Re: kern/133902: [tun] Killing tun0 iface ssh tunnel causes Panic String: page fault

2009-04-22 Thread linimon
Old Synopsis: Killing tun0 iface ssh tunnel causes Panic String: page fault
New Synopsis: [tun] Killing tun0 iface ssh tunnel causes Panic String: page 
fault

Responsible-Changed-From-To: freebsd-bugs-freebsd-net
Responsible-Changed-By: linimon
Responsible-Changed-When: Wed Apr 22 06:51:05 UTC 2009
Responsible-Changed-Why: 
Over to maintainer(s).

http://www.freebsd.org/cgi/query-pr.cgi?pr=133902
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: CARP as a module; followup thoughts

2009-04-22 Thread Bruce Simpson

Will Andrews wrote:

I'm sure most of this sounds like rambling from a crazed lunatic or
something, but I'm also sure most who understand my patch agree that
it isn't the nicest of ways to make it possible to load carp (or any
other protocol) as a module.
  


Not at all. It is a mess to be sure.

One of the criticisms of Netgraph is that it is poorly understood 
outside of its immediate developer community. The BSD networking stack 
has a number of textbooks written for it, Netgraph does not, and it 
probably factored into the decision of Itronix to sponsor a from-scratch 
implementation of Bluetooth for NetBSD -- netgraph has been considered 
'a bridge too far', to score a cheesy pun. It has also been criticised 
for performance, although I am not in a position to judge either way at 
the moment, I simply don't have all the information to hand, and am busy 
doing other things often.


I don't have time to look at your patch right now, unfortunately, but 
can try to make time when less pressed.


When I last looked at the CARP hooks, during the ether_input() cleanup, 
all that was really missing was the ability to register soft MAC 
addresses in the perfect hash filter entries other than the one 
programmed into the card (or configured via ifconfig(8) mechanisms).


cheers
BMS
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: Network Card

2009-04-22 Thread Bruce Simpson

Kaushal Shriyan wrote:

...
so there is no such command line utility to get to know about that
information on Free BSD ?
  


There is no sure fire way to get that information anywhere, unless 
you're working with a system which has implemented PCI geographical 
addressing. Some of this is present in hotplug support. If someone pays 
for the feature, I'm sure it can get done...


Having said that you should be able to make educated guesses about where 
something is, just by looking at the bus hierarchy (e.g. using devinfo 
or similar tool). This is no different from anywhere else that 
implements PCI.


thanks,
BMS
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: CARP as a module; followup thoughts

2009-04-22 Thread Bruce M. Simpson

Hi,

Will Andrews wrote:

Hello,

I've written a patch (against 8.0-CURRENT as of r191369) which makes
it possible to build, load, run,  unload CARP as a module, using the
GENERIC kernel.  It can be obtained from:

http://firepipe.net/patches/carp-as-module-20090421.diff
  


There's no need to implement the in*_proto_register() stuff in that 
patch, you should just be able to re-use the encap_attach_func() 
functions. Look at how PIM is implemented in ip_mroute.c for an example.


Other than that it looks like a good start... but would hold off on 
committing as-is. the more general case of registering a MAC address on 
an interface should be considered.


cheers,
BMS
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: IPFW missing feature

2009-04-22 Thread Chris Cowart
KES wrote:
 , Lowell.
 
 ?? ?? 16 ?? 2009 ?., 15:22:31:
 
 LG KES kes-...@yandex.ru writes:
 
  The tablearg feature provides the ability to use a value, looked up in
  the table, as the argument for a rule action, action parameter or rule
  option.  This can significantly reduce number of rules in some 
 configura-
  tions.  If two tables are used in a rule, the result of the second 
 (des-
  tination) is used.  The tablearg argument can be used with the 
 following
  actions: nat, pipe, queue, divert, tee, netgraph, ngtee, fwd, skipto
  action parameters: tag, untag, rule options: limit, tagged.


 Why tablearg cannot be used with setfib?
 
 LG Because tables are a feature of IPFW, and the FIB isn't.
 
 setfib is also feature of ipfw. see man:
 
  setfib fibnum
  The packet is tagged so as to use the FIB (routing table) fibnum
  in any subsequent forwarding decisions. Initially this is limited
  to the values  0 through 15. See setfib(8).  Processing continues
  at the next rule.
 
 There is no any difficulties to use 'tablearg' as 'fibnum'
 
 ipfw add 3 setfib 2 all from 192.168.0.0/16 to any in recv IFACE
 ipfw add 3 setfib tablearg all from table(X) to any in recv IFACE
 
 but now this is not mistake to write 'setfib tablearg'. IPFW just
 replace tablearg in rule with 0
 It seems like a bug. because of it MUST work in proper way or DO NOT
 work at all. IMHO


I use tablearg with netgraph.

For example,
 
ipfw add netgraph tablearg all from 'table(9)' to any in

When I run ipfw show, I see:

02380 408  60358 netgraph tablearg ip from any to table(9) in
  
KES, do you mean to say that when you run `ipfw show' the rule is echoed
back to you as:

setfib 0 all from table(X) to any in recv IFACE

instead of tablearg?

If that's the case, it sounds like ipfw is parsing the rule incorrectly.
If tablearg isn't supported by setfib, I would expect a syntax error to
be thrown and not a different rule being inserted into your ruleset. If
this is the behavior you're seeing, you should run it by the folks on 
the -net mailing list. That would also be a good place to ask about 
future plans to support this feature.

-- 
Chris Cowart
Network Technical Lead
Network  Infrastructure Services, RSSP-IT
UC Berkeley

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: IPFW missing feature

2009-04-22 Thread Julian Elischer

Chris Cowart wrote:

KES wrote:

, Lowell.

?? ?? 16 ?? 2009 ?., 15:22:31:

LG KES kes-...@yandex.ru writes:


 The tablearg feature provides the ability to use a value, looked up in
 the table, as the argument for a rule action, action parameter or rule
 option.  This can significantly reduce number of rules in some configura-
 tions.  If two tables are used in a rule, the result of the second (des-
 tination) is used.  The tablearg argument can be used with the following
 actions: nat, pipe, queue, divert, tee, netgraph, ngtee, fwd, skipto
 action parameters: tag, untag, rule options: limit, tagged.


Why tablearg cannot be used with setfib?

LG Because tables are a feature of IPFW, and the FIB isn't.

setfib is also feature of ipfw. see man:

 setfib fibnum
 The packet is tagged so as to use the FIB (routing table) fibnum
 in any subsequent forwarding decisions. Initially this is limited
 to the values  0 through 15. See setfib(8).  Processing continues
 at the next rule.

There is no any difficulties to use 'tablearg' as 'fibnum'

ipfw add 3 setfib 2 all from 192.168.0.0/16 to any in recv IFACE
ipfw add 3 setfib tablearg all from table(X) to any in recv IFACE

but now this is not mistake to write 'setfib tablearg'. IPFW just
replace tablearg in rule with 0
It seems like a bug. because of it MUST work in proper way or DO NOT
work at all. IMHO



I use tablearg with netgraph.

For example,
 
ipfw add netgraph tablearg all from 'table(9)' to any in


When I run ipfw show, I see:

02380 408  60358 netgraph tablearg ip from any to table(9) in
  
KES, do you mean to say that when you run `ipfw show' the rule is echoed

back to you as:

setfib 0 all from table(X) to any in recv IFACE

instead of tablearg?

If that's the case, it sounds like ipfw is parsing the rule incorrectly.
If tablearg isn't supported by setfib, I would expect a syntax error to
be thrown and not a different rule being inserted into your ruleset. If
this is the behavior you're seeing, you should run it by the folks on 
the -net mailing list. That would also be a good place to ask about 
future plans to support this feature.




Unfortunately 'tablearg' is not implemented in the code as a generic
thing, but rather needs to be implemented separately for each place
where it may be used. In this case I simply didn't think of it when
I added setfib.

It does make sense to allow it and I will consider adding this in the
future as it would be useful for policy routing.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org