Re: fbsd amd64 and fast_ipsec

2007-03-15 Thread Bjoern A. Zeeb
On Wed, 14 Mar 2007, rms_zaphod wrote: Hi , OK, I have used these ken mods for my file server/nat/router/firewall servers for years. (kern ops then question) options FAST_IPSEC device crypto With 6.2, with latest (3.13.07) cvsup -L 2 -h `(fastest_cvsup -q -c us )` /root/stable-supfile make b

Re: Generic ioctl and ether_ioctl don't agree

2007-03-15 Thread Yar Tikhiy
On Wed, Mar 14, 2007 at 12:50:12PM +, Bruce M. Simpson wrote: > Yar Tikhiy wrote: > >Hi folks, > > > >Quite a while ago I noticed that our ioctl handlers get the ioctl > >command via u_long, but ether_ioctl()'s command argument is int. > >This disarray dates back to 1998, when ioctl functions s

Re: Generic ioctl and ether_ioctl don't agree

2007-03-15 Thread Yar Tikhiy
On Wed, Mar 14, 2007 at 10:01:38AM -0500, Brooks Davis wrote: > On Wed, Mar 14, 2007 at 01:20:23PM +0300, Yar Tikhiy wrote: > > Hi folks, > > > > Quite a while ago I noticed that our ioctl handlers get the ioctl > > command via u_long, but ether_ioctl()'s command argument is int. > > This disarray

Re: Scalability problem from route refcounting

2007-03-15 Thread Andre Oppermann
Kris Kennaway wrote: I have recently started looking at database performance over gigabit ethernet, and there seems to be a bottleneck coming from the way route reference counting is implemented. On an 8-core system it looks like we spend a lot of time waiting for the rtentry mutex: max

Re: kern/106722: [net] [patch] ifconfig may not connect an interface to known network

2007-03-15 Thread Andre Oppermann
Gleb Smirnoff wrote: I was afraid that this would raise an argument on multipath routing. Let's temporary do not speak about multipath but just decide what is the correct way to remove conflicting routes when we are assigning an IP prefix to a local interface? IMO when configuring a interface

IPv6 bridge0 link-local address

2007-03-15 Thread Tom Pusateri
I've configured a bridge0 interface that bridges fxp0 and em0. I have a global IPv6 address configured on it and IPv6 works fine. # ifconfig bridge0 bridge0: flags=8043 mtu 1500 inet x.x.x.82 netmask 0xfff0 broadcast x.x.x.95 inet6 2001:4877:1777:1001::1 prefixlen 64 e

CARP Question

2007-03-15 Thread Andrea Venturoli
Hello. I've got two servers configured as follows: a) /etc/rc.conf: ifconfig_xl0="inet 192.168.0.2 netmask 255.255.255.0" ifconfig_fxp0="inet 192.168.101.4 netmask 255.255.255.0" cloned_interfaces="carp0 carp1 carp2 carp3" ifconfig_carp0="vhid 1 advskew 100 pass 192.168.101.10" ifconfig_car

Re: IPv6 bridge0 link-local address

2007-03-15 Thread pluknet
On 15/03/07, Tom Pusateri <[EMAIL PROTECTED]> wrote: I've configured a bridge0 interface that bridges fxp0 and em0. I have a global IPv6 address configured on it and IPv6 works fine. # ifconfig bridge0 bridge0: flags=8043 mtu 1500 inet x.x.x.82 netmask 0xfff0 broadcast x.x.x.95

Re: CARP Question

2007-03-15 Thread Stefan Lambrev
Hi, Andrea Venturoli wrote: Hello. I've got two servers configured as follows: a) /etc/rc.conf: ifconfig_xl0="inet 192.168.0.2 netmask 255.255.255.0" ifconfig_fxp0="inet 192.168.101.4 netmask 255.255.255.0" cloned_interfaces="carp0 carp1 carp2 carp3" ifconfig_carp0="vhid 1 advskew 100 pass xx

Re: CARP Question

2007-03-15 Thread Andrea Venturoli
Stefan Lambrev wrote: man carp: net.inet.carp.preempt Allow virtual hosts to preempt each other. It is also used to failover carp interfaces as a group. When the option is enabled and one of the carp

Re: [PATCH] fbsd amd64 and fast_ipsec

2007-03-15 Thread rms_zaphod
Bjoern A. Zeeb wrote: > > On Wed, 14 Mar 2007, rms_zaphod wrote: > > Hi , > >> OK, I have used these ken mods for my file server/nat/router/firewall >> servers >> for years. (kern ops then question) >> >> options FAST_IPSEC >> device crypto >> >> With 6.2, with latest (3.13.07) cvsup -L 2 -h