Re: time stops under VMWare VM

2013-06-21 Thread Josh Hoppes
I've run into this issue as well in past versions. Set this in /etc/sysctl.conf kern.timecounter.hardware=acpitimer0 On Fri, Jun 21, 2013 at 3:25 PM, André Stöbe wrote: > Rodolfo Gouveia wrote: >> I have had this issue that time stops under my 5.3 AMD64 VM >> running on top of VMware ESXi 5. > >

Re: pf rule idea

2013-01-25 Thread Josh Hoppes
Best option I see here is a dup-to packets to an interface with IDS listening and give it the ability to add IP addresses to a blacklist and flush all states associated with them. PF is a kernel space item, and you want to keep this as simple as possible to minimize bugs. Leave complex stuff like

ACPI0 Interrupts and System Time

2014-07-16 Thread Josh Hoppes
Hello, I've got a few machines I'm setting up which I noticed ACPI0 is generating a lot of constant interrupts which appears to be consuming system time on CPU0 up to 80%. I think other interrupts are still getting time to process, but I'm not sure if it could still cause a performance impact as I'

Re: ACPI0 Interrupts and System Time

2014-07-16 Thread Josh Hoppes
would need to do a full upgrade? Thanks for the help so far! On Wed, Jul 16, 2014 at 11:04 AM, Mike Larkin wrote: > On Wed, Jul 16, 2014 at 08:55:15AM -0500, Josh Hoppes wrote: >> Hello, I've got a few machines I'm setting up which I noticed ACPI0 is >> generating a lot of con

Re: ACPI0 Interrupts and System Time

2014-07-16 Thread Josh Hoppes
> The change was just in the kernel, but unless you wanted to go and pull > out that one patch and apply it to an older tree, you might be better off > installing a complete snap. Ok, I was hoping I could just drop in the kernel from a snapshot since it's harder to revert from an full upgrade in a

Re: ACPI0 Interrupts and System Time

2014-07-16 Thread Josh Hoppes
Mike, Looks like the July 5th snapshot is working great. Thanks for the help. On Wed, Jul 16, 2014 at 11:54 AM, Mike Larkin wrote: > On Wed, Jul 16, 2014 at 09:51:12AM -0700, Mike Larkin wrote: >> On Wed, Jul 16, 2014 at 11:36:21AM -0500, Josh Hoppes wrote: >> > Would there ha

Re: No way natting-to carp interface

2012-03-13 Thread Josh Hoppes
On Tue, Mar 13, 2012 at 11:15 AM, Paquitiu wrote: > Hi. > The issue is simple, I can't match the outgoing traffic to carp ip address. > When I go to some "show myip" web, it always appears the pysical one. > Never the carp one. > > As my ISP provider gives us 4 ips, I use two (one for each nic of

Re: OpenBGPd - how to blackhole traffic?

2012-08-16 Thread Josh Hoppes
http://www.openbsd.org/cgi-bin/man.cgi?query=route&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html Route has a -blackhole option, so you might try "route add -blackhole 0.0.0.0/0 127.0.0.1" On Thu, Aug 16, 2012 at 7:47 AM, Bernd wrote: > Hi list, > > I'd like to blackhole some

Creating route tables

2011-07-19 Thread Josh Hoppes
I'm trying to configure bgpd to run in an alternate routing table so I can use it to manage black holed prefixes. When trying to specify an alternate routing table I get the error message "rtable id 1 does not exist" when starting bgpd. I've gone through route(8) and route(4) but can't find any inf

Re: Creating route tables

2011-07-20 Thread Josh Hoppes
Hi, > > You missed rdomain. > On Wed, 20 Jul 2011 01:26:37 +0700, Josh Hoppes > wrote: > >> I'm trying to configure bgpd to run in an alternate routing table so I >> can use it to manage black holed prefixes. When trying to specify an >> alternate routing tabl

Re: Creating route tables

2011-07-21 Thread Josh Hoppes
Thanks for the help and for the better understanding of routing domains and tables. In the end I was over thinking the problem and didn't actually need the additional routing table. On Thu, Jul 21, 2011 at 10:17 AM, Claudio Jeker wrote: > On Thu, Jul 21, 2011 at 09:40:44AM +0300, Gregory Edigarov

Re: Creating route tables

2011-07-26 Thread Josh Hoppes
I've not been able to test the diff yet, but I'm certainly interested in that functionality. On Tue, Jul 26, 2011 at 2:33 PM, Claudio Jeker wrote: > On Thu, Jul 21, 2011 at 10:20:38PM +0200, Claudio Jeker wrote: >> On Thu, Jul 21, 2011 at 01:57:10PM -0500, Josh Hoppes wrote:

Re: bgpctl shiw rib out displaying incorrect information

2011-08-31 Thread Josh Hoppes
Why are you using "set nexthop self" and then trying to change that with the filter "allow quick to 172.29.1.52 set nexthop 172.29.1.200". If you don't want your nexthop to be yourself don't tell bgpd to do that. On Wed, Aug 31, 2011 at 4:08 AM, Tony Sarendal wrote: > On Wed, Aug 31, 2011 at 11:0

Re: pfsync on more than 2 hosts

2011-10-27 Thread Josh Hoppes
pfsync has been using multicast by default for a long time, I think possibly from the start. You have to explicitly define a "syncpeer" if you want it unicast. The list probably ignored the question because the answer was clear in the documentation.

Re: 1 Mpps router and OpenBSD?

2011-10-27 Thread Josh Hoppes
The only limitation I've seen lately to OpenBSD pushing packets is how many interrupts it can handle. I don't know if 5.0 has helped with this but 4.9 still appeared to be limited to CPU0 for processing interrupts. On Thu, Oct 27, 2011 at 1:35 PM, Chris Cappuccio wrote: > 5.0 may be able to do th

Re: Activating "ip6.forwarding" and "accept_rtadv" at the same time

2010-09-05 Thread Josh Hoppes
I'm pretty sure IPv6 forwarding and accepting routing advertisements will be a necessity going forward. At the current time I don't know of any other way to dynamically find the default route in IPv6, necessary for end user gateways on consumer ISPs. Even using DHCPv6 your default gateway is found

Re: dhcpd and net.inet.ip.mforwarding / multipath

2009-09-14 Thread Josh Hoppes
mforwarding is for multicast forwarding and multipath is to enable multiple paths for the same destination network segment. On Mon, Sep 14, 2009 at 5:08 PM, Doug Milam wrote: > Hello, > > I want to be sure that the following two sysctl variables are not needed for > a basic internet router/gatew

Re: relayd feature request

2009-09-18 Thread Josh Hoppes
You could try using the tag option in the configuration, and then have a rule in your pf.conf act on that tag to do what ever you need. On Fri, Sep 18, 2009 at 2:31 PM, Brian McCann wrote: > Hi all. I've been using relayd for about 6 months or so now on OpenBSD 4.4. > I'm quite happy with it, b

Re: relayd feature request

2009-09-18 Thread Josh Hoppes
I should clarify that the tag option is usable as an option to a redirection, and not a relay if I understand the man page correctly. On Fri, Sep 18, 2009 at 3:10 PM, Josh Hoppes wrote: > You could try using the tag option in the configuration, and then have > a rule in your > pf.co

Re: What VM does OpenBSD run well under>

2009-10-31 Thread Josh Hoppes
I've had decent luck with VirtualBox as of late, in previous versions VirtualBox would cause problems at install time bugging out when extracting packages. I've never had a problem with VMware though, but my experience is limited. I've been running it under ESXi 4.0 for a while and it's been very

Re: simple pf match question

2011-01-28 Thread Josh Hoppes
If I'm reading the man page correctly the rule only counts if it's the one creating a state. Since the match rule won't be the deciding one to generate a state or not I expect it will never actually count on those statistics. On Fri, Jan 28, 2011 at 8:48 PM, Ted Unangst wrote: > I am apparently n