Re: Poor performance with stable/13 and Mellanox ConnectX-6 (mlx5)

2022-06-16 Thread Alexander V. Chernikov
> On 16 Jun 2022, at 21:48, Mike Jakubik > wrote: > > After multiple tests and tweaks i believe the issue is not with the HW or > Numa related (Infinity fabric should do around 32GB) but rather with FreeBSD > TCP/IP stack. It's like it cant figure itself out properly for the speed that > t

Re: Notification of change of IP address/Routing etc

2022-08-31 Thread Alexander V. Chernikov
> On 31 Aug 2022, at 10:11, Martin Stiemerling wrote: > > Hi, > >> Am 31.08.2022 um 11:00 schrieb Peter Jeremy : >> >> On 2022-Aug-31 10:18:44 +0200, Martin Stiemerling wrote: >>> I am looking for a mechanism to get a notification from the OS when, for >>> instance, an IP address on an in

Re: FWSync driver about IPFW synchronization

2022-08-31 Thread Alexander V. Chernikov
> On 27 Aug 2022, at 15:48, Michael Pounov wrote: > > Hello all > > I want to propose one new feature about IPFW. FWSync driver exchange dynamic > state and aliase records between routers. > If you have interest about such feature to be implemented at FreeBSD code > base. You are fill free

Make kernel aware of NIC queues

2013-02-06 Thread Alexander V. Chernikov
Hello list! Today more and more NICs are capable of splitting traffic to different Rx/TX rings permitting OS to dispatch this traffic on different CPU cores. However, there are some problems that arises from using multi-nic (or even singe multi-port NIC) configurations: Typical (OS) question

Re: debug em driver code after applying patch

2013-02-10 Thread Alexander V. Chernikov
On 05.02.2013 18:44, h bagade wrote: Hi all, I applied patch on em driver code and I want to check how it is working on different situations. I need to put some output in different parts of the code to trace what's going on in different situations. I've tried to write to files or executing comma

Re: Netflow v9 with ng_netflow and nfdump

2013-02-19 Thread Alexander V. Chernikov
On 19.02.2013 14:49, Jan Markus wrote: > Hello, Hello. > > our Ministry of the interior now requires that IP traffic logs must > contain MAC addresses of our clients. I am trying to fulfil this with > Netflow v9 which (allegedly) should contain the MAC addresses of IP flows. Netflow version 9 is

Re: Possible optimization in ether_output()

2013-02-22 Thread Alexander V. Chernikov
On 20.02.2013 02:05, Vijay Singh wrote: Hi, this patch gives a modest performance improvement here @work. Please consider. [/u/vijay/bsd/CODE/cur/sys/net]# svn diff if_ethersubr.c Index: if_ethersubr.c === --- if_ethersubr.c (r

[patch] interface routes

2013-03-06 Thread Alexander V. Chernikov
Hello list! There is a known long-lived issue with interface routes addition/deletion: ifconfig iface inet 1.2.3.4/24 can fail if given prefix is already in kernel route table (for example, advertised by IGP like OSPF). Interface route can be deleted via route(8) or any route socket user (so

Re: [patch] interface routes

2013-03-07 Thread Alexander V. Chernikov
On 07.03.2013 11:39, Andre Oppermann wrote: > On 07.03.2013 07:34, Alexander V. Chernikov wrote: >> Hello list! >> >> There is a known long-lived issue with interface routes >> addition/deletion: >> >> ifconfig iface inet 1.2.3.4/24 can fail if given prefix i

Re: [patch] interface routes

2013-03-07 Thread Alexander V. Chernikov
On 07.03.2013 15:55, Andre Oppermann wrote: > On 07.03.2013 12:43, Alexander V. Chernikov wrote: >> On 07.03.2013 11:39, Andre Oppermann wrote: >>> On 07.03.2013 07:34, Alexander V. Chernikov wrote: >>>> Hello list! >>>> >>>> There is a know

Re: [patch] interface routes

2013-03-07 Thread Alexander V. Chernikov
It seems I have no choice :) WBR, Alexander On 07.03.2013, at 18:03, Andre Oppermann wrote: > On 07.03.2013 14:54, Alexander V. Chernikov wrote: >> On 07.03.2013 15:55, Andre Oppermann wrote: >>> On 07.03.2013 12:43, Alexander V. Chernikov wrote: >>>> On 07.

Re: [patch] interface routes

2013-03-07 Thread Alexander V. Chernikov
On 07.03.2013 17:51, Andre Oppermann wrote: > On 07.03.2013 14:38, Ermal Luçi wrote: >> On Thu, Mar 7, 2013 at 12:55 PM, Andre Oppermann > <mailto:an...@freebsd.org>> wrote: >> >> On 07.03.2013 12:43, Alexander V. Chernikov wrote: >> >>

Re: [patch] interface routes

2013-03-07 Thread Alexander V. Chernikov
On 08.03.2013 00:53, Andre Oppermann wrote: On 07.03.2013 16:34, Alexander V. Chernikov wrote: On 07.03.2013 17:51, Andre Oppermann wrote: On 07.03.2013 14:38, Ermal Luçi wrote: Isn't it better to teach the routing code about metrics. Routing daemons cope better this way and they can h

Re: [patch] interface routes

2013-03-08 Thread Alexander V. Chernikov
On 08.03.2013 01:42, John-Mark Gurney wrote: Andre Oppermann wrote this message on Thu, Mar 07, 2013 at 08:39 +0100: Adding interface address is handled via atomically deleting old prefix and adding interface one. This brings up a long standing sore point of our routing code which this patch m

Re: [patch] interface routes

2013-03-09 Thread Alexander V. Chernikov
On 09.03.2013 23:17, Nikolay Denev wrote: On Mar 7, 2013, at 9:42 PM, John-Mark Gurney wrote: Andre Oppermann wrote this message on Thu, Mar 07, 2013 at 08:39 +0100: Adding interface address is handled via atomically deleting old prefix and adding interface one. This brings up a long standi

Re: MPLS

2013-03-17 Thread Alexander V. Chernikov
On 17.03.2013 13:20, Sami Halabi wrote: any one? :) On Fri, Mar 15, 2013 at 6:28 PM, Sami Halabi wrote: Hi, Are there ongoing job of mpls in freebsd? I saw thd site http://freebsd.mpls.in for aboug a year now and I don't see much progress. Yep. It was frozen for a while. Currently I'm worki

Re: MPLS

2013-03-18 Thread Alexander V. Chernikov
On 17.03.2013, at 23:54, Andre Oppermann wrote: > On 17.03.2013 19:57, Alexander V. Chernikov wrote: >> On 17.03.2013 13:20, Sami Halabi wrote: >>>> ITOH OpenBSD has a complete implementation of MPLS out of the box, maybe >> Their control plane code is mostly use

Re: Need NAT64 on FreeBSD

2013-03-20 Thread Alexander V. Chernikov
On 20.03.2013 04:54, Vladislav Prodan wrote: Prompt please what or how to implement NAT64 on Freebsd? Currently you can try to use net/tayga, it can serve for some purposes. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: MPLS

2013-03-22 Thread Alexander V. Chernikov
On 18.03.2013 17:41, Andre Oppermann wrote: On 18.03.2013 13:20, Alexander V. Chernikov wrote: On 17.03.2013, at 23:54, Andre Oppermann wrote: On 17.03.2013 19:57, Alexander V. Chernikov wrote: On 17.03.2013 13:20, Sami Halabi wrote: ITOH OpenBSD has a complete implementation of MPLS out of

Re: ng_netflow patch for AS filling

2013-03-26 Thread Alexander V. Chernikov
On 26.03.2013 14:14, Stas Timokhin wrote: > Hello ! Hello. > > > > Patch for injecting information network->as_number from extrernal > sources (RIPE database, for example) into kernel and filling src and dst > AS-number in Netflow v5 datagrams. > > > > http://www.stasyan.com/devel/ng_netfl

VLANHWFILTER "upgrade"

2013-04-15 Thread Alexander V. Chernikov
Hello list. We currently have VLAHWFILTER functionality allowing underlying physical/virtual interfaces to be aware of vlans stacked on them. However, this knowledge is only used to program NIC hw filter (or to broadcast to member ifaces in lagg case). Proposed idea is to save vlan ifp pointer i

cxgbetool & hw filtering issues

2013-06-30 Thread Alexander V. Chernikov
Hello list! While experimenting with Chelsio T440-CR (cxgbe) internal firewall, I'm getting some kind of unexpected results: filtering 'type ipv4 action drop' permits IPv4 TCP traffic with bad checksum. filtering 'type IPv6 action drop' permits IPv6 traffic to multicast addresses (MLDv2, etc

Re: cxgbetool & hw filtering issues

2013-07-01 Thread Alexander V. Chernikov
On 30.06.2013 23:41, Navdeep Parhar wrote: On 06/30/13 07:25, Alexander V. Chernikov wrote: Hello list! While experimenting with Chelsio T440-CR (cxgbe) internal firewall, I'm getting some kind of unexpected results: One bit of general advice to begin with: add "hitcnts 1" to

netmap receiver crashes driver on exit

2013-07-10 Thread Alexander V. Chernikov
Hello list! It seems there are still some rough edges with netmap api. I'm currently experimenting with netmap receiver on fresh -current (r252470) and ixgbe. Every time the receiver is killed/coredumped/or ^C'd (stock pkt-gen with -f rx can act as such receiver), after some random pause (10-3

Re: Recommendations for 10gbps NIC

2013-07-25 Thread Alexander V. Chernikov
On 25.07.2013 00:26, Boris Kochergin wrote: Hi. Hello. I am looking for recommendations for a 10gbps NIC from someone who has successfully used it on FreeBSD. It will be used on FreeBSD 9.1-R/amd64 to capture packets. Some desired features are: - PCIe - LC connectors - 10GBASE-SR - Either sin

[patch] pxeloader sometimes "freezes" if called via pxechain

2013-07-26 Thread Alexander V. Chernikov
Hello list! Currently our pxeloader prefer to get NFS server information by its own instead of using cached one. This is how it is done: pxe_open() indirectly opens socket (PXENV_UDP_OPEN, with cached IP from BOOTPLAYER). After that, bootp() resolve is done, resulting in (probably) more "val

Re: Recommendations for 10gbps NIC

2013-07-26 Thread Alexander V. Chernikov
On 26.07.2013 19:30, Barney Cordoba wrote: *From:* Alexander V. Chernikov *To:* Boris Kochergin *Cc:* freebsd-net@freebsd.org *Sent:* Thursday, July 25, 2013 2:10 PM *Subject:* Re: Recommendations for 10gbps NIC On

Re: Recommendations for 10gbps NIC

2013-07-27 Thread Alexander V. Chernikov
On 27.07.2013 02:14, Barney Cordoba wrote: *From:* Daniel Feenberg *To:* Alexander V. Chernikov *Cc:* Barney Cordoba ; "freebsd-net@freebsd.org" *Sent:* Friday, July 26, 2013 4:59 PM *Subject:* Re: Recommend

Re: Recommendations for 10gbps NIC

2013-07-27 Thread Alexander V. Chernikov
On 27.07.2013 12:15, Luigi Rizzo wrote: On Sat, Jul 27, 2013 at 10:02 AM, Alexander V. Chernikov wrote: On 27.07.2013 02:14, Barney Cordoba wrote: *From:* Daniel Feenberg *To:* Alexander V. Chernikov *Cc:* Barney

Re: netmap receiver crashes driver on exit

2013-07-29 Thread Alexander V. Chernikov
On 29.07.2013 13:14, vishal kumar wrote: Hi Alex, We found a similar crash on our system, not sure of the cause yet; but did you find any solution for this? Well, currently I'm using the following workaround: http://static.ipfw.ru/patches/netmap_intel.diff Thanks -- View this message in co

Re: route/arp lifetime (Re: it's the output, not ack coalescing (Re: TSO and FreeBSD vs Linux))

2013-08-14 Thread Alexander V. Chernikov
On 14.08.2013 16:05, Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 03:47:13PM +0400, Lev Serebryakov wrote: Hello, Luigi. You wrote 14 ?? 2013 ??., 14:21:09: LR> Then the problem remains that we should keep a copy of route and LR> arp information in the socket instead of redoing the lo

Re: route/arp lifetime (Re: it's the output, not ack coalescing (Re: TSO and FreeBSD vs Linux))

2013-08-14 Thread Alexander V. Chernikov
On 14.08.2013 16:40, Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 04:15:25PM +0400, Alexander V. Chernikov wrote: On 14.08.2013 16:05, Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 03:47:13PM +0400, Lev Serebryakov wrote: Hello, Luigi. You wrote 14 ?? 2013 ??., 14:21:09: LR> Then

Re: route/arp lifetime (Re: it's the output, not ack coalescing (Re: TSO and FreeBSD vs Linux))

2013-08-19 Thread Alexander V. Chernikov
On 14.08.2013 18:00, Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 05:01:05PM +0400, Alexander V. Chernikov wrote: On 14.08.2013 16:40, Luigi Rizzo wrote: ... You can save rte&arp, however doing this gives you perfect chance to crash your kernel if egress interface is destroyed (like vlan o

Re: route/arp lifetime (Re: it's the output, not ack coalescing (Re: TSO and FreeBSD vs Linux))

2013-08-19 Thread Alexander V. Chernikov
On 14.08.2013 19:40, Marko Zec wrote: On Wednesday 14 August 2013 14:40:24 Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 04:15:25PM +0400, Alexander V. Chernikov wrote: On 14.08.2013 16:05, Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 03:47:13PM +0400, Lev Serebryakov wrote: Hello, Luigi. You

Re: route/arp lifetime (Re: it's the output, not ack coalescing (Re: TSO and FreeBSD vs Linux))

2013-08-19 Thread Alexander V. Chernikov
On 14.08.2013 19:48, Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 05:40:28PM +0200, Marko Zec wrote: On Wednesday 14 August 2013 14:40:24 Luigi Rizzo wrote: On Wed, Aug 14, 2013 at 04:15:25PM +0400, Alexander V. Chernikov wrote: ... FWIW, apparently we already have that infrastrucure in place

Re: [rfc] migrate lagg to an rmlock

2013-08-24 Thread Alexander V. Chernikov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24.08.2013 00:54, Adrian Chadd wrote: > Hi, > > I'd like to commit this to -10. It migrates the if_lagg locking > from a rw lock to a rm lock. We see a bit of contention between the > transmit and We're running lagg with rmlock on several hundred h

Re: route/arp lifetime (Re: it's the output, not ack coalescing (Re: TSO and FreeBSD vs Linux))

2013-08-24 Thread Alexander V. Chernikov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 22.08.2013 00:51, Andre Oppermann wrote: > On 19.08.2013 13:42, Alexander V. Chernikov wrote: >> On 14.08.2013 19:48, Luigi Rizzo wrote: >>> On Wed, Aug 14, 2013 at 05:40:28PM +0200, Marko Zec wrote: >>>> On Wednesday

Network stack changes

2013-08-28 Thread Alexander V. Chernikov
Hello list! There is a lot constantly raising discussions related to networking stack performance/changes. I'll try to summarize current problems and possible solutions from my point of view. (Generally this is one problem: stack is slooow, but we need to know why an

Re: Flow ID, LACP, and igb

2013-09-01 Thread Alexander V. Chernikov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26.08.2013 21:18, Justin T. Gibbs wrote: > Hi Net, > > I'm an infrequent traveler through the networking code and would > appreciate some feedback on some proposed solutions to issues > Spectra has seen with outbound LACP traffic. > > lacp_select

Re: Flow ID, LACP, and igb

2013-09-01 Thread Alexander V. Chernikov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02.09.2013 00:45, Adrian Chadd wrote: > > > Not sure about igb, but ixgbe (according to advanced RX descriptor > format, 7.1.6.2 @ 82599 datasheet) can provide 'real' RSS value > which can be used in m_flowid instead of NIC queue id. > > (And, b

Re: IFNAMSIZ/IF_NAMESIZE change proposal

2013-09-16 Thread Alexander V. Chernikov
On 14.09.2013 12:44, Anuranjan Shukla wrote: > Hi, > At Juniper Networks, interface name size was needed to be longer than what > FreeBSD has. We're trying to reduce our local changes to FreeBSD to allow us > an easier time upgrading to newer FreeBSD releases, and support the > modularization of

Re: Network stack changes

2013-09-22 Thread Alexander V. Chernikov
On 29.08.2013 02:24, Andre Oppermann wrote: On 28.08.2013 20:30, Alexander V. Chernikov wrote: Hello list! Hello Alexander, Hello Andre! I'm very sorry to answer so late. you sent quite a few things in the same email. I'll try to respond as much as I can right now. Later you sh

Re: Network stack changes

2013-09-22 Thread Alexander V. Chernikov
On 29.08.2013 05:32, Slawa Olhovchenkov wrote: On Thu, Aug 29, 2013 at 12:24:48AM +0200, Andre Oppermann wrote: .. while Intel DPDK claims 80MPPS (and 6windgate talks about 160 or so) on the same-class hardware and _userland_ forwarding. Those numbers sound a bit far out. Maybe if the packet

Re: Network stack changes

2013-09-22 Thread Alexander V. Chernikov
On 29.08.2013 15:49, Adrian Chadd wrote: Hi, Hello Adrian! I'm very sorry for the looong reply. There's a lot of good stuff to review here, thanks! Yes, the ixgbe RX lock needs to die in a fire. It's kinda pointless to keep locking things like that on a per-packet basis. We should be able

Re: Network stack changes

2013-09-22 Thread Alexander V. Chernikov
On 14.09.2013 22:49, Olivier Cochard-Labbé wrote: On Sat, Sep 14, 2013 at 4:28 PM, Luigi Rizzo wrote: IXIA ? For the timescales we need to address we don't need an IXIA, a netmap sender is more than enough The great netmap generates only one IP flow (same src/dst IP and same src/dst port). Th

Re: Assymetric NIC performance problem

2013-10-07 Thread Alexander V. Chernikov
On 07.10.2013 18:59, Konstantin Kuzvesov wrote: Hello, I have a problem with NIC performance. Is this the right place to ask for help? Probably, if you are able to provide some more detailed information :) ___ freebsd-net@freebsd.org mailing list

Re: Deleting IPv4 iface-routes from extra FIBs

2014-04-23 Thread Alexander V. Chernikov
On 24.04.2014 01:56, Chris Smith wrote: > On 23/04/14 19:55, Julian Elischer wrote: >> On 4/23/14, 4:38 AM, Nikolay Denev wrote: >>> On Tue, Apr 22, 2014 at 5:37 PM, Harald Schmalzbauer >>> wrote: Hello, here, http://svnweb.freebsd.org/base?view=revision&revision=248895 interfa

Re: kern/174958: [net] [patch] rnh_walktree_from makes unreasonable assumptions

2014-05-01 Thread Alexander V. Chernikov
The following reply was made to PR kern/174958; it has been noted by GNATS. From: "Alexander V. Chernikov" To: bug-follo...@freebsd.org, sklo...@cs.berkeley.edu Cc: Subject: Re: kern/174958: [net] [patch] rnh_walktree_from makes unreasonable assumptions Date: Thu, 01 May 2014 19:1

Use of contiguous physical memory in ixgbe driver

2014-05-06 Thread Alexander V. Chernikov
Hello guys. (bootstrapping people involved in previous version of this topic, sorry for that) There were several problem descriptions/discussions on using 9k+ mbufs with current allocator in: if_em: kern/183381 cxgbe: http://lists.freebsd.org/pipermail/freebsd-net/2014-February/037834.html

Re: Problem with ipfw table add 0.0.0.0/8

2014-05-13 Thread Alexander V. Chernikov
On 13.05.2014 13:46, Dennis Yusupoff wrote: May be this will help? See answer on http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/189471 I'll try to fix it within a few days. The problem itself happens due to the fact that every CIDR table address is packed into IPv6 address and IPv4 ones are en

Re: Problem with ipfw table add 0.0.0.0/8

2014-05-17 Thread Alexander V. Chernikov
roy means: * flush * table tries (or other structures) freed * type set to cidr 13.05.2014 14:32, Alexander V. Chernikov пишет: On 13.05.2014 13:46, Dennis Yusupoff wrote: May be this will help? See answer on http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/189471 I'll try to fix it within a

Re: Problem with ipfw table add 0.0.0.0/8

2014-05-17 Thread Alexander V. Chernikov
On 17.05.2014 19:14, Andreas Nilsson wrote: On Sat, May 17, 2014 at 3:44 PM, Alexander V. Chernikov mailto:melif...@freebsd.org>> wrote: On 13.05.2014 16:05, Dennis Yusupoff wrote: I think that universal table for all kind of data (ipv4, ipv6, ports, etc

Re: Problem with ipfw table add 0.0.0.0/8

2014-05-17 Thread Alexander V. Chernikov
On 17.05.2014 23:57, Barney Wolff wrote: On Sat, May 17, 2014 at 05:44:37PM +0400, Alexander V. Chernikov wrote: On 13.05.2014 16:05, Dennis Yusupoff wrote: I think that universal table for all kind of data (ipv4, ipv6, ports, etc) is a bad idea by design. At least unless you haven'

[CFT]: ipfw named tables / different tabletypes

2014-05-19 Thread Alexander V. Chernikov
Hello list! This patch adds ability to name tables / reference them by name. Additionally, it simplifies adding new table types. Change list: Kernel: 1) Add new IP_FW_TABLE_XGETCFG / IP_FW_TABLE_XSETCFG opcodes to permit table reconfiguration 2) Tables data is now opaque to main ipfw code: use

Re: Problem with ipfw table add 0.0.0.0/8

2014-05-19 Thread Alexander V. Chernikov
On 19.05.2014 11:51, Bill Yuan wrote: Hi Alex, Hello Bill! You guys are chatting here! I agree with you, the table is the place should be enhanced, and I am working in this way as described below 1. Support more types. ip : cidr ipv4 : same as ip ipv6 : ip addr v6 mac : mac address if

Re: [Was]: Problem with ipfw table add 0.0.0.0/8

2014-05-19 Thread Alexander V. Chernikov
On 19.05.2014 12:54, Dennis Yusupoff wrote: Alex, Bill, it's a good news, glad to hear it. Let me ask even more functionality: 6. Test if entry exist in table: ipfw table test It extremely useful in case of big, unordered data in the table - for example different networks with different mask.

Re: Problem with ipfw table add 0.0.0.0/8

2014-05-20 Thread Alexander V. Chernikov
On 19.05.2014 17:12, bycn82 wrote: On 5/19/14 21:00, Alexander V. Chernikov wrote: On 19.05.2014 11:51, Bill Yuan wrote: Hi Alex, Hello Bill! You guys are chatting here! I agree with you, the table is the place should be enhanced, and I am working in this way as described below 1

Re: [Was]: Problem with ipfw table add 0.0.0.0/8

2014-05-20 Thread Alexander V. Chernikov
On 19.05.2014 17:38, Dennis Yusupoff wrote: It's not enough, actually. Imagine what you have a table with different networks. If you'll try to find out is an IP belongs to some of that networks from the table, you should to write relatively serious "wrapper" with network range calculations in it.

Re: [CFT]: ipfw named tables / different tabletypes

2014-05-22 Thread Alexander V. Chernikov
On 22.05.2014 00:48, Luigi Rizzo wrote: On Wed, May 21, 2014 at 10:10:26PM +0400, Alexander V. Chernikov wrote: On 21.05.2014 15:10, Luigi Rizzo wrote: On Mon, May 19, 2014 at 04:51:08PM +0400, Alexander V. Chernikov wrote: Hello list! This patch adds ability to name tables / reference them

Re: [CFT]: ipfw named tables / different tabletypes

2014-05-22 Thread Alexander V. Chernikov
On 22.05.2014 18:56, Alexander V. Chernikov wrote: It looks like we have reached some kind of consensus on table naming, so I'm going to implement the following as the first part: * named-only tables, no "user-visible" indexes * Keep the same opcodes, use additional TLVs to pass

Re: [CFT]: ipfw named tables / different tabletypes

2014-05-22 Thread Alexander V. Chernikov
On 22.05.2014 19:47, Luigi Rizzo wrote: On Thu, May 22, 2014 at 06:56:41PM +0400, Alexander V. Chernikov wrote: On 22.05.2014 00:48, Luigi Rizzo wrote: On Wed, May 21, 2014 at 10:10:26PM +0400, Alexander V. Chernikov wrote: ... we can solve this by using 'low' numbers for the nume

Re: Route caching

2014-05-30 Thread Alexander V. Chernikov
On 29.05.2014 16:33, Nadav Har'El wrote: Hi, Hello! I'm working on the OSv project (http://osv.io/), a new BSD-licensed operating system for virtual machines. OSv's networking code is based on that of FreeBSD. I recently noticed an inefficiency that I believe exists also in FreeBSD's networkin

Re: [CFT]: ipfw named tables / different tabletypes

2014-06-01 Thread Alexander V. Chernikov
re you going to translate the name to id before calling kernel-space methods? On Thu, May 22, 2014 at 4:48 AM, Luigi Rizzo wrote: On Wed, May 21, 2014 at 10:10:26PM +0400, Alexander V. Chernikov wrote: On 21.05.2014 15:10, Luigi Rizzo wrote: On Mon, May 19, 2014 at 04:51:08PM +0400, Alex

Re: [CFT]: ipfw named tables / different tabletypes

2014-06-06 Thread Alexander V. Chernikov
On 06.06.2014 17:31, Ian Smith wrote: On Fri, 6 Jun 2014 00:10:26 +0800, bycn82 wrote: Guys, I do understand that this is an important discussion about useful ipfw feature, but can you please stop invading this (totally unrelated) topic and return to original one? Thank you. Hi Bill, > S

Re: dhclient sucks cpu usage...

2014-06-10 Thread Alexander V. Chernikov
On 10.06.2014 07:03, Bryan Venteicher wrote: Hi, - Original Message - So, after finding out that nc has a stupidly small buffer size (2k even though there is space for 16k), I was still not getting as good as performance using nc between machines, so I decided to generate some flame gra

Re: dhclient sucks cpu usage...

2014-06-10 Thread Alexander V. Chernikov
On 10.06.2014 20:24, John-Mark Gurney wrote: Alexander V. Chernikov wrote this message on Tue, Jun 10, 2014 at 13:17 +0400: On 10.06.2014 07:03, Bryan Venteicher wrote: Hi, - Original Message - So, after finding out that nc has a stupidly small buffer size (2k even though there is

Re: dhclient sucks cpu usage...

2014-06-10 Thread Alexander V. Chernikov
On 10.06.2014 22:11, Bryan Venteicher wrote: - Original Message - On 10.06.2014 07:03, Bryan Venteicher wrote: Hi, - Original Message - So, after finding out that nc has a stupidly small buffer size (2k even though there is space for 16k), I was still not getting as good as p

Re: dhclient sucks cpu usage...

2014-06-10 Thread Alexander V. Chernikov
On 10.06.2014 22:56, John-Mark Gurney wrote: > Alexander V. Chernikov wrote this message on Tue, Jun 10, 2014 at 21:33 +0400: >> On 10.06.2014 20:24, John-Mark Gurney wrote: >>> Alexander V. Chernikov wrote this message on Tue, Jun 10, 2014 at 13:17 >>> +0400: >

Re: ipfw table matching algorithm question

2014-06-14 Thread Alexander V. Chernikov
On 14.06.2014 21:35, Michael Sierchio wrote: Luigi - Does table entry matching use a longest prefix match? I'm not Luigi, but the answer is "yes" anyway :) - M ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebs

Re: ipfw table matching algorithm question

2014-06-15 Thread Alexander V. Chernikov
On 15.06.2014 16:01, Ian Smith wrote: On Sun, 15 Jun 2014 18:08:59 +0800, Julian Elischer wrote: > On 6/15/14, 3:00 AM, Alexander V. Chernikov wrote: > > On 14.06.2014 21:35, Michael Sierchio wrote: > > > Luigi - > > > > > > Does table entry

Re: ipfw table matching algorithm question

2014-06-15 Thread Alexander V. Chernikov
On 15.06.2014 16:36, Ian Smith wrote: On Sun, 15 Jun 2014 16:04:45 +0400, Alexander V. Chernikov wrote: > On 15.06.2014 16:01, Ian Smith wrote: > > On Sun, 15 Jun 2014 18:08:59 +0800, Julian Elischer wrote: > > > On 6/15/14, 3:00 AM, Alexander V. Chernikov wro

Re: Ordering problem in if_detach_internal regarding if_bridge

2014-06-23 Thread Alexander V. Chernikov
On 23.06.2014 19:32, John Baldwin wrote: > On Friday, June 20, 2014 11:25:51 am Roger Pau Monné wrote: >> Hello, >> >> I've stumbled across the following panic when testing Xen netback with >> if_bridge: >> >> Kernel page fault with the following non-sleepable locks held: >> exclusive sleep mutex

Re: Ordering problem in if_detach_internal regarding if_bridge

2014-06-23 Thread Alexander V. Chernikov
On 23.06.2014 20:39, Alexander V. Chernikov wrote: > On 23.06.2014 19:32, John Baldwin wrote: >> On Friday, June 20, 2014 11:25:51 am Roger Pau Monné wrote: >>> Hello, >>> >>> I've stumbled across the following panic when testing Xen netback with >>

Re: tincd and mpd5 make kernel panic

2014-07-15 Thread Alexander V. Chernikov
On 15.07.2014 14:36, chk wrote: Hi, everyone, Help I have a tincd vpn running in freebsd box FreeBSD 10.0-RELEASE-p2 #0 r265318M. below is ifconfig outut: [chk@NUC ~]$ ifconfig em0: flags=8843 metric 0 mtu 1500 options=4219b ether ec:a8:6b:f3:76:6a inet 192.168.2

Re: tincd and mpd5 make kernel panic

2014-07-15 Thread Alexander V. Chernikov
On 15.07.2014 21:40, chenkun wrote: On Tue, Jul 15, 2014 at 8:42 PM, Alexander V. Chernikov wrote: On 15.07.2014 14:36, chk wrote: Hi, everyone, Help I have a tincd vpn running in freebsd box FreeBSD 10.0-RELEASE-p2 #0 r265318M. below is ifconfig outut: [chk@NUC ~]$ ifconfig em0: flags

Re: Why is r250764 not in 9.3?

2014-07-19 Thread Alexander V. Chernikov
On 15.07.2014 21:03, hiren panchasara wrote: + Alexander On Tue, Jul 15, 2014 at 2:32 AM, Kajetan Staszkiewicz wrote: The time has come to upgrade my routers to FreeBSD 9.3. While going through list of patches I had on 9.1, I've noticed that r248070 got into 9.3 but r250764 did not. Why is th

Re: netmap, selective processing.

2014-07-19 Thread Alexander V. Chernikov
On 16.07.2014 21:48, Daniel Corbe wrote: I hope this it the right place to ask questions about netmap. I'm toying with the idea of writing a netmap-based OSPF implementation because bird's OSPF implementation isn't as good as its BGP Hm. What do you need from bird OSPF implementation? IMHO it i

Re: netmap, selective processing.

2014-07-21 Thread Alexander V. Chernikov
On 21.07.2014 18:18, Daniel Corbe wrote: > "Alexander V. Chernikov" writes: > >> On 16.07.2014 21:48, Daniel Corbe wrote: >> Hm. What do you need from bird OSPF implementation? >> IMHO it is much easier to improve and merge bird code instead of >> writing

Re: IPFW tables, dummynet and IPv6

2011-12-18 Thread Alexander V. Chernikov
Pawel Tyll wrote: > Hi lists, > > Are there any plans to implement IPv6 tables in ipfw? It would seem > that our gov. may want to force us into IPv6 in 6 months ;) I've got working implementation for IPv4+IPv6 and interface tables: 15:56 [0] zfsbase# /usr/obj/usr/src/sbin/ipfw/ipfw table 2 list 1

IPFW eXtended tables [Was: Re: IPFW tables, dummynet and IPv6]

2011-12-25 Thread Alexander V. Chernikov
Hello everyone. Final patch version now uses single IP_FW3 socket option. Together with other changes this makes me think such changes should be reviewed by a wider number of people. If there are no objections/comments I plan to commit this on tuesday. Changes: * Tables (actually, radix trees) ar

Re: IPFW eXtended tables [Was: Re: IPFW tables, dummynet and IPv6]

2011-12-25 Thread Alexander V. Chernikov
Bjoern A. Zeeb wrote: > On 25. Dec 2011, at 17:47 , Pawel Tyll wrote: > >> Hi Alexander, >> >>> Changes: >>> * Tables (actually, radix trees) are now created/freed on demand. >> Does this mean IPFW_TABLES_MAX can now be safely set to arbitrarily >> high number that would allow flexible numberin

Re: Firewall Profiling.

2011-12-27 Thread Alexander V. Chernikov
On 27.12.2011 04:54, Pawel Tyll wrote: Hi lists, Are there any profiling tools in the system or ports that would allow me to determine how much processing is being done per packet and how long does it take? I would like to predict possible PPS load for my system and perhaps locate and remo

Re: Firewall Profiling.

2011-12-27 Thread Alexander V. Chernikov
Mike Tancsa wrote: > On 12/27/2011 6:36 AM, Alexander V. Chernikov wrote: >>> Is IPFW efficient enough to firewall 2x10GE (in+out) interfaces >>> without much latency increase, when running on modern hardware >>> with Intel NICs? Majority of processing

Re: netisr defered - active only one thread

2012-02-01 Thread Alexander V. Chernikov
On 01.02.2012 20:45, Andrey Zonov wrote: Hi, I'm trying to tune machine with 8.2-STABLE for heavy network load and now playing with netisr. Could anyone explain me why actually works only one netisr thread if I set them to 8? Can you please supply `nestat -Q` output and clarify you usage patte

Re: netisr defered - active only one thread

2012-02-02 Thread Alexander V. Chernikov
On 02.02.2012 12:59, Коньков Евгений wrote: Здравствуйте, Andrey. Вы писали 2 февраля 2012 г., 8:35:23: AZ> On 02.02.2012 5:11, Alexander V. Chernikov wrote: On 01.02.2012 20:45, Andrey Zonov wrote: Hi, I'm trying to tune machine with 8.2-STABLE for heavy network load and now play

Re: netisr defered - active only one thread

2012-02-02 Thread Alexander V. Chernikov
On 02.02.2012 21:07, Ryan Stone wrote: 2012/2/2 Alexander V. Chernikov: P.S. it is also reasonable to set net.isr.bindthreads to 1 I really don't recommend setting this in any release. There is currently a bug with binding kernel threads that causes unrelated threads to be unnecess

Re: [CFT] multiple FIB support in route(8)

2012-02-04 Thread Alexander V. Chernikov
On 04.02.2012 18:35, Hiroki Sato wrote: Hello, Can anyone review/test the attached patch to add "-fib number" option to route(8)? This should simplify static route configuration across multiple FIBs in rc.conf. Just adding an -fib option like the following will do the trick without cha

Re: [CFT] multiple FIB support in route(8)

2012-02-04 Thread Alexander V. Chernikov
On 04.02.2012 21:05, Hiroki Sato wrote: "Alexander V. Chernikov" wrote in<4f2dc674.4070...@freebsd.org>: me> On 04.02.2012 18:35, Hiroki Sato wrote: me> > Hello, me> > me> >Can anyone review/test the attached patch to add "-fib number&q

[PATCH] BPF locking redesign

2012-03-26 Thread Alexander V. Chernikov
t;From 2ca09cf74ef63fbde0ccede4a7e883c6f0add51d Mon Sep 17 00:00:00 2001 From: "Alexander V. Chernikov" Date: Mon, 26 Mar 2012 14:58:13 +0400 Subject: [PATCH 2/2] Optimize BPF writers --- share/man/man4/bpf.4 | 31 +--- sys/net/bpf.c| 97 ++ sys/net/bpf

Re: Some performance measurements on the FreeBSD network stack

2012-04-20 Thread Alexander V. Chernikov
On 20.04.2012 01:12, Andre Oppermann wrote: On 19.04.2012 22:34, K. Macy wrote: This is indeed a big problem. I'm working (rough edges remain) on changing the routing table locking to an rmlock (read-mostly) which This only helps if your flows aren't hitting the same rtentry. Otherwise you s

Re: svn commit: r233937 - in head/sys: kern net security/mac

2012-04-20 Thread Alexander V. Chernikov
On 17.04.2012 01:29, Adrian Chadd wrote: On 15 April 2012 23:33, Alexander V. Chernikov wrote: On 16.04.2012 01:17, Adrian Chadd wrote: Hi, This has broken (at least) net80211 and bpf, with LOR: Yes, it is. Please try the attached patch Hi, Hello! Sorry for the late reply, answering

Re: svn commit: r233937 - in head/sys: kern net security/mac

2012-04-30 Thread Alexander V. Chernikov
On 28.04.2012 00:42, Adrian Chadd wrote: Hi Alex, Hello! I don't want to be demanding, but would you please consider committing your fixes? I've asked glebius@ for the review for a while ago, but it seems it is a bit staled.. And if you could, would you please do it as a set of commits, o

Re: MPLS in freebsd

2012-05-06 Thread Alexander V. Chernikov
On 06.05.2012 12:11, Kurt Jaeger wrote: Hello, is there any on-job work on MPLS support in FreeBSD? Do you know this site ? It points to some svn repository with mpls patches. http://freebsd.mpls.in/ Major number of depends are already merged to the tree. I'm currently working to update c

Re: null pointer panic in bpf_peers_present

2012-06-03 Thread Alexander V. Chernikov
On 04.06.2012 02:22, Andriy Gapon wrote: on 03/06/2012 23:56 Andriy Gapon said the following: I wonder if anybody else is seeing this and if there is a fix... This is very recent (today's) FreeBSD head with pretty dull network configuration. During boot I run into the following panic: <118>Se

Re: bpf kernel crash

2012-06-04 Thread Alexander V. Chernikov
On 04.06.2012 18:31, Michael Pounov wrote: Kernel crash when you wish to change interface name from vlan0 to other name It seems to be in arrival/departure events. Yes, this is already fixed in r236559. -- WBR, Alexander ___ freebsd-net@freebsd.org

ifconfig accepting hostname as ipv4 address

2012-06-07 Thread Alexander V. Chernikov
Hello list! Since the early days ifconfig(8) has the following functionality: .. address For the DARPA-Internet family, the address is either a host name present in the host name data base, hosts(5), or a DARPA Internet address expressed in the Inte

Re: ifconfig accepting hostname as ipv4 address

2012-06-08 Thread Alexander V. Chernikov
On 08.06.2012 11:20, Jonathan McKeown wrote: On Thursday 07 June 2012 17:00:04 Alexander V. Chernikov wrote: Hello list! Since the early days ifconfig(8) has the following functionality: [hostname in place of literal address] Moreover, ifconfig em0 some_valid_fqdn/MASK silently ignores it

Re: Netgraph and Netflow-v9

2012-06-09 Thread Alexander V. Chernikov
On 09.06.2012 00:04, Kolasinski, Brent D. wrote: Hi All, I have been doing some tests with the FreeBSD ng_netflow module for netflow generation. I am trying to export v9 netflow records to another server running SiLK (which can receive v9 Netlfow from our Cisco routers just fine). When exporti

Re: ipfw rules consuming CPU

2012-06-09 Thread Alexander V. Chernikov
On 09.06.2012 01:56, Sami Halabi wrote: Hi, I Manage a FreeBSD server as an edge router& firewall. the setup has 10G interfaces (ixgbe-82599EB) and 1G interfaces(em-82571EB& bce-BCM5709) connected to 10G/1G switches. With the following setup i get higher cpu usage: bce1-upstream provider with

Re: ipfw rules consuming CPU

2012-06-09 Thread Alexander V. Chernikov
arg from any to table(1) in recv bce1 It is often a good idea to split in/out rules initially (e.g. skipto 1 ip from any to any out) You can send me your ipfw config and we can discuss it more detailed. any other advices? Sami On Sat, Jun 9, 2012 at 1:15 PM, Alexander V. Chernikov mail

  1   2   3   >