pf, ALTQ and 10G

Hi. I need to implement QoS on a 10G interface (ix(4)) with bandwidth of 4-5 Gbit/sec. In general I'm using pf on FreeBSD, since I like it more than ipfw. But I'm aware that it's kind of ancient and wasn't updated for a long time from the upstream (and the upstream still doesn't support SMP).

PF artifacts in NAT and ICMP exceeded replies

Hi. I found a weird artifacts on one of my FreeBSD installations. Here comes the traceroute and tcpdumps outputs, mostly self-explanatory. Problem: some of the ICMP exceeded in transit replies have source IP translated to the original traceroute destination IP (i.e. I traceroute host A, and some o

dscp set/get

Hi. pf still lacks the DSCP handling, will it be difficult/expensive to add this ? AFAIK ipfw got this recently. Eugene. ___ freebsd-pf@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "free

cannot delete state, when the state is obviously present

Hi. Why it's often impossible to delete state from state table ? Suppose I have a state: all icmp 46.146.220.88:36386 <- 104.81.60.125:36386 0:0 age 00:00:20, expires in 00:00:05, 2:2 pkts, 128:128 bytes, rule 43 id: 010073bcdded creatorid: 1017b0dc # pfctl -k id -k 010073bc

ecn/red

Hi. Is ECN implemented in FreeBSD ? What do I need to turn it on ? Does it work in conjunction with fp/RED ? I see sysctl oid, but I have a strong impression that it should be used with pf. On the other hand, I have a working set of HFSC queues - do I need to turn on this sysctl oid ? Thanks

Re: carp-ng and vhid>9

Hi. On 26.07.2013 18:24, Eugene M. Zheganin wrote: > Hi. > > I use FreeBSD 10.0-CURRENT. > Call me a dumbhead, but I have a strong impression that using vhid>9 > causes problems: > Discard my last message, I found that ipv6 carp was filtered out on these interfaces. Sorry fo

carp-ng and vhid>9

Hi. I use FreeBSD 10.0-CURRENT. Call me a dumbhead, but I have a strong impression that using vhid>9 causes problems: Host A (r251857): # ifconfig vlan3 vlan3: flags=8943 metric 0 mtu 1500 options=3 ether 00:1a:64:21:94:89 inet 128.127.145.2 netmask 0xfff8 broadcast 1

pftop/10.x

Hi. Why I'm getting this ? [emz@taiga:/<1>log/squid]# pftop pftop: DIOCGETSTATUS: Permission denied > Error Reading status (DIOCGETSTATUS): Permission denied (I'm kinda root). This is harmless (never used pftop, was just curious about it), but still worth fixing. Thanks. __

pf/altq and default queue

Hi. I have an 8.1-RELEASE (yup, a bit outdated). Today I saw a situation when I observe a speed about 90 MBit/sec on an interface where altq is enabled, but root queue shows only half of that amount. Here comes the output: config: altq on em0 cbq bandwidth 100Mb queue { domru, internal } queu

hanging system and pf

Hi. I have one FreeBSD 9.1-STABLE which hangs often, and I suspect the pf. This sure looks like on of those posts 'I did something wrong but I will blame FreeBSD' but the thing is that I have a couple of open pr's that concern this machine and this particular pf configuration. So, the thing is

Re: kern/155945: [pf] [ip6] pf match engine is broken with ipv6

The following reply was made to PR kern/155945; it has been noted by GNATS. From: "Eugene M. Zheganin" To: bug-follo...@freebsd.org Cc: Subject: Re: kern/155945: [pf] [ip6] pf match engine is broken with ipv6 Date: Sun, 27 Mar 2011 00:12:22 +0500 Yes, I does. Thank you. So,