://www.freebsd.org/cgi/query-pr.cgi?pr=153497 > > Do you change net.isr.direct from default 1 to 0 for your box? No, I leave it at 1 ---Mike >

Re: Netgraph/mpd5 stability issues

2011-01-17 Thread Eugene Grosbein
On 14.01.2011 18:46, Mike Tancsa wrote: > I also have stability issues on RELENG_8. > > http://www.freebsd.org/cgi/query-pr.cgi?pr=153497 Do you change net.isr.direct from default 1 to 0 for your box? ___ freebsd-net@freebsd.org mailing list http://lis

Re: Netgraph/mpd5 stability issues

2011-01-14 Thread Eugene Grosbein
On 14.01.2011 18:46, Mike Tancsa wrote: >> I'm using mpd 5.5 on three PPPoE routers, each servicing about 300 PPPoE >> concurrent sessions. Routers are based on Intel SR1630GP hardware platforms >> and >> runs FreeBSD 7.3-RELEASE. >> >> I'm experiencing stability issues related to Netgraph. None

Re: Netgraph/mpd5 stability issues

2011-01-14 Thread Mike Tancsa
On 1/14/2011 4:05 AM, Przemyslaw Frasunek wrote: > Hello, > > I'm using mpd 5.5 on three PPPoE routers, each servicing about 300 PPPoE > concurrent sessions. Routers are based on Intel SR1630GP hardware platforms > and > runs FreeBSD 7.3-RELEASE. > > I'm experiencing stability issues related to

Re: Netgraph performance with ng_ipfw

2010-03-04 Thread Julian Elischer
Eugene Perevyazko wrote: On Sat, Jan 23, 2010 at 03:32:11AM +0600, Евгений wrote: Hi, I have several routers under heavy load, running FreeBSD 7.2 These routers use Netgraph to impelement traffic shaping and accouting (using ng_car and ng_netflow nodes). [skipped] The second question is abou

Re: Netgraph performance with ng_ipfw

2010-03-04 Thread Eugene Perevyazko
On Sat, Jan 23, 2010 at 03:32:11AM +0600, Евгений wrote: > Hi, > I have several routers under heavy load, running FreeBSD 7.2 > These routers use Netgraph to impelement traffic shaping and accouting > (using ng_car and ng_netflow nodes). [skipped] > The second question is about the effectiveness

Re: Netgraph performance with ng_ipfw

2010-01-22 Thread Julian Elischer
Luigi Rizzo wrote: On Sat, Jan 23, 2010 at 03:32:11AM +0600, ??? wrote: Hi, I have several routers under heavy load, running FreeBSD 7.2 These routers use Netgraph to impelement traffic shaping and accouting (using ng_car and ng_netflow nodes). Packets are passed from firewall to netgraph

Re: Netgraph performance with ng_ipfw

2010-01-22 Thread Luigi Rizzo
On Sat, Jan 23, 2010 at 03:32:11AM +0600, ??? wrote: > Hi, > I have several routers under heavy load, running FreeBSD 7.2 > These routers use Netgraph to impelement traffic shaping and accouting > (using ng_car and ng_netflow nodes). > Packets are passed from firewall to netgraph using the fo

Re: netgraph mkpeer and connect failures with ng_ipfw and ng_nat

2010-01-15 Thread Erik Klavon
On Thu, Jan 14, 2010 at 02:46:35PM -0800, Erik Klavon wrote: > I have several dual processor, single core amd64 machines running > 8.0p1. These machines use netgraph to implement one to one NAT with > one ng_nat(4) node for each network client behind them. ipfw(8) rules > direct traffic to netgraph

Re: netgraph mkpeer and connect failures with ng_ipfw and ng_nat

2010-01-14 Thread Erik Klavon
On Thu, Jan 14, 2010 at 06:26:56PM -0800, Julian Elischer wrote: > Erik Klavon wrote: > >On Thu, Jan 14, 2010 at 04:22:31PM -0800, Julian Elischer wrote: > >>Erik Klavon wrote: > >>>Here are the hooks for one ng_nat(4) node of interest. At the time I > >>>obtained this information, this node was wo

Re: netgraph mkpeer and connect failures with ng_ipfw and ng_nat

2010-01-14 Thread Julian Elischer
Erik Klavon wrote: On Thu, Jan 14, 2010 at 04:22:31PM -0800, Julian Elischer wrote: Erik Klavon wrote: Here are the hooks for one ng_nat(4) node of interest. At the time I obtained this information, this node was working correctly. Everything in this output looks correct. sudo ngctl show ipfw:

Re: netgraph mkpeer and connect failures with ng_ipfw and ng_nat

2010-01-14 Thread Erik Klavon
On Thu, Jan 14, 2010 at 04:22:31PM -0800, Julian Elischer wrote: > Erik Klavon wrote: > >Here are the hooks for one ng_nat(4) node of interest. At the time I > >obtained this information, this node was working correctly. Everything > >in this output looks correct. > > > >sudo ngctl show ipfw:202182

Re: netgraph mkpeer and connect failures with ng_ipfw and ng_nat

2010-01-14 Thread Julian Elischer
Erik Klavon wrote: Here are the hooks for one ng_nat(4) node of interest. At the time I obtained this information, this node was working correctly. Everything in this output looks correct. sudo ngctl show ipfw:202182138 Name: WirelessNAT2182138 Type: nat ID: 62ee Num hooks

Re: Netgraph question - multiple kernels

2009-10-27 Thread Julian Elischer
remodeler wrote: My understanding is that I can bind multiple machines running netgraph into one large netgraph, by using something like ng_ksocket nodes bound with a tunneling device. you COULD do that, yes, but the two netgraphs are unaware of each other. By doing this, is the restriction

Re: netgraph modules won't unload after use

2009-03-28 Thread Ermal Luçi
On Sat, Mar 28, 2009 at 8:10 PM, Ermal Luçi wrote: > On Wed, Mar 18, 2009 at 5:16 PM, Julian Elischer wrote: >> Ash Gokhale wrote: >>> >>>  I'm developing a kernel module that will be doing inspection and needed >>> access to raw network frames, >>>  so I turned to netgraph  as the solution.Howev

Re: netgraph modules won't unload after use

2009-03-28 Thread Ermal Luçi
On Wed, Mar 18, 2009 at 5:16 PM, Julian Elischer wrote: > Ash Gokhale wrote: >> >>  I'm developing a kernel module that will be doing inspection and needed >> access to raw network frames, >>  so I turned to netgraph  as the solution.However it seems that netgraph >> will not permit a module >>  t

Re: netgraph modules won't unload after use

2009-03-18 Thread Julian Elischer
Ash Gokhale wrote: I'm developing a kernel module that will be doing inspection and needed access to raw network frames, so I turned to netgraph as the solution.However it seems that netgraph will not permit a module to unload once it's participated in a mkpeer/connect operation. Rebooting

Re: (Netgraph problem) Inner tag and outer tag swapped

2008-08-08 Thread Julian Elischer
Original Message- From: Julian Elischer [mailto:[EMAIL PROTECTED] Sent: Friday, August 08, 2008 5:12 PM To: Younger Wang Subject: Re: (Netgraph problem) Inner tag and outer tag swapped Younger Wang wrote: Hi, fxp0 is connected to a trunk port. Frames tagged with VID=201 arrives at fxp0

RE: (Netgraph problem) Inner tag and outer tag swapped

2008-08-08 Thread Younger Wang
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Younger Wang Sent: Saturday, August 09, 2008 12:29 AM To: Julian Elischer Cc: freebsd-net@freebsd.org Subject: RE: (Netgraph problem) Inner tag and outer tag swapped Hi, I expect to see [Ether header][tag 4000

RE: (Netgraph problem) Inner tag and outer tag swapped

2008-08-08 Thread Younger Wang
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Younger Wang Sent: Saturday, August 09, 2008 12:29 AM To: Julian Elischer Cc: freebsd-net@freebsd.org Subject: RE: (Netgraph problem) Inner tag and outer tag swapped Hi, I expect to see [Ether header][tag 4000][tag 201

RE: (Netgraph problem) Inner tag and outer tag swapped

2008-08-08 Thread Younger Wang
Younger Wang -Original Message- From: Julian Elischer [mailto:[EMAIL PROTECTED] Sent: Friday, August 08, 2008 5:12 PM To: Younger Wang Subject: Re: (Netgraph problem) Inner tag and outer tag swapped Younger Wang wrote: > Hi, > > > > fxp0 is connected to a trunk port. Fra

  1   2   3   4   >