Re: Network severely unstable 10.0-PRERELEASE

2013-12-26 Thread Gleb Smirnoff
On Thu, Dec 26, 2013 at 08:32:53AM +1300, Berend de Boer wrote: B> Gleb> Does the system panic the same way as described in B> Gleb> misc/182141) on 10.0? B> B> Indeed, no change. Purely a kernel issue. Repeatable since FreeBSD B> 9.x, across 10.x, across 32-bit and 64-bit. B> B> There's

Re: Network severely unstable 10.0-PRERELEASE

2013-12-26 Thread Gleb Smirnoff
On Thu, Dec 26, 2013 at 02:17:38PM +0400, Gleb Smirnoff wrote: T> On Thu, Dec 26, 2013 at 08:32:53AM +1300, Berend de Boer wrote: T> B> Gleb> Does the system panic the same way as described in T> B> Gleb> misc/182141) on 10.0? T> B> T> B> Indeed, no change. Purely a kernel issue. Repeatabl

Re: Network severely unstable 10.0-PRERELEASE

2013-12-26 Thread Gleb Smirnoff
Berend, On Thu, Dec 26, 2013 at 08:32:53AM +1300, Berend de Boer wrote: B> Gleb> Does the system panic the same way as described in B> Gleb> misc/182141) on 10.0? B> B> Indeed, no change. Purely a kernel issue. Repeatable since FreeBSD B> 9.x, across 10.x, across 32-bit and 64-bit. B>

Re: Network severely unstable 10.0-PRERELEASE

2013-12-26 Thread Berend de Boer
> "Gleb" == Gleb Smirnoff writes: Gleb> Can you share a vmcore from paniced FreeBSD 10 system and Gleb> kernel binary? Yes, what kernel options do I need to compile in to get you this? -- All the best, Berend de Boer pgpSf32MU4UVc.pgp Description: OpenPGP Digital Signature

Re: Network severely unstable 10.0-PRERELEASE

2013-12-26 Thread Gleb Smirnoff
On Fri, Dec 27, 2013 at 01:55:31PM +1300, Berend de Boer wrote: B> > "Gleb" == Gleb Smirnoff writes: B> B> Gleb> Can you share a vmcore from paniced FreeBSD 10 system and B> Gleb> kernel binary? B> B> Yes, what kernel options do I need to compile in to get you this? http://www.freeb

Re: nat before ipsec ...

2013-12-26 Thread Zeus Panchenko
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > target <-> world <--> em0 - freebsd - vlanA <--> LAN > ^^ net A > || > +- netC -.-.-.-.- IPSec -.-.-.-.- net B -+ > ... > where: > A1 is some address from n