USB Tethering and forwarding
Hi, list. Server works as router for small network and some services in the jails. When I connect Android-based smartphone and attempt to use USB Tethering, the net.inet.ip.forwarding becomes 0 and I must change it to 1 every time. Is this normal behavior? FreeBSD server.local 10.1-STABLE FreeBSD 10.1-STABLE #1 r275636: Mon Dec 22 11:05:33 EET 2014 wishmaster@server.local:/usr/obj/usr/src/sys/SMS i386 Kernel has been compiled with VIMAGE Cheers, Vitaliy ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org
Re: FIXED [Re: Netmap-ipfw, how to fill a table by 15K entries ?]
On 23 Dec 2014, at 21:26, Luigi Rizzo ri...@iet.unipi.it wrote: Ok please pull the next branch from code.google.com/p/netmap-ipfw/ which has a fix applied (set TCP_NODELAY on the connection). With that i can load a table with 64k entries in about 3 seconds. The master branch also has the same fix, but loading a table appears to be buggy when it comes to tables, I think it is pointless to debug the problem in that branch since next contains more recent code from Alexander Chernikov which is much more robust for tables. The only thing I can add here is that new table code is capable of doing batch add/del operations via ipfw table AAA add cidr1 value1 [cidr2 value2] [cidr3 value3] ... Thanks for the bug report. cheers luigi On Tue, Dec 23, 2014 at 2:02 PM, IT Department, AkNet ISP i...@aknet.kg wrote: Hello to All Can anybody tell, how to fill a table with large number of entries ? Sure, It can be done by standard method by ./ipfw table 10 add xxx.xxx.xxx.xxx in a script, but each entry takes couple of seconds to be placed into a table: ./ipfw table 10 add 192.168.10.50 connected to 127.0.0.1: And takes many hours to do all job. May be there is a way to open a socket and place a bulk commands, for example: telnet localhost table 10 add xxx.xxx.xxx.xxx But it doesn't work as written above. May be Senior Luigi can explane how to do such work as fast as it done by ordinary ipfw ? Best regards Azamat AkNet ISP ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org -- -+--- Prof. Luigi RIZZO, ri...@iet.unipi.it . Dip. di Ing. dell'Informazione http://www.iet.unipi.it/~luigi/. Universita` di Pisa TEL +39-050-2211611 . via Diotisalvi 2 Mobile +39-338-6809875 . 56122 PISA (Italy) -+--- ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org
IPv6 routes leaking between FIBs?
Hello, Trying out FreeBSD for the first time to build a firewall box that’s multi-core and runs PF. I’m very interested in the FIB code, as it lines up well with the way my core networking equipment works and should allow me to route traffic on an interface that’s logically separate from the management interfaces. I’ve been playing for a bit with the FIB features, but I’m getting hung up on IPv6. I’m trying to set up two interfaces on my box to each have a different FIB, and to not leak routes between the interfaces: # sysctl net.add_addr_allfibs=0 # ifconfig em1 inet 192.0.2.1/24 fib 1 # ifconfig em1 inet6 2001:db8:dead:beef::1/64 fib 1 # ifconfig em2 inet 203.0.113.1/24 fib 2 # ifconfig em2 inet6 2001:db8:cafe:babe::1/64 fib 2 If I then check the routing tables for each FIB, here’s what I get: # setfib -F 1 netstat -rn Routing tables (fib: 1) Internet: DestinationGatewayFlags Netif Expire 192.0.2.0/24 link#2 U em1 192.0.2.1 link#2 UHS lo0 Internet6: Destination Gateway Flags Netif Expire 2001:db8:cafe:babe::/64 link#3U em2 2001:db8:dead:beef::/64 link#2U em1 2001:db8:dead:beef::1 link#2UHS lo0 fe80::%em1/64 link#2U em1 fe80::a00:27ff:fef6:162a%em1 link#2UHS lo0 fe80::%em2/64 link#3U em2 fe80::%lo0/64 link#5U lo0 # setfib -F 2 netstat -rn Routing tables (fib: 2) Internet: DestinationGatewayFlags Netif Expire 203.0.113.0/24 link#3 U em2 203.0.113.1link#3 UHS lo0 Internet6: Destination Gateway Flags Netif Expire 2001:db8:cafe:babe::/64 link#3U em2 2001:db8:cafe:babe::1 link#3UHS lo0 2001:db8:dead:beef::/64 link#2U em1 fe80::%em1/64 link#2U em1 fe80::%em2/64 link#3U em2 fe80::a00:27ff:fe62:d267%em2 link#3UHS lo0 fe80::%lo0/64 link#5U lo0 Note that as expected, the IPv4 routes are constrained to their FIB (192.0.2.0 to FIB 1 and 203.0.113.0 to FIB 2). However, the IPv6 routes (deadbeef and cafebabe) leak between the FIBs; both prefixes that I add are listed in both FIBs (as well as the link-local stuff). According to: https://www.freebsd.org/news/status/report-2012-01-2012-03.html#Multi-FIB:-IPv6-Support-and-Other-Enhancements IPv6 parity is claimed for the FIB code, so I’m not sure if I’m doing it wrong, or if there’s a problem with the FIB code and IPv6 routes. Thanks in advance for any help or clarification! Jason ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org
