On Thu, Jul 06, 2017 at 08:25:06PM +0100, Stuart Henderson wrote:
> Remove "default" from the rule.

I am unsure how to interprete the sentence: if I remove "default",
shouldn't the queue apply only on states with "set queue fq" ? And in my
ruleset there are none like that. As I want to use the fq queue on all
my states, using "default" seems right.

But I agree that testing show a different behaviour...

If I define a bandwidth-queue without "default", pfctl complains:
# pfctl -f /etc/pf.conf
pfctl: no default queue specified

If I define a flow-queue without "default", pfctl doesn't complains, and
queue statistic seems to follow activity (so the flow-queue to be used).

If I define a flow-queue with "default", pfctl doesn't complains, and I
couldn't send packets...

It is a bit weird for me, but at least it works without "default".

Thanks Stuart.
-- 
Sebastien Marie

> 
> On 6 July 2017 18:43:47 Sebastien Marie <sema...@online.fr> wrote:
> 
> > Hi,
> > 
> > With last snapshot (Jul 5), I experimented problems with networking:
> > I couldn't send packets.
> > 
> > As example:
> > 
> > # ping 8.8.8.8
> > PING 8.8.8.8 (8.8.8.8): 56 data bytes
> > ping: sendmsg: No buffer space available
> > ping: wrote 8.8.8.8 64 chars, ret=-1
> > ^C
> > 
> > My previous (working) snap was Jun 26.
> > 
> > I tracked a bit the problem until I found that commenting the flow queue
> > line in pf.conf resolv my problem.
> > 
> > The offended line (on my laptop) was:
> >     queue fq on bge0 flows 1024 default
> > 
> > 
> > I tried to reproduce on other host (i386), recompiling from source,
> > using up-to-date cvs tree. The problem is still here, and is the same:
> > reloading pf rules with flow queue makes network to become unusable: "No
> > buffer space available".
> > 
> > The queue statistic shows that qlength is full.
> > 
> > # pfctl -sq -v
> > queue fq on bce0 flows 1024 default
> >   [ pkts:          0  bytes:          0  dropped pkts:      7 bytes: 650 ]
> >   [ qlength:  50/ 50  avg delay: 0.000ms std-dev: 0.000ms  flows:   1 ]
> > 
> > The dmesg below is my test host (with bce0), not my laptop (with bge0).
> > 
> > Thanks.
> > --
> > Sebastien Marie

Reply via email to