CARP and NAT question

2019-10-08 Thread Julien Cigar
Hello, I'd like to NAT outbound traffic from two different private networks through two different interfaces, with CARP on top. I have 4 public IPS available (193.x.x.89, 193.x.x.90, 193.x.x.91, 193.x.x.92). I have two redundant router/firewall running FreeBSD 12 with CARP and PF with the follo

[Bug 240787] netgraph/ng_bridge: Replace NG_BRIDGE_MAX_LINKS with auto-incrementing (Unlimited) links

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240787 Mark Johnston changed: What|Removed |Added CC||ma...@freebsd.org --- Comment #12

Re: CARP and NAT question

2019-10-08 Thread Matthew Grooms
Hi Julien, It's not clear why you are trying to assign multiple carp IP address to two different interfaces from within the same IP subnet. Are you trying to fail over a 2nd carp address or are you trying to improve throughput/redundancy? If you just want to fail over a 2nd carp address, assi

[Bug 240787] netgraph/ng_bridge: Replace NG_BRIDGE_MAX_LINKS with auto-incrementing (Unlimited) links

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240787 Gleb Smirnoff changed: What|Removed |Added Status|In Progress |Closed Resolution|---

Re: CARP and NAT question

2019-10-08 Thread Julien Cigar
On Tue, Oct 08, 2019 at 10:20:34AM -0500, Matthew Grooms wrote: > Hi Julien, Hi Matthew, > > It's not clear why you are trying to assign multiple carp IP address to > two different interfaces from within the same IP subnet. Are you trying > to fail over a 2nd carp address or are you trying to

[Bug 240787] netgraph/ng_bridge: Replace NG_BRIDGE_MAX_LINKS with auto-incrementing (Unlimited) links

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240787 --- Comment #14 from Ed Maste --- Too late for 12.1, but merging to stable/12 before 12.2 is probably feasible -- You are receiving this mail because: You are on the CC list for the bug. ___ fre

Re: CARP and NAT question

2019-10-08 Thread Matthew Grooms
On 10/8/2019 10:58 AM, Julien Cigar wrote: On Tue, Oct 08, 2019 at 10:20:34AM -0500, Matthew Grooms wrote: Hi Julien, Hi Matthew, It's not clear why you are trying to assign multiple carp IP address to two different interfaces from within the same IP subnet. Are you trying to fail over a 2nd

[Bug 240608] iflib: Panic with INVARIANTS: Memory modified after free (12.1-pre-QA)

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240608 Ed Maste changed: What|Removed |Added Blocks||240700 Referenced Bugs: https://bugs.

[Bug 240609] iflib: Panic with INVARIANTS: sleeping in an epoch section (12.1-pre-QA) (vlan + lagg involved)

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240609 Ed Maste changed: What|Removed |Added Blocks||240700 Referenced Bugs: https://bugs.

[Bug 236724] igb(4): Interfaces fail to switch active to inactive state

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236724 --- Comment #17 from Harald Schmalzbauer --- I'd like to add that marius@'s approach in https://reviews.freebsd.org/D21924 has the same effect – from the operator's view – like the original tested D21769. Once the interface was "up", link s

ipsec on multicore VM

2019-10-08 Thread Victor Gamov
Hi All I have FreeBSD 11.2-STABLE #0 r343863 VM with 2 CPU and vxnet3 NIC. This host uses many if_ipsec and strongswan-5.7.2 to make site-to-site ipsec connections. When I use `tcpdump -nn -i src and esp` then I got many reordered IPsec packets. Does tcpdump give me a real picture and I

Re: CARP and NAT question

2019-10-08 Thread Julian Elischer
On 10/8/19 8:58 AM, Julien Cigar wrote: On Tue, Oct 08, 2019 at 10:20:34AM -0500, Matthew Grooms wrote: Hi Julien, Hi Matthew, It's not clear why you are trying to assign multiple carp IP address to two different interfaces from within the same IP subnet. Are you trying to fail over a 2nd car

[Bug 240787] netgraph/ng_bridge: Replace NG_BRIDGE_MAX_LINKS with auto-incrementing (Unlimited) links

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240787 Julian Elischer changed: What|Removed |Added CC||jul...@freebsd.org --- Comment #

[Bug 240787] netgraph/ng_bridge: Replace NG_BRIDGE_MAX_LINKS with auto-incrementing (Unlimited) links

2019-10-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240787 --- Comment #16 from Julian Elischer --- though one could implement the old cookie too and translate to some set of defaults in the new scheme. -- You are receiving this mail because: You are on the CC list for the bug. __

panic: sleeping in an epoch section

2019-10-08 Thread Yuri Pankov
Tried updating from r353072 to r353334 and getting the following panic reproducibly on boot (starting dhclient?): panic: sleeping in an epoch section cpuid = 5 time = 1570591558 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfe00af780140 vpanic() at vpa