Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Borja Marcos
On Jan 3, 2012, at 8:07 AM, Nikolay Denev wrote: > > On Jan 3, 2012, at 5:53 AM, Doug Barton wrote: > >> We have a pair of physical FreeBSD systems configured as routers >> designed to operate in an active/standby CARP configuration. Everything >> used to work fine, but since an upgrade to 8.2-

Re: how to debug non-working hole in nat

2012-01-03 Thread Randy Bush
ignore. i sorted it. randy ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: how to debug non-working hole in nat

2012-01-03 Thread Paul A. Procacci
> add divert natd all from any to any via bridge0 This nat's all internal traffic on your lan. You probably don't want this. I'd place the nat on the tun0 interface. Which leads me to If you machine receives a syn from the tun0 interface, what firewall rule is in place to redirect t

Re: Panic in the udp_input() under heavy load

2012-01-03 Thread Robert Watson
On Fri, 30 Dec 2011, Maxim Sobolev wrote: On 12/30/2011 4:46 PM, Maxim Sobolev wrote: I see. Would you guys mind if I put that NULL pointer check into the code for the time being and turn it into some kind of big nasty warning in 8-stable branch only? I could also open a ticket, put all deb

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Ed Maste
On Tue, Jan 03, 2012 at 09:07:56AM +0200, Nikolay Denev wrote: > Since I've had similar problem with Quagga after updating to 8.2-STABLE I'd > suggest > you to try setting "net.inet.tcp.signature_verify_input=0" and see if that > would help. > > Here is another thread about the similar (if not

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Borja Marcos
On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: > On Tue, Jan 03, 2012 at 09:07:56AM +0200, Nikolay Denev wrote: > >> Since I've had similar problem with Quagga after updating to 8.2-STABLE I'd >> suggest >> you to try setting "net.inet.tcp.signature_verify_input=0" and see if that >> would help.

Re: Use of spinlocks for TCP callouts

2012-01-03 Thread John Baldwin
On Monday, January 02, 2012 11:35:31 pm Vijay Singh wrote: > I have see the following call sequence in profiles: > > > called/total parents > index %timeself descendents called+selfname index > called/tota

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread John Baldwin
On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: > On Thu, Dec 29, 2011 at 03:27:26PM -0500, John Baldwin wrote: > J> - if_addr_uses.patch This changes callers of the existing macros to use > J> either read or write locks. This is the patch > that > J>

Re: how to debug non-working hole in nat

2012-01-03 Thread Ian Smith
On Tue, 3 Jan 2012 17:52:53 +0900, Randy Bush wrote: > ignore. i sorted it. Too late, sucked in .. diff from prior config might be bone enough? cheers, Ian ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Bjoern A. Zeeb
On 23. Dec 2011, at 20:08 , John Baldwin wrote: > The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in > in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure > that it uses after dropping the IF_ADDR_LOCK(). Based on other code that > uses > a similar pattern

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Borja Marcos
On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: > Thanks for the link Nikolay. > > Borja, I assume it's the PR submission form that gave you trouble - > sorry for that. Based on your report it sounds to me like the bug is > in OpenBGPd itself. If it works on OpenBSD with the TCP_MD5SIG option > th

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 17:47 , Borja Marcos wrote: > > On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: > >> Thanks for the link Nikolay. >> >> Borja, I assume it's the PR submission form that gave you trouble - >> sorry for that. Based on your report it sounds to me like the bug is >> in OpenBGPd its

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 12:35:30 pm Bjoern A. Zeeb wrote: > > On 23. Dec 2011, at 20:08 , John Baldwin wrote: > > > The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in > > in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure > > that it uses after dropping

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 10:03, Bjoern A. Zeeb wrote: > > On 3. Jan 2012, at 17:47 , Borja Marcos wrote: > >> >> On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: >> >>> Thanks for the link Nikolay. >>> >>> Borja, I assume it's the PR submission form that gave you trouble - >>> sorry for that. Based on your repo

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Hiroki Sato
Doug Barton wrote in <4f027bc0.1080...@freebsd.org>: do> We have a pair of physical FreeBSD systems configured as routers do> designed to operate in an active/standby CARP configuration. Everything do> used to work fine, but since an upgrade to 8.2-STABLE on December 29th do> the two routers do

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 19:00 , Doug Barton wrote: > On 01/03/2012 10:03, Bjoern A. Zeeb wrote: >> >> On 3. Jan 2012, at 17:47 , Borja Marcos wrote: >> >>> >>> On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: >>> Thanks for the link Nikolay. Borja, I assume it's the PR submission form t

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 11:16, Bjoern A. Zeeb wrote: > I was wondering from *where* you were updating, not to which revision. D'oh! Sorry ... the previous kernel was from stable/8 about 6 months ago. Well before Attilio's merge. Doug -- You can observe a lot just by watching. -- Yogi Berra

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread sthaug
> Doug, does your kernel have TCP_SIGNATURE option? The patch[*] for > net/openbgpd can be used as a workaround if it was due to TCP_MD5SIG > option on the listening sockets. > > [*] http://people.allbsd.org/~hrs/FreeBSD/openbgpd.20120104-1.diff > > While this is an ugly hack and I will inv

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Sergey Kandaurov
On 24 December 2011 00:08, John Baldwin wrote: > The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in > in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure > that it uses after dropping the IF_ADDR_LOCK().  Based on other code that uses > a similar pattern of find

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 16:23 , John Baldwin wrote: > On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: >> On Thu, Dec 29, 2011 at 03:27:26PM -0500, John Baldwin wrote: >> J> - if_addr_uses.patch This changes callers of the existing macros to >> use >> J> eit

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 2:36:25 pm Sergey Kandaurov wrote: > On 24 December 2011 00:08, John Baldwin wrote: > > The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in > > in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure > > that it uses after dropping the IF

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Sergey Kandaurov
On 4 January 2012 00:17, John Baldwin wrote: > On Tuesday, January 03, 2012 2:36:25 pm Sergey Kandaurov wrote: >> On 24 December 2011 00:08, John Baldwin wrote: >> > The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in >> > in6_lifaddr_ioctl() does not grab a reference to an ifnet addre

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 11:06, Hiroki Sato wrote: > Doug Barton wrote > in <4f027bc0.1080...@freebsd.org>: > > do> We have a pair of physical FreeBSD systems configured as routers > do> designed to operate in an active/standby CARP configuration. Everything > do> used to work fine, but since an upgrade t

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Hiroki Sato
Doug Barton wrote in <4f036a7f.9030...@freebsd.org>: do> This patch works even if net.inet.tcp.signature_verify_input=1. If I do> turn that sysctl off on both sides they can talk to each other even do> without the patch. So that would definitely seem to indicate that the do> tcp_signature stuff

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 29. Dec 2011, at 22:55 , Gleb Smirnoff wrote: > 3) I've found that in6_ifawithifp() doesn't do what it is supposed > to, as well as uses incorrect locking during this. As last resort > it should run through global list of addresses, not run throgh the > ifp one again. Patch attached. the first

Re: how to debug non-working hole in nat

2012-01-03 Thread Randy Bush
>> ignore. i sorted it. > Too late, sucked in .. diff from prior config might be bone enough? i had forgotten to remove the nat enable from /etc/ppp/ppp.conf when i moved to natd. randy ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 3:44:50 pm Sergey Kandaurov wrote: > On 4 January 2012 00:17, John Baldwin wrote: > > On Tuesday, January 03, 2012 2:36:25 pm Sergey Kandaurov wrote: > >> On 24 December 2011 00:08, John Baldwin wrote: > >> > The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread John Baldwin
On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: > Reviewing your patch I've found several problems not introduced by it, > but already existing, and somewhat related to your patch: > > 2) Potential race when dropping a lock inside FOREACH loop: > > igmp.c:2058 > mld6.c:1419 > mld6.

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Hiroki Sato
John Baldwin wrote in <201201031608.59688@freebsd.org>: jh> > With this patch in_lifaddr_ioctl() now looks more syntactically similar jh> > to in6_lifaddr_ioctl(). They could look even more similar by eliminating jh> > a lot of whitespace changes present here or there. jh> jh> Hmmm. Actual

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 29. Dec 2011, at 20:27 , John Baldwin wrote: > I've gone ahead with this approach. I have three separate patches that should > implement Phase 1. All of them can be found at > http://www.FreeBSD.org/~jhb/patches/ > > - if_addr_dev.patch This fixes a few new device drivers that were using

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 5:14:22 pm Hiroki Sato wrote: > John Baldwin wrote > in <201201031608.59688@freebsd.org>: > > jh> > With this patch in_lifaddr_ioctl() now looks more syntactically similar > jh> > to in6_lifaddr_ioctl(). They could look even more similar by eliminating > jh> > a

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 22:22 , John Baldwin wrote: > On Tuesday, January 03, 2012 5:14:22 pm Hiroki Sato wrote: >> John Baldwin wrote >> in <201201031608.59688@freebsd.org>: >> >> jh> > With this patch in_lifaddr_ioctl() now looks more syntactically similar >> jh> > to in6_lifaddr_ioctl(). The

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 21:45 , John Baldwin wrote: > On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: >> Reviewing your patch I've found several problems not introduced by it, >> but already existing, and somewhat related to your patch: >> >> 2) Potential race when dropping a lock insi

NDP Problem

2012-01-03 Thread Pawel Tyll
Hi lists, I'm observing something strange. ipv6_enable="YES" ipv6_gateway_enable="YES" ipv6_network_interfaces="vlan3901" ipv6_ifconfig_vlan3901="2001:7f8:42::a503:9310:1/64" vlan3901: flags=8943 metric 0 mtu 1500 options=3 ether 00:15:17:38:13:7f inet6 fe80::92e2:baff:f

Re: NDP Problem

2012-01-03 Thread Hiroki Sato
Pawel Tyll wrote in <1609249417.20120104033...@nitronet.pl>: pt> Hi lists, pt> pt> I'm observing something strange. pt> pt> ipv6_enable="YES" pt> ipv6_gateway_enable="YES" pt> ipv6_network_interfaces="vlan3901" pt> ipv6_ifconfig_vlan3901="2001:7f8:42::a503:9310:1/64" pt> pt> vlan3901: flags=894

Re: NDP Problem

2012-01-03 Thread Pawel Tyll
Hi Hiroki, > Does the attached patch (for 8.x kernel) fix your problem? Unfortunately, it doesn't. :( ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr

Re: NDP Problem

2012-01-03 Thread Hiroki Sato
Pawel Tyll wrote in <1161157726.20120104052...@nitronet.pl>: pt> Hi Hiroki, pt> pt> > Does the attached patch (for 8.x kernel) fix your problem? pt> Unfortunately, it doesn't. :( Okay, so could you explain in more detail what symptoms made you think NDP didn't work properly? The results of

pf not seeing inbound packets on netgraph interface

2012-01-03 Thread Ed Carrel
Hi freebsd-net, I originally sent this to -questions@, but was redirected here by that list. My original question is below: I am running into a roadblock getting PF to filter traffic on a Netgraph interface representing an L2TP/IPSec connection. I have done some narrowing down of the problem, but

Any recommendations for a 10G NIC from Broadcom

2012-01-03 Thread Vijay Singh
Hi. I would like to try out a 10G NIC from Broadcom. The BCM5716 seems promising. I am looking for features such as multi-queue, MSI-X, TSO etc. Any recommendations would be greatly appreciated. -vijay PS: I'd be using FreeBSD 8.2 initially, and FreeBSD 9.x in a few months. __

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Nikolay Denev
On Jan 3, 2012, at 10:52 PM, Doug Barton wrote: > On 01/03/2012 11:06, Hiroki Sato wrote: >> Doug Barton wrote >> in <4f027bc0.1080...@freebsd.org>: >> >> do> We have a pair of physical FreeBSD systems configured as routers >> do> designed to operate in an active/standby CARP configuration. Ev

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 21:23, Nikolay Denev wrote: > You are setting the keys with setkey for both directions of a single session, > right? Yes. But thanks for asking. :) Doug -- You can observe a lot just by watching. -- Yogi Berra Breadth of IT experience, and depth of knowledge in

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Nikolay Denev
On Jan 3, 2012, at 9:36 PM, sth...@nethelp.no wrote: >> Doug, does your kernel have TCP_SIGNATURE option? The patch[*] for >> net/openbgpd can be used as a workaround if it was due to TCP_MD5SIG >> option on the listening sockets. >> >> [*] http://people.allbsd.org/~hrs/FreeBSD/openbgpd.2012010