From owner-freebsd-net@FreeBSD.ORG Tue Feb 1 16:04:40 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 30EB216A4CE for ; Tue, 1 Feb 2005 16:04:40 +0000 (GMT) Received: from mail.astra-sw.com (mail.astra-sw.com [82.140.87.237]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1E0AC43D60 for ; Tue, 1 Feb 2005 16:04:39 +0000 (GMT) (envelope-from Nickolay.Kritsky@astra-sw.com) Received: from exchange.stardevelopers4msi.com ([192.168.64.10]) by mail.astra-sw.com (8.12.11/8.12.11) with ESMTP id j11G4bft025153 for ; Tue, 1 Feb 2005 19:04:37 +0300 (MSK) X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: quoted-printable Date: Tue, 1 Feb 2005 19:06:50 +0300 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: dummynet and vr(4)/egress broken in 4.11 ? thread-index: AcUG2g1hCtI1mxaQT7eIeIenNQ0DDQBnZjHw From: "Nickolay Kritsky" To: "Jeremie Le Hen" , Subject: RE: dummynet and vr(4)/egress broken in 4.11 ? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Feb 2005 16:04:40 -0000 Are you using ipnat for NAT'ing? If yes, can you post your ipnat rules? Nick -----Original Message----- From: Jeremie Le Hen [mailto:jeremie@le-hen.org] Sent: Sunday, January 30, 2005 5:40 PM To: freebsd-net@freebsd.org Subject: Re: dummynet and vr(4)/egress broken in 4.11 ? > I didn't changed my kernel configuration file so much since my last > kernel upgrade, I juste added gif(4), IPSEC_FILTERGIF and vr(4). > I tested using this rule on ingress and egress of both my internal = (sis0) > and external interface (vr0) - inverting IPs where needed :-) - here = are > the results : >=20 > | ingress | egress | > -----------+---------+---------+ > vr0 (ext) | OK | - | > -----------+---------+---------+ > sis0 (int) | OK | OK | > -----------+---------+---------+ >=20 > I think that it is now very important to tell you that while upgrading > my box to FreeBSD 4.11, I also changed my external interface from a 10 > MBits ep(4) to a 100 MBits vr(4). >=20 > I cannot switch back to ep(4) for the moment since it is not an option > to have downtime, but according to the privous results, I'm pretty > convinced there is a problem with the vr(4) driver (although I don't > know how it can impact DUMMYNET). Maybe the last commit on this > driver in RELENG_4 (sys/pci/if_vr.c, rev 1.26.2.14) is the culprit. Well, in fact I made further investigation : - Only TCP seems to be affected. UDP and ICMP appear to work without packet drop. - Switching back from my vr(4) to my ep(4) did not resolve the problem. Thus, it seems this problem is independant from the network driver (which makes more sense because AFAIK the latters are not involved in DUMMYNET, as they are in ALTQ for example). I can still use pipes on interface ingress, internal interface egress, but it fails when I use a pipe on egress on my external interface _for packet being forwarded and NATed only_. Weirdly I am still able to use a TCP stream from the router itself. I'll give a try to a 4.10 kernel ASAP. Regards, --=20 Jeremie Le Hen jeremie@le-hen.org _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"