Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-28 Thread Andy Lemin
> On 29 Sep 2023, at 00:09, Sonic wrote: > >  > Hopefully not as dumb of a question as I suspect it might be. > Does the generic... > = > match out on $ext_if inet proto tcp from ($ext_if) set prio (3, 7) > match in on $ext_if inet proto tcp to ($ext_if) set prio (3, 7) > = > ...take

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-28 Thread Sonic
Hopefully not as dumb of a question as I suspect it might be. Does the generic... = match out on $ext_if inet proto tcp from ($ext_if) set prio (3, 7) match in on $ext_if inet proto tcp to ($ext_if) set prio (3, 7) = ...take advantage of this patch when using wireguard or does the match ne

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-21 Thread Andrew Lemin
On Fri, Sep 22, 2023 at 12:27 PM David Gwynne wrote: > On Mon, Sep 18, 2023 at 12:47:52PM -, Stuart Henderson wrote: > > On 2023-09-17, Andrew Lemin wrote: > > > I have been testing the Wireguard implementation on OpenBSD and noticed > > > that the ToS field is not being copied from the inne

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-21 Thread David Gwynne
On Mon, Sep 18, 2023 at 12:47:52PM -, Stuart Henderson wrote: > On 2023-09-17, Andrew Lemin wrote: > > I have been testing the Wireguard implementation on OpenBSD and noticed > > that the ToS field is not being copied from the inner unencrypted header to > > the outer Wireguard header, resulti

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-19 Thread Andy Lemin
On 19 Sep 2023, at 20:07, Janne Johansson wrote:Den sön 17 sep. 2023 kl 09:19 skrev Andrew Lemin :Hi, I have been testing the Wireguard implementation on OpenBSD and noticed that the ToS field is not being copied from the inner unencrypted header to the outer Wireguard he

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-19 Thread Janne Johansson
Den sön 17 sep. 2023 kl 09:19 skrev Andrew Lemin : > Hi, > > I have been testing the Wireguard implementation on OpenBSD and noticed > that the ToS field is not being copied from the inner unencrypted header to > the outer Wireguard header, resulting in ALL packets going into the same PF > Prio /

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-19 Thread Stuart Henderson
On 2023/09/19 19:36, Andrew Lemin wrote: > > Awesome! Thank you so much Stuart :D > I will test this weekend.. btw if I'm not mistaken I think this will only copy the priority to the mbuf header rather than to the IP header, so will be used internally in OpenBSD but not on the rest of the network

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-19 Thread Andrew Lemin
On Mon, Sep 18, 2023 at 10:59 PM Stuart Henderson wrote: > On 2023-09-17, Andrew Lemin wrote: > > I have been testing the Wireguard implementation on OpenBSD and noticed > > that the ToS field is not being copied from the inner unencrypted header > to > > the outer Wireguard header, resulting in

Re: OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-18 Thread Stuart Henderson
On 2023-09-17, Andrew Lemin wrote: > I have been testing the Wireguard implementation on OpenBSD and noticed > that the ToS field is not being copied from the inner unencrypted header to > the outer Wireguard header, resulting in ALL packets going into the same PF > Prio / Queue. > > For example,

OpenBSD Wireguard implementation not copying ToS from inner to outer WG header

2023-09-17 Thread Andrew Lemin
Hi, I have been testing the Wireguard implementation on OpenBSD and noticed that the ToS field is not being copied from the inner unencrypted header to the outer Wireguard header, resulting in ALL packets going into the same PF Prio / Queue. For example, ACKs (for Wireguard encrypted packets) end