Re: MPSAFE - Warning
On Mon, 15 Nov 2004, Kris Kennaway wrote: > > I got some messages for my customized kernel, using IPsec and IPv6: > > > > WARNING: MPSAFE network stack disabled, expect reduced performance. > > > > My kernel have the following option: > > > > options NET_WITH_GIANT > > > > How is possible to correct this warning > > Wait for a later release, or disable IPv6 :-) > > IPv6 is not yet MP-safe. FWIW, the IPv6 code is probably about 80%+ safe -- certainly most of the common code paths, so in practice you can run without Giant and use IPv6 without too much problem (the routing, UDP and TCP code is all safe, and that's most of where IPv6 munges data structures). The real problem is KAME IPSEC, right now. I know that George Neville-Neil has been working on this, but I'm not sure he has specific plans for when it will be done. My hope is that in 5.4, the KAME IPSEC code will be locked down. Now that the KAME developers have switched to 5.3 as their baseline, they will also be getting that message every boot, which might improve motivation to fix it :-). Robert N M Watson FreeBSD Core Team, TrustedBSD Projects [EMAIL PROTECTED] Principal Research Scientist, McAfee Research ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: MPSAFE - Warning
On Tue, 16 Nov 2004, Giuliano Cardozo Medalha wrote: > I got some messages for my customized kernel, using IPsec and IPv6: > > WARNING: MPSAFE network stack disabled, expect reduced performance. > > My kernel have the following option: > > options NET_WITH_GIANT > > How is possible to correct this warning The problem here is the KAME IPSEC code, which is not yet able to run without the Giant lock. For those using only IPv4, FAST_IPSEC is an option, as it can run without the Giant lock. Unfortunately, until the KAME IPSEC code is locked down, your system will need to run with Giant. The good news is that it will probably perform well, just not optimally. If you don't notice any specific performance related problems, you can safely ignore the error. BTW, when compiling with KAME IPSEC, debug.mpsafenet=1 will be forced, you don't actually need the NET_WITH_GIANT option; that option basically does the same thing as the statement in the KAME code that says "NET_NEEDS_GIANT"). Robert N M Watson FreeBSD Core Team, TrustedBSD Projects [EMAIL PROTECTED] Principal Research Scientist, McAfee Research ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: MPSAFE - Warning
On Mon, Nov 15, 2004 at 10:14:31PM -0800, Matthew T. Lager wrote: > I too receive this error. I require the use of KAME IPSEC. Basiclly, > services such as IPV6 and IPSEC require the kernel to be GIANT locked, > which is incompatable with MPSAFE. 5.3 forces MPSAFE to 0 if the system is > GIANT locked, hence the warning. > > I backed down to 5.2.1 and ran IPSEC with no problems. Just to be clear, there's no danger in running IPv6 or KAME IPSEC in 5.3, you just won't get any benefits from running it on a SMP machine (neither will you in 5.2.1 or 4.x). > I actually did > experience many issues with my IPSEC tunnel in 5.3. Any problems you observed are presumably orthogonal to the Giant-ness, so you ideally should report them so they can be analyzed. Kris pgpz23uJJJ7gb.pgp Description: PGP signature
Re: MPSAFE - Warning
I too receive this error. I require the use of KAME IPSEC. Basiclly, services such as IPV6 and IPSEC require the kernel to be GIANT locked, which is incompatable with MPSAFE. 5.3 forces MPSAFE to 0 if the system is GIANT locked, hence the warning. I backed down to 5.2.1 and ran IPSEC with no problems. I actually did experience many issues with my IPSEC tunnel in 5.3. I beleive a GIANT FREE IPV6/IPSEC implementation is a requirement for the 5.4 release, hopefully we see it soon in the -STABLE tree, keep an eye on freebsd.org/releng as it is listed as a project in the TODO list (at least for IPSEC)... Matthew T. Lager > On Tue, Nov 16, 2004 at 12:54:39AM -0200, Giuliano Cardozo Medalha wrote: >> Hi, >> >> I got some messages for my customized kernel, using IPsec and IPv6: >> >> WARNING: MPSAFE network stack disabled, expect reduced performance. >> >> My kernel have the following option: >> >> options NET_WITH_GIANT >> >> How is possible to correct this warning > > Wait for a later release, or disable IPv6 :-) > > IPv6 is not yet MP-safe. > > Kris > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: MPSAFE - Warning
On Tue, Nov 16, 2004 at 12:54:39AM -0200, Giuliano Cardozo Medalha wrote: > Hi, > > I got some messages for my customized kernel, using IPsec and IPv6: > > WARNING: MPSAFE network stack disabled, expect reduced performance. > > My kernel have the following option: > > options NET_WITH_GIANT > > How is possible to correct this warning Wait for a later release, or disable IPv6 :-) IPv6 is not yet MP-safe. Kris pgpkhKEquiY5w.pgp Description: PGP signature
