On 11.12.2016 02:07, Andrey V. Elsukov wrote:
I am pleased to announce that projects/ipsec, that I started several
months ago is ready for testing and review.
The main goals were:
* rework locking to make IPsec code more friendly for concurrent
processing;
* make lookup in SADB/SPDB faste
Hi all,
Setup:
11.0-STABLE FreeBSD 11.0-STABLE #0 r312338: Tue Jan 17 12:29:38 UTC 2017
I've set up two freebsd hosts, each of which has a single VNET jail.
On each host I've created 2 epair interfaces.
Host A
- epair0a, epair1a on the host
- epair0b, epair1b on the jail
Host B
- epai
On 6 Feb 2017, at 18:53, Giulio Ferro wrote:
Hi all,
Setup:
11.0-STABLE FreeBSD 11.0-STABLE #0 r312338: Tue Jan 17 12:29:38 UTC
2017
I've set up two freebsd hosts, each of which has a single VNET jail.
On each host I've created 2 epair interfaces.
Host A
- epair0a, epair1a on the host
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216744
--- Comment #3 from Hiroki Sato ---
I think it is not a bad idea to implement a configuration knob of DSCP value of
ND messages while it is possible to set one via a packet filter as ae@
explains. RFC 4594 recommends to set CS6 for network
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216744
--- Comment #4 from Jason Mader ---
The neighbor discovery uses CS7 (network), and Cisco uses CS6 on Internet
routing protocols. Which make sense.
Unfortunately I don't have any other information on how common it is. I have
looked and Linu
