Re: msi_delroute() panic

2013-01-11 Thread Jim Miller
I can try. Theo also sent me some ideas to try which involved cutting out PCI Express hotplug support from sys/dev/pci/ppb.c Do you have reason to believe this has been fixed? -Jim On 1/11/13 8:25 AM, Sebastian Benoit wrote: Jim Miller(jmil...@sri-inc.com) on 2013.01.09 15:20:03 -0500: Hi

msi_delroute() panic

2013-01-09 Thread Jim Miller
Hi All, I saw a previous post back in late December where someone was discussing a random panic() related to msi_delroute(). I'm having the same problem I believe on a OpenBSD 5.1 box. The panic manifests itself about every week but no I can't find any specific event that is the cause. It

iked vs. isakmpd + carp

2012-10-19 Thread Jim Miller
Two part question: 1. Anyone had any success getting iked and carp working on OpenBSD 5.1 (amd64)? We can get it working with isakmpd. The issue seems to be that iked wants to send out packets as the physical interface IP instead of the carp IP. iked documentation eludes to the fact that it

Re: iked vs. isakmpd + carp

2012-10-19 Thread Jim Miller
, 2012 at 8:10 PM, Tyler Morgan tyl...@tradetech.net wrote: On 10/19/2012 1:16 AM, Jim Miller wrote: Two part question: 1. Anyone had any success getting iked and carp working on OpenBSD 5.1 (amd64)? We can get it working with isakmpd. The issue seems to be that iked wants to send out packets

Re: IPSEC VPN performance

2012-10-01 Thread Jim Miller
streams. Assuming PF was enabled for your test (the default configuration), the performance should be about the same with a proper ruleset. Traffic for existing states won't hit the ruleset at all. On Fri, Sep 28, 2012 at 06:39:14PM -0400, Jim Miller wrote: Yes. Let me double check

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
AM, Otto Moerbeek o...@drijf.net wrote: On Thu, Sep 27, 2012 at 05:30:38PM -0400, Jim Miller wrote: Hi, I'm trying to determine if the performance I'm seeing between two OpenBSD 5.1 IPSEC VPN endpoints is typical (or expected). I recognize there are quite a few variables to consider and I'm

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
at root scsibus2 at softraid0: 256 targets root on sd0a (124c86b6eb046834.a) swap on sd0b dump on sd0b On 9/28/12 8:40 AM, Otto Moerbeek wrote: On Fri, Sep 28, 2012 at 08:38:37AM -0400, Jim Miller wrote: Sorry I was stingy on the dmesg output. Here's the full dump. I will test with other AES

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
as OpenBSD still seems to find the instructions - Don't use USB for testing performance. ;) Thanks to all that helped. -Jim On 9/28/12 3:10 PM, Christian Weisgerber wrote: Jim Miller jmil...@sri-inc.com wrote: The test I'm using is this Host A: # nc -v -l 12345 | /dev/null Host B: # dd if=/dev/zero

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
/28/12 5:19 PM, Hrvoje Popovski wrote: Hi, On 28.9.2012 22:09, Jim Miller wrote: So using another Mac w/ 1Gb ethernet adapter to a Linux box w/ 1Gb eth I was able to achieve approx. 600Mbps performance through the test setup (via iperf and my dd method). 600Mbps via ipsec between two Intel

IPSEC VPN performance

2012-09-27 Thread Jim Miller
Hi, I'm trying to determine if the performance I'm seeing between two OpenBSD 5.1 IPSEC VPN endpoints is typical (or expected). I recognize there are quite a few variables to consider and I'm sure I've not toggled each one but I could use a sanity check regardless. Question: With the