Re: setfib and RSTs

2014-12-29 Thread Nikolay Denev
On Mon, Dec 29, 2014 at 8:08 AM, Julian Elischer wrote: > On 12/26/14 10:41 PM, Nikolay Denev wrote: > >> Hi, >> >> I have a process (bittorrent client) running in a non-default fib and >> using >> a VPN for default gateway: >> >> from /etc/rc.local : >> >> /usr/sbin/setfib 1 route add $vpn_

[Differential] [Changed Subscribers] D1388: IP6: Turned on verbose logging for fragment handling code

2014-12-29 Thread ae (Andrey V. Elsukov)
ae added a subscriber: ae. ae added a comment. I think you need to adjust some comments in frag6_input(). REVISION DETAIL https://reviews.freebsd.org/D1388 To: kibab, bz Cc: ae, freebsd-net ___ freebsd-net@freebsd.org mailing list http://lists.freebs

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Alan Somers
On Sun, Dec 28, 2014 at 3:16 AM, Bjoern A. Zeeb wrote: > >> On 28 Dec 2014, at 03:19 , Jason Healy wrote: >> >> Hello, >> >> Trying out FreeBSD for the first time to build a firewall box that’s >> multi-core and runs PF. I’m very interested in the FIB code, as it lines up >> well with the way

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Bjoern A. Zeeb
> On 29 Dec 2014, at 16:03 , Alan Somers wrote: > > On Sun, Dec 28, 2014 at 3:16 AM, Bjoern A. Zeeb wrote: >> >> People simply broke it (again). Please file a bug report. You may mention >> that there are regression test scripts in src/tools/ somewhere to test all >> the cases for IPv6. >

[Differential] [Updated] D1388: IP6: Turned on verbose logging for fragment handling code

2014-12-29 Thread bz (Bjoern A. Zeeb)
bz added a comment. I somehow would expect a comment to be updated somewhere referencing RFC5722? Appart from that no objections though I have only skimmed through and not properly reviewed this. REVISION DETAIL https://reviews.freebsd.org/D1388 To: kibab, bz Cc: ae, freebsd-net

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Alan Somers
On Mon, Dec 29, 2014 at 10:19 AM, Bjoern A. Zeeb wrote: > >> On 29 Dec 2014, at 16:03 , Alan Somers wrote: >> >> On Sun, Dec 28, 2014 at 3:16 AM, Bjoern A. Zeeb wrote: >>> >>> People simply broke it (again). Please file a bug report. You may >>> mention that there are regression test scripts

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Jason Healy
On Dec 29, 2014, at 1:28 AM, Julian Elischer wrote: > to some extent this is what it was written for.. teh fib code was written for > Ironport/Cisco for separating the management port from the data ports onn > their appliances, however the VNET code that came later is an even cleaner > way of

Re: setfib and RSTs

2014-12-29 Thread Adrian Chadd
Have you filed a PR about this? This seems like it's pretty important to fix. (For other non-torrent reasons too; like people wishing to use this for things like tor browsing.) -adrian On 29 December 2014 at 05:11, Nikolay Denev wrote: > On Mon, Dec 29, 2014 at 8:08 AM, Julian Elischer wrote

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Julian Elischer
On 12/30/14 1:59 AM, Jason Healy wrote: On Dec 29, 2014, at 1:28 AM, Julian Elischer wrote: to some extent this is what it was written for.. teh fib code was written for Ironport/Cisco for separating the management port from the data ports onn their appliances, however the VNET code that cam

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Bjoern A. Zeeb
> On 29 Dec 2014, at 19:17 , Julian Elischer wrote: > > On 12/30/14 1:59 AM, Jason Healy wrote: >> On Dec 29, 2014, at 1:28 AM, Julian Elischer wrote: >> >>> to some extent this is what it was written for.. teh fib code was written >>> for Ironport/Cisco for separating the management port fro

Re: SIOCSVH, SIOCGVH ioctl(2) and virtio ethernet driver

2014-12-29 Thread Bryan Venteicher
On Fri, Dec 26, 2014 at 8:09 AM, Oleg Ginzburg wrote: > is it possible to use the carp(4) protocol with > vtnet(4) interfaces ( which is used, for example, in bhyve(8) ) > Currently, the standard carp init operation causes an SIOCGVH error: > > /sbin/ifconfig vtnet0 vhid 1 advskew 100 pass pass 1

Re: setfib and RSTs

2014-12-29 Thread Nikolay Denev
On Mon, Dec 29, 2014 at 7:47 PM, Adrian Chadd wrote: > Have you filed a PR about this? This seems like it's pretty important to > fix. > > (For other non-torrent reasons too; like people wishing to use this > for things like tor browsing.) > > > -adrian > > > On 29 December 2014 at 05:11, Nikolay

[Bug 194672] [carp] Changing advskew to 0 from another value doesn't work

2014-12-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194672 Renato Botelho changed: What|Removed |Added CC||ga...@freebsd.org Assig

[Bug 194672] [carp] Changing advskew to 0 from another value doesn't work

2014-12-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194672 --- Comment #2 from Renato Botelho --- Created attachment 151093 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=151093&action=edit Fix set advskew back to 0 The attached patch make it possible to set advskew back to 0 -- You a

Re: setfib and RSTs

2014-12-29 Thread Bjoern A. Zeeb
> On 29 Dec 2014, at 21:03 , Nikolay Denev wrote: > > No, no PR yet, but I will file one. I wanted to collect some more data > first. > > So, I've did some dtrace digging : > > [20:54][root@nas:~]#cat reset.d > #!/usr/sbin/dtrace -s > > fbt:kernel:tcp_dropwithreset:entry > { >printf("reas

Re: setfib and RSTs

2014-12-29 Thread Nikolay Denev
On Tue, Dec 30, 2014 at 12:51 AM, Bjoern A. Zeeb < bzeeb-li...@lists.zabbadoz.net> wrote: > > > On 29 Dec 2014, at 21:03 , Nikolay Denev wrote: > > > > No, no PR yet, but I will file one. I wanted to collect some more data > > first. > > > > So, I've did some dtrace digging : > > > > [20:54][root

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Jason Healy
On Dec 29, 2014, at 2:34 PM, Bjoern A. Zeeb wrote: > pf and VNETs are a cause for panic at the moment; don’t go that route (yet). Good to know. With that in mind, I think my best workaround for now is to disable IPv6 on the management interface, leaving the transit interface as the only one