[Bug 217997] [pf] orphaned entries in src-track

2017-03-28 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217997 --- Comment #5 from Max --- Well, I can reproduce the problem. I have 3 hosts with 10.3 release (generic kernel). "Server", "client" and "firewall". Complete pf.conf of "firewall" host: set skip on {lo, em2} table persist { 192.168.0.10,

Re: pf, ALTQ and 10G

2017-03-28 Thread Kristof Provost
On 28 Mar 2017, at 9:33, Eugene M. Zheganin wrote: I need to implement QoS on a 10G interface (ix(4)) with bandwidth of 4-5 Gbit/sec. In general I'm using pf on FreeBSD, since I like it more than ipfw. But I'm aware that it's kind of ancient and wasn't updated for a long time from the upstream

[Bug 217997] [pf] orphaned entries in src-track

2017-03-28 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217997 --- Comment #4 from Robert Schulze --- (In reply to Max from comment #3) Those old-aged src track entries are only on rdr rule: # pfctl -vsS | grep -A1 $client $client -> $www_host ( states 4, connections 0, rate 0.0/0s ) age 02:39:54,

pf, ALTQ and 10G

2017-03-28 Thread Eugene M. Zheganin
Hi. I need to implement QoS on a 10G interface (ix(4)) with bandwidth of 4-5 Gbit/sec. In general I'm using pf on FreeBSD, since I like it more than ipfw. But I'm aware that it's kind of ancient and wasn't updated for a long time from the upstream (and the upstream still doesn't support SMP).