From nobody Mon Jun 16 01:19:26 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bLBxB6x0Xz5yG7D for ; Mon, 16 Jun 2025 01:19:26 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bLBxB5JQ1z3WSn for ; Mon, 16 Jun 2025 01:19:26 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750036766; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=z/HjO3iF35w2fwymMPfN7dVuvjjR71zEqFACbjnGBgs=; b=t0OQhjsYHchJKlRtmjfVduSZSiJZ7u6JhgEpcSKfHyAyvDSggIliQ9ndzJKYvVnbG3/Do7 yKApZF/yeH4B0Uu8G33R9AShmnBjJMSBOnY4q425IYjdgxo9hMp+qfWsuv2hD9YIZXZrMY U4/n6mErUSd34AH41gVIjO3CmkDtSFj0pak5Fn779JBL3hcydUR9rY9wGy4E/9cbzutFAV 3TDFYfa2MkvXjADgiqjQbNAiiJt7mqtpbruBhIskK01c1J0MnLjZFd8ypRnWjFyWnJFuKL EbJaEnpu0CevNhWI2MKuCY4mSxywIHmx4FimztY6Ng5Xu9HynKat+JcjtbeFWw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750036766; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=z/HjO3iF35w2fwymMPfN7dVuvjjR71zEqFACbjnGBgs=; b=Zmte8u/4TfZKYxQ3IryJp6C88fK3Ivhcm4gOdJCQ8pF12JfEQFqCRdgmzkFa0K/hnw/HVv tiAZ7iexmKmtPK9y7dXhpicY6uWioC3zcPJ1iNnJLseiTszh/t+8UGJPnytma6PDVcbNpZ BNL4ydvztSa8Q7q8urd59vMsVNkAJON6F4zDlK291ItBTiLfbCuyhB7v7omHOLGXnUjTWX P7Fw7gIYwVc8SmDrp2WjDfbOrFIiqdBOKubpT3BFvo3KK4h+oknYf4Q92gD9bujm6hW8bt 2SS0BZleybYvHxOSA4+i3sOzN6UI1nRbHyfFcQtGndsHPRb5jPN9HrbmTxgy8A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750036766; a=rsa-sha256; cv=none; b=Dml7TPHHdb8SizDBYgPzioI8ufwIj1afrpKyfNN1C1QoEc56n2+3oA2n3iTQb+oLS6I+se YNIp2l+14fDNDoEHK0Ii9MJ9MdqiWeWbw5Wa+MH12N6o1r5ALkMA6qifi/AYTES9NuR1Az Sb6qvPaoPKJOXXo/u6WqODrYe4e3J6MWiDH5QOda+07NxOMMkcGF/Yu6Q6LymRC5hwNnbJ YWrwLAewfQIyN11J3Ri9VEvgTMzbLroVBqg88Qzz8Ezmpp+nfbK5BBThuejXiqFBMepdvO PsEE0D5XGjOY6HiLOfSVN15318SZwYQyAPfkEwD1x0xVv/nbYhU1CTohD3wMoQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bLBxB43QlzdK9 for ; Mon, 16 Jun 2025 01:19:26 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55G1JQtU063381 for ; Mon, 16 Jun 2025 01:19:26 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55G1JQZw063380 for net@FreeBSD.org; Mon, 16 Jun 2025 01:19:26 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287445] [qlnxe] QLogic/Marvell/Dell 41164 ping loss Date: Mon, 16 Jun 2025 01:19:26 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: misc X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: adamesslinger@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287445 --- Comment #18 from Adam Esslinger --- FYI..I first filed this bug with pfSense before realizing this is a FreeBSD bug. Here is the bug I filed with them: https://redmine.pfsense.org/issues/16248 --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon Jun 16 13:18:31 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bLVtz17Gdz5pxV5 for ; Mon, 16 Jun 2025 13:18:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bLVtz0V83z44Dy for ; Mon, 16 Jun 2025 13:18:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750079915; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=tzb0A30KQgNNOkiJPYrQV77ms1HPouzDT59b/djPfec=; b=QF6zagQmq51lomX4F11QV+bstvpFcOCE1xKKZkKRiS0DFHE0S1vLQtBEu252zDdH6RPanw geeUkEy/2/N+dMrSsBuqQmlrV4Ng2keokjEHRArYYm6LtGwLLVh1NF1H/riQLvgUdMjUec WeonFVVjvNhG0rGWcW95yCu1A5anG8M+srsiqTvtPdvuCgVeg/rryz5t3EMDc9hLPGpAOl mwJHIA+9F1LM1wg/xaTkv1gScUKplu+zGHu/4onaixQSAy2LYXtkNzrS+sKJ8pje+pDbbJ x3NWIKjVRqKbwHpw10EbqiasIlEgDhGRUYpssULM2c5Ga8oJ4Tki+NOm9Dn/ww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750079915; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=tzb0A30KQgNNOkiJPYrQV77ms1HPouzDT59b/djPfec=; b=MfpxYAgadjqMUIfVVxaFC+RaT7tTOA2h6NPGI1PYCWRXbVu7OGwwDfuRP44CRfNVJbgdUa 9ZOVYNK2pg2g+dJHpFld6OpZNnxnzeoXHjPsccNgkvzb/rgsXl4G+1fiV3EspxRBa1Paiz +BTkUd9OJEbNKKyIVBpOuSG58EP52xamHfox8Zdmkn/+1IOSormnTBUgvcnQdnk3jPHhDN AanzgCcTeXvXF0A9Xtg8W7tlIqEvgipadZyvonUet34VvkdyrfM3pWuvyil+9QmOlcrkEP KLh/mhHOCs4FLvbfoiHvEPe2wgkY7oySL+fQeWHYgv+M/tpxYj5AkoFGdsOb/Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750079915; a=rsa-sha256; cv=none; b=NFkN1PJDopbAEiXczx/5RrKHiCjCJ8sM8+ZXRTXqW20nnNBOjQdx23JyjJk4VNCYtJskqI PmgVIQ8iGjc5JfBceWjW7hbAHgslMOEMkC4JzRlq1N7ojYWyaq+Xb5efSCDIvfqASbCRT7 W5+V1+fan0WjY914+v1OGsSEbErfW+albIAhxuorf4NrBn6ofsfDXvwVQoUQQ6mInCYYOE 2vKR4ybZbUvvhF1F2v1Wqx0ClLfDgmpL05gpLoYJjOn03mxJGUsY7sb3D5MIUH5YXDvxT3 RZJotxseKizkjCJ3ZcapUiID3ntfPhKhoGVoB8lMt3RJlToB4aT1BDwUvxeLuQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bLVty72v2z10M0 for ; Mon, 16 Jun 2025 13:18:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55GDIYol090774 for ; Mon, 16 Jun 2025 13:18:34 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55GDIYaH090767 for net@FreeBSD.org; Mon, 16 Jun 2025 13:18:34 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Mon, 16 Jun 2025 13:18:31 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: timo.voelker@fh-muenster.de X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 Timo Voelker changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |timo.voelker@fh-muenster.de --- Comment #10 from Timo Voelker --- Hi Lucas, In cooperation with Michael, I built a setup for your minimal testing tool.= I executed a couple of runs and saw the same issue: the results of the runs differ. It looks like the FreeBSD machine is running against an IP fragment limit. For IP reassembly, FreeBSD uses a hash table. For each hash value (bucket),= it holds a list of reassembly entries. In each entry, it holds the fragments of one packet until all data has arrived (and reassembly can be completed) or a timeout (after 30s by default). The number of list entries (net.inet.ip.maxfragbucketsize) seems relevant h= ere. Out of the box, your FreeBSD VM has set maxfragbucketsize=3D1. This means i= f the FreeBSD VM must insert a new entry (i.e., when the first fragment of a pack= et has been received) in a bucket that already contains an entry, it removes t= his one first. In consequence, FreeBSD is probably unable to reassemble that pa= cket with the removed fragments. The value for maxfragbucketsize is set based on the available memory. Usual= ly on a 2 GB machine, like your FreeBSD VM, this value is set to 7, which seems enough to not run into this issue. However, in /boot/loader.conf of your FreeBSD VM, the size of the kernel memory is reduced: vm.kmem_size=3D"200M" vm.kmem_size_max=3D"200M" After commenting out these two lines and a reboot, maxfragbucketsize is 7 a= nd the results of multiple runs are the same. For the sake of completeness, these are other limits that might be relevant here: net.inet.ip.maxfragpackets=20 net.inet.ip.maxfrags Timo --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Mon Jun 16 20:47:01 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bLhrS10dVz5yPBD for ; Mon, 16 Jun 2025 20:47:04 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bLhrR73Zrz3fNc for ; Mon, 16 Jun 2025 20:47:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750106824; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5K+BL8XIqBYiHn9+zksRTctGPW9dFfBkxZfbWwfPw6o=; b=jx9vC7XOISxQoWZ+R0LrZysiF4wSE1ZdEnbcLiF5evG952e0UwkidDZl7E9eU/1hRpp3IP 04c+Z245hdiaWNQE1v9A5jwtwyBxq85+TpEacfwgk+z/5ZqS6yX3Ge3j9V8dpyi+JAbx+v JsfWIo86I6e9hPlhf3kiHVIBSV6cHYzkpBbvslO5nMF79gSajGSobtI+Wi9z9Av44DHGpF +FIPuWZcXb9iU8YQ15h6589n2Eu3sT6jXdDw4JDpH8UW6AyDdayrGtL/c1ttqHMIrtHGlA DPbjErdrcB6nvrxaBne+SJyGKu9x6sb3rY+ITFvx1FlSHSV/mpQ27+u0PacPPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750106824; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5K+BL8XIqBYiHn9+zksRTctGPW9dFfBkxZfbWwfPw6o=; b=yjB3tLlfhka7y50TcwzYTWxlM5fxUqLuDuffrAyp5AQu99aMT6SQJ/qIIRpCRjEQdck2fx IbWzMoxmDI6UGWTnIV4l2aAZaWZ8RhoUe7dylyazFsZ2wfJb4yN+O10uasb2TWGfVSVN0o uph331I4FloAYGFGA45oUjutkVT+bHw4ur8nCrC0kkwcCMUDZZNvO0pZ8xgxlEsoGYWCE1 +qhzzXcyaX2KFKfxBvzHqai30zMvOu2R9WKQiQOnDHFmQyrivMSnpM2AxaTbMK0aO1uqd7 VYl1e9P2SqMKwjEdFWUM5q5Z3c2vQWCQStCgCZXDn4wi5JFUZjxGfw9WO+RVsQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750106824; a=rsa-sha256; cv=none; b=Jeuu8n9ETXZ4lxGWgZD8E53P90XohoreFTPo5/mYEXhGdY6oiXJ1vDObaEjqWM9CSsNNdR S7IDbcV1APRXw3G5w7adwbZGNy3nC5rNXpcb62AUYw5KYtC9PSQNwhjaAHNIp2FOGImXkH dRc/4ZBTO2Tz5yOhs4eCycO7nQgnyjOsx2eaxY+u4dk63rlU6XEhSaVvomTYLeiHwVTiyh Jue8848U0qUpBqOzgzkzeLVp13wdPxyscG1V3xaLjMv4Zw1OtlvwsLigvUuHWPa1fakRht r5UW6kUY4I+o9ZlT9L8gY0kuoV5rqFbyQxik1XkwC2gUGb+sFuWzwBaNbhCBfw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bLhrR6LZ9z1Bwc for ; Mon, 16 Jun 2025 20:47:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55GKl3qN029251 for ; Mon, 16 Jun 2025 20:47:03 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55GKl3kb029250 for net@FreeBSD.org; Mon, 16 Jun 2025 20:47:03 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Mon, 16 Jun 2025 20:47:01 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #11 from Michael Tuexen --- I am wondering why you are limiting the kernel memory size? Is that intentional? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Tue Jun 17 11:38:32 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bM4d408Vkz5yClM for ; Tue, 17 Jun 2025 11:38:32 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bM4d36jtbz3MdB for ; Tue, 17 Jun 2025 11:38:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750160311; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=LGufYdvkZpFkLtAYyzVGb+ANPvHiaGb27kOD437gTVc=; b=kVbX7mQdsahzUyeES/T7744wn3WV5kSrgtAJI/Bca5GFjzvZno1kkazxMyKTKG2BFU7fBX 9+kr51tTTtFaOI+eYfFIfAeFvNY9Okfqc7tLynNRO3KooEaL4rva+Z4VSIsqFPwUlHApSA kS1bFITPfMaP3pLo8cTZjsyEs3GuLgFJEBEiVuCwc8aEKH3+0xOHoFAlfDnCrG8BbRpZb7 9vBc4dZJZ5tT1VYrCalxqsbsjngcGeNM+p8FEzYyGRQKLd+214w7Ar1L6jFXCQaLoC4xkW UGmclOXLz8+11UVOztDdG+CjjVZFxl/Y77sVYqhGbNEU7mzZptcRMSS1Bao1Aw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750160311; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=LGufYdvkZpFkLtAYyzVGb+ANPvHiaGb27kOD437gTVc=; b=b+nZAbm5JYFmJMYavWvnyPfMp8fA2BKUGtrA4lQp82TpZLSWYpwEYMgPaOPH35vetC06PX AoRXSkxJ/oOEEjhEiEuVWSvu9XqlV3CWyeKWV+QbvcJKertCUomz3XQZDHetF5agJP3mLg LytIe0qfYoobZ5Y9zb3FcXukVv3mxLW/iucJHmuDjtnn2+3mE2uJg/d2PH8v00eQzdYfdK ihw0oABnQKiuM+ALWVittyK/5KXINHBFBfn6NGiOi1mbckahwfYSG3XrySrMux+sPxvdEh QcvA9sat42eOFLU1saGuNitdXei6jwoCsjVvxc/T6hy0+X3NzuCjTpImlkg2Aw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750160311; a=rsa-sha256; cv=none; b=t+VbWK5aCDhaDOD5mFFYOZOtvne4pJF2TerJO88EWK+dIi7y+010i1HU5gW25HluNVpNTD 9OJqPFbRYogGbnvLliAueo3jsrPND1XBzjlo/lm8jE2Ap6zt5LGvCtEmdp/H0GJwa3Mx7R On7SocjC8raOpDBhjscaKrrPdc382jCA1KnM17ORyDwuSIrj0oFCdsrJ9EoK4YtWrpQpnX zsebS3iC1upemw+/YERJF93jtI/zoFzR9CJsKgD5aNTpHL2nGlYWtvwMa/gmllz1iSRLhZ +dC2c+b19ko27ZlJPI5oVkcdIO5US0v6xHGSXnwv9XMt/1MT92wV7VqWj0Y3Qg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bM4d36JnrzjZT for ; Tue, 17 Jun 2025 11:38:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55HBcVMh071567 for ; Tue, 17 Jun 2025 11:38:31 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55HBcVXL071566 for net@FreeBSD.org; Tue, 17 Jun 2025 11:38:31 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287492] Unable to detect NIC cards on few PCIe Gen5 slots on Dell R770 servers where x2APIC mode is enabled Date: Tue, 17 Jun 2025 11:38:32 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: vendor X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: sreekanth.reddy@broadcom.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287492 --- Comment #1 from Sreekanth Reddy --- Any update on this. --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Tue Jun 17 14:52:34 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bM8wy3j4Gz5yQsr; Tue, 17 Jun 2025 14:52:34 +0000 (UTC) (envelope-from ivy@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bM8wy2nsZz3PXx; Tue, 17 Jun 2025 14:52:34 +0000 (UTC) (envelope-from ivy@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750171954; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=agn3ZJ7umf3tvbDGdcP+28zrl0oQgsN3ogFZNpnTIpg=; b=O9HT33E83Dlr+itWTlXGF03guWN1cugS7bRdbf0DWurTpGAqUZcs/cAjoBpc5DWYjTIIvU Rlea2EFeHtUDmaaokijsFki5szM0CLUChML4Fq4ocxqCAN4yUAes4v8Dioy8rGPjne9krG qJKHGU6j3ZtBkSYutt885Lyb0uzC7nWRmltTuQRbzeTkePx48SdxNvMbuXYXBq6IXetcSe rYbMdxPcieGTazj5qXcTtNwJAjkyv5bcaQ4me5cfWUIrmqjqIA3p/UhOaOxhR1XmruQmtM GBjec9b4KMdjd9YPBkLMn/t6OMaFxC7trE+/BtqyWPF4Sg6p41MlS9667PQAMQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750171954; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=agn3ZJ7umf3tvbDGdcP+28zrl0oQgsN3ogFZNpnTIpg=; b=XbsKEi2uKWxBUCwBodI+65ck8vi8ZryiacBwHEMKLoSvU6d+Sl1qlt0j+Tja7wA13ek552 4NPAhHjYQVJglcIq14xB1ErHuQI5rM8pvKhSvGZf6k7ONbpvYJUCcf3XJMVwsQmsucIlXs xw/oo3gdBU2P2KCnKgpAfmZftWRK7rP4UU1+uC1OiPhtg0Ov8KgFwj9rSzeMfn5Km6PeH6 NqjcveOxBVMG9s+yyxnWQmDIIgV+H5zf+EoeFkaHiP4KFrUKaKEseeKn+EgXi5vYk9KZMz QcdT/1i9mOMIYyBWLd7jBIP7/W3C7GiofrqS+S1uNc4d46EoLKP2dSfaQShtTA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750171954; a=rsa-sha256; cv=none; b=UbkReY6GMSe00brE6yY3iX9NCqSi5oYQwuwccO1TuS/OGMXrClQ7ZbzunzzR12mwKlDfVL bV3hXUginzerq9g+9hBjFfFe3QeweaINPIrnfdu1+FBWrtNoUQLFEJC7c8pnPzUT+f/K8P KcsPKuSmAEOeb24xe2nIqkm0ettbFIRmcg4Ukcc0ZQ61xufMw5vViTA35rm3CSsm9Y6KCM ZHhktacxb88wv/AZRNqFJoE+AMH/NVK2bM8k0iek070T7FoqOX/dFUZzKPFF3F7JRHAZx6 1rDzpffkojchBBqFfFHEYZY4V8YtlocLXHdYWHgpIMVdLZqDqMCy+KjCv4S9pg== Received: by freefall.freebsd.org (Postfix, from userid 1532) id 5531E14BAE; Tue, 17 Jun 2025 14:52:34 +0000 (UTC) Date: Tue, 17 Jun 2025 15:52:34 +0100 From: Lexi Winter To: FreeBSD User Cc: FreeBSD CURRENT , net@freebsd.org Subject: Re: if_bridge(): IPv6 EUI-64 seemingly not working Message-ID: Mail-Followup-To: FreeBSD User , FreeBSD CURRENT , net@freebsd.org References: <20250611072836.2a0b026a@thor.sb211.local> <20250612073301.60bfc7ce@freyja> List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="UTexeVv8VMUjII3E" Content-Disposition: inline In-Reply-To: <20250612073301.60bfc7ce@freyja> --UTexeVv8VMUjII3E Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable FreeBSD User: > net.link.bridge.inherit_mac: 1 > [...] >=20 > ether 4c:52:62:2b:05:eb > inet6 fe80::5a9c:fcff:fe00:393a%bridge0 prefixlen 64 scopeid 0x6 i was able to reproduce this: # sysctl net.link.bridge.inherit_mac=3D1 net.link.bridge.inherit_mac: 0 -> 1 # ifconfig bridge1 create inet6 -ifdisabled auto_linklocal up # ifconfig bridge1 | egrep 'ether|inet6' ether 58:9c:fc:10:43:03 inet6 fe80::5a9c:fcff:fe10:4303%bridge1 prefixlen 64 scopeid 0xa # ifconfig epair create epair2a # ifconfig bridge1 addm epair2a # ifconfig bridge1 | egrep 'ether|inet6' ether 02:36:0f:34:6b:0a inet6 fe80::5a9c:fcff:fe10:4303%bridge1 prefixlen 64 scopeid 0xa some observations: - i don't think this is caused directly by the member_ifaddrs changes. - you can work around the problem by manually setting the bridge link address when creating it instead of using inherit_mac, i.e.: ifconfig bridge1 create link 02:00:00:00:00:01 - i don't think this is a bug per se, it's more that we simply don't update the IPv6 lladdr when an interface's MAC address changes. but i've copied net@ in case anyone else has an opinion on this. --UTexeVv8VMUjII3E Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iHUEABYKAB0WIQSyjTg96lp3RifySyn1nT63mIK/YAUCaFGBLgAKCRD1nT63mIK/ YLI8AP9hncM2JjVsP1PQd6aF/Vwp7llsEY13rvKeGa5mU4GEbgEAousgOHpwivk3 ObaAsb+xCgwoB8XOU1ELsocfRObGSgo= =eyiL -----END PGP SIGNATURE----- --UTexeVv8VMUjII3E-- From nobody Tue Jun 17 16:57:23 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bMCjj757Mz5VbY7; Tue, 17 Jun 2025 16:58:01 +0000 (UTC) (envelope-from freebsd@walstatt-de.de) Received: from smtp052.goneo.de (smtp052.goneo.de [85.220.129.60]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bMCjj4LySz4LnT; Tue, 17 Jun 2025 16:58:01 +0000 (UTC) (envelope-from freebsd@walstatt-de.de) Authentication-Results: mx1.freebsd.org; none Received: from hub2.goneo.de (hub2.goneo.de [85.220.129.53]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by smtp5.goneo.de (Postfix) with ESMTPS id 1E133240A05; Tue, 17 Jun 2025 18:57:59 +0200 (CEST) Received: from hub2.goneo.de (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by hub2.goneo.de (Postfix) with ESMTPS id 852C2240165; Tue, 17 Jun 2025 18:57:57 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=walstatt-de.de; s=DKIM001; t=1750179477; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=dOhiuC2xogvrMfuHxQO5c11jhl1SbxeTohw4FE1rhV8=; b=lemz/FeIGtHYfzKccB1AsL3HeO3KR5yKHIb5yZ2IYUR5rphtceMd8a1XiSPchEGoQo3CIZ 1Uq4HiPa1ggyM7aI6uNmZZyeQcpB39SWbMhcFErcMaZH24YyOcdIY+O64sC/XgULg3d5PL Bnk83Le1FiZNOwTB1p1C1zfjekoTD7OxOAVcYQc5keXU035KBWBudBA797hGxBlE5WTpnx ewtqimdothzlTn0iotGAF5tIvrpo68H2bC66FBSP2taeUOnk1+lnT6k1iJLpdsYGRXcpz1 yOcuX7uzMOhd5xYS3SNW0HeUvPeXIKM3+cCJp+W5IcyI00ncmCiCavC28PrZ2w== Received: from thor.sb211.local (dynamic-2a02-3100-2e61-4702-9121-a17e-f14b-6ada.310.pool.telefonica.de [IPv6:2a02:3100:2e61:4702:9121:a17e:f14b:6ada]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by hub2.goneo.de (Postfix) with ESMTPSA id 2AD3F240116; Tue, 17 Jun 2025 18:57:57 +0200 (CEST) Date: Tue, 17 Jun 2025 18:57:23 +0200 From: A FreeBSD User To: Lexi Winter Cc: FreeBSD CURRENT , net@freebsd.org Subject: Re: if_bridge(): IPv6 EUI-64 seemingly not working Message-ID: <20250617185750.55eba7e8@thor.sb211.local> In-Reply-To: References: <20250611072836.2a0b026a@thor.sb211.local> <20250612073301.60bfc7ce@freyja> List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/BAg8d4_h4kawfiMgnDe7x81"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Rspamd-UID: 8dd7b0 X-Rspamd-UID: 033f90 X-Rspamd-Queue-Id: 4bMCjj4LySz4LnT X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:25394, ipnet:85.220.128.0/17, country:DE] --Sig_/BAg8d4_h4kawfiMgnDe7x81 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Am Tage des Herren Tue, 17 Jun 2025 15:52:34 +0100 Lexi Winter schrieb: > FreeBSD User: > > net.link.bridge.inherit_mac: 1 > > [...] > >=20 > > ether 4c:52:62:2b:05:eb > > inet6 fe80::5a9c:fcff:fe00:393a%bridge0 prefixlen 64 scopeid 0x= 6 =20 >=20 > i was able to reproduce this: First of all, thank you very much for checking this. >=20 > # sysctl net.link.bridge.inherit_mac=3D1 > net.link.bridge.inherit_mac: 0 -> 1 > # ifconfig bridge1 create inet6 -ifdisabled auto_linklocal up > # ifconfig bridge1 | egrep 'ether|inet6' > ether 58:9c:fc:10:43:03 > inet6 fe80::5a9c:fcff:fe10:4303%bridge1 prefixlen 64 scopeid 0xa > # ifconfig epair create > epair2a > # ifconfig bridge1 addm epair2a > # ifconfig bridge1 | egrep 'ether|inet6' > ether 02:36:0f:34:6b:0a > inet6 fe80::5a9c:fcff:fe10:4303%bridge1 prefixlen 64 scopeid 0xa >=20 > some observations: >=20 > - i don't think this is caused directly by the member_ifaddrs changes. >=20 > - you can work around the problem by manually setting the bridge link > address when creating it instead of using inherit_mac, i.e.: > ifconfig bridge1 create link 02:00:00:00:00:01 >=20 > - i don't think this is a bug per se, it's more that we simply don't > update the IPv6 lladdr when an interface's MAC address changes. > but i've copied net@ in case anyone else has an opinion on this. I'd dare to disaggree, we have running several recent CURRENT and 14-STABLE= boxes (almost every 2nd day recompiled world/kernel) with very close configuration scheme= s (according to kernel config and NIC/bridge config as far it is possible to say so with re= spect to the different OS and different network addresses). On 14-STABLE with very simil= ar jail configuration I do NOT see this (mis)behaviour of if_bridge().=20 --=20 A FreeBSD user --Sig_/BAg8d4_h4kawfiMgnDe7x81 Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRQheDybVktG5eW/1Kxzvs8OqokrwUCaFGejgAKCRCxzvs8Oqok rxQKAP4wu3mzc457wP1gM3wreYHJukfO0vQmIYu6aOG+aoGi0AEA/DuqcI1JeOMf WF6OYthKizsfniNAwd/lLahbg/75EwY= =6Xx8 -----END PGP SIGNATURE----- --Sig_/BAg8d4_h4kawfiMgnDe7x81-- From nobody Wed Jun 18 02:19:50 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bMS9z61PFz5q7Jt for ; Wed, 18 Jun 2025 02:19:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bMS9z171Jz4HN1 for ; Wed, 18 Jun 2025 02:19:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750213191; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ZOV+RwV73+6RgIwnTaXJHuQfxtKoOhlLN8ZzpNYlcKg=; b=BmCPeenqN8Cg65VUaQ/pyKvw/mnH1WqiYAznMCNtagvl+zH1wwSLv8tsbb696GQv3/osJE DAcVEhoZGR6stV4/+8xRAhv40qau+Kx0UGC4l0fecAUvnb3ET0UzRPHcWtWOFeYTXSo2V2 NBGQWYXjoiz4Rd+3/aVSgIYxuAaRQFGOTt21I+/i+WWvDOsbNWDoRQl4ooOkoM6Aq4HXM2 f+RKjtG9+Gz0O++fcqZq1Bw77xGfRfP4L7cY1KZo+9OQqEopJCjy9C6Rl87R8Tt/3IdxJw M2AZMWOuWbOwPLnPW/c/Nyz+/jP8UMUyNA2bgn+F3L8kV+DiNCGTXI9rnwRk2g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750213191; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ZOV+RwV73+6RgIwnTaXJHuQfxtKoOhlLN8ZzpNYlcKg=; b=ZEPOatEqw9NfXkTuQbUuddXUUR2DzB0365dMHOyhDg0RNkZWE1zF991IPoCd3UJU+Ouz1x XxsQNjGRWzYaqAcc9/J54iBn2ijAMaG25bSyL4XyNUJLvN7sH1xOPyHBNjpj5vG7wCPRA0 JqI+tADnJaJZvrrq+MTSq2RHULDNnoIpvjdigTYQqif8J7dTGNnwjIQCIPu0VitAZVR1nx Xuc4D2vhqy7yYdB9jkWhXBeZ9EysxWvLB0ywP5L7VDtEPj3RgVq4469shRTyQl0QzK/Dhf +3MUdB6xeumeje1sG9D8+PoUWJHiCTaOuW+lb+SEZgntI4b2riAYO2euZTKH1g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750213191; a=rsa-sha256; cv=none; b=J+r6zBwaLjOl7MXJFRVD01Uymzq+0LiP/qXUNQBWll34/Fv35rBe1MfLg22Ryehwn8PWMh Mp097NP00Se6CmWxFUFM7bM07q1Lk7E0zCPRAYbNxJED23hpzBb63hggLfE+0etZs9kDFy ECHNeP7LRc2Aeda7lCfGHvA4nlv2AYTe2a5LwE95HjeGNFtKZ6EGOrCChJ1yz7CIdki2oT 0KVscuT6+tTWQL9pVIrjCDVHigd4pCidEvEgKMlI++W4rb0FEBwg5xy6AIoyp0Aab1OFyb hcDnlN6+DeTnFJg923Bu4LDfYtNG2vTaFMcZTcga8ePoHs8FJ+e4k8aQBdxL0w== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bMS9y6NY0z18YK for ; Wed, 18 Jun 2025 02:19:50 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55I2JorY060251 for ; Wed, 18 Jun 2025 02:19:50 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55I2JoI3060250 for net@FreeBSD.org; Wed, 18 Jun 2025 02:19:50 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287492] Unable to detect NIC cards on few PCIe Gen5 slots on Dell R770 servers where x2APIC mode is enabled Date: Wed, 18 Jun 2025 02:19:50 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: vendor X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: zlei@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc see_also Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287492 Zhenlei Huang changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |emaste@freebsd.org, | |jhb@FreeBSD.org, | |zlei@FreeBSD.org See Also| |https://bugs.freebsd.org/bu | |gzilla/show_bug.cgi?id=3D2= 730 | |22 --- Comment #2 from Zhenlei Huang --- I believe Ed Maste and John Baldwin have more insights on this :) The error message=20 ``` printf("%s: unsupported destination APIC ID %u\n", __func__,=20=20=20=20=20= =20=20=20=20=20=20=20=20=20=20=20=20=20=20 msi->msi_cpu); ``` is intentional. See also https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D273022 . --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Wed Jun 18 08:03:01 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bMbpB1lyhz5yPVc; Wed, 18 Jun 2025 08:03:14 +0000 (UTC) (envelope-from freebsd@walstatt-de.de) Received: from smtp052.goneo.de (smtp052.goneo.de [85.220.129.60]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bMbp96pGgz3Wst; Wed, 18 Jun 2025 08:03:13 +0000 (UTC) (envelope-from freebsd@walstatt-de.de) Authentication-Results: mx1.freebsd.org; none Received: from hub1.goneo.de (hub1.goneo.de [85.220.129.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by smtp5.goneo.de (Postfix) with ESMTPS id 413E8240AA2; Wed, 18 Jun 2025 10:03:12 +0200 (CEST) Received: from hub1.goneo.de (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by hub1.goneo.de (Postfix) with ESMTPS id 63FF72405D8; Wed, 18 Jun 2025 10:03:10 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=walstatt-de.de; s=DKIM001; t=1750233790; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=6dD7otCl9bUdKRuVxpIDsrD/KJakI2k6mYqlgXjEW/c=; b=Q1+dcqHuM7AFHLbuCSQcSUokdxENExj9j7rB8WsRF7XE1P6IJRoAk3ft3NsZi+sZOUQCZF WxE8x6u9bqJAIqauFbGrC9tEH7adoNbtQCVqpVneEhPLjoT/L2HpQuGPiBPiI+DxUIF711 /a3LMVDGODM2fFrxofXPHUoX3FdhlFmCy6BjWts1wjVHWdF7CE5zZwxFQRVb+q5/TlgGcw iWWyFOD/raLePm0NkEY1bl7RAs/BJfCfcy9f23g3DhY28s1HESo3bQngKyHJNCCedmGjNv f2o1ViOqAoIBkBSRZRY6ZkeKHsZ6nWHmTct77y9DowGs2mla+3lqreNR2ho7qA== Received: from freyja (p4fc0a637.dip0.t-ipconnect.de [79.192.166.55]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by hub1.goneo.de (Postfix) with ESMTPSA id 0CAEE240562; Wed, 18 Jun 2025 10:03:10 +0200 (CEST) Date: Wed, 18 Jun 2025 10:03:01 +0200 From: FreeBSD User To: Lexi Winter Cc: FreeBSD CURRENT , net@freebsd.org Subject: Re: if_bridge(): IPv6 EUI-64 seemingly not working Message-ID: <20250618100301.57af0cd1@freyja> In-Reply-To: References: <20250611072836.2a0b026a@thor.sb211.local> <20250612073301.60bfc7ce@freyja> Organization: Heimstatt X-Mailer: Claws Mail 4.3.0 (GTK 3.24.49; amd64-portbld-freebsd14.3) List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-UID: f40a13 X-Rspamd-UID: 951b29 X-Rspamd-Queue-Id: 4bMbp96pGgz3Wst X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:25394, ipnet:85.220.128.0/17, country:DE] On Tue, 17 Jun 2025 15:52:34 +0100 Lexi Winter wrote: > FreeBSD User: > > net.link.bridge.inherit_mac: 1 > > [...] > > > > ether 4c:52:62:2b:05:eb > > inet6 fe80::5a9c:fcff:fe00:393a%bridge0 prefixlen 64 > > scopeid 0x6 > > i was able to reproduce this: > > # sysctl net.link.bridge.inherit_mac=1 > net.link.bridge.inherit_mac: 0 -> 1 > # ifconfig bridge1 create inet6 -ifdisabled auto_linklocal up > # ifconfig bridge1 | egrep 'ether|inet6' > ether 58:9c:fc:10:43:03 > inet6 fe80::5a9c:fcff:fe10:4303%bridge1 prefixlen 64 scopeid > 0xa # ifconfig epair create > epair2a > # ifconfig bridge1 addm epair2a > # ifconfig bridge1 | egrep 'ether|inet6' > ether 02:36:0f:34:6b:0a > inet6 fe80::5a9c:fcff:fe10:4303%bridge1 prefixlen 64 scopeid > 0xa > > some observations: > > - i don't think this is caused directly by the member_ifaddrs changes. > > - you can work around the problem by manually setting the bridge link > address when creating it instead of using inherit_mac, i.e.: > ifconfig bridge1 create link 02:00:00:00:00:01 Confirmed: this workaround, in rc.conf represented via create_args_brisgeX="ether XX:XX:XX:XX:XX:XX" sets linklocal adress according the inherited/forced MAC address and later on via rtsol set the EUI64 host portion correct as desired (on CURRENT, not workaround needed on recent 14-STABLE, as reported). > > - i don't think this is a bug per se, it's more that we simply don't > update the IPv6 lladdr when an interface's MAC address changes. > but i've copied net@ in case anyone else has an opinion on this. From nobody Wed Jun 18 14:18:51 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bMm7c12cxz5pgHn for ; Wed, 18 Jun 2025 14:18:52 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bMm7c02STz3G5n for ; Wed, 18 Jun 2025 14:18:52 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750256332; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=UIb1ixs231YBYxT1o/cbmcOzdGsuCNeOeu+kU+FRzm8=; b=YeUiL6a1BnFcWYlJAeij7qJA35HXH+azPQLOsBw9FhpTytf/Q5a4dj+hTzAuJAdqAasHL8 LRJm7wFULtn/0/hO4hARikS4/hw83T64pcPfN5QC84xE0C01LSwp0c4/hz+h0gSFB5fCIB N5ucjvQJFIJeVqhpY1v+pVRSa16yTiZQ7UA4aJXqoLMOC/6y7pZdLW1SC7hXipWvTY85eb nXvlf10qb4+3uEYIE6WP84RHd7VmT8QyLzYJG3mI+uo7FqztAxsrrJAJ8YkUxDTIVQOFaS BSObHYqaRh+/53wY5HLcuOddkApkM8XAyC1VBSFM8XqWHt9rBB0gU6Vs7VPvOQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750256332; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=UIb1ixs231YBYxT1o/cbmcOzdGsuCNeOeu+kU+FRzm8=; b=cU0ICC+ZyiVhestyNIwqGcI41MkBCaOQcuvJ5+Dn3Gjw06usbjwr48Lg0jSeUJuta+Z9mi PvOzied0J2O+fRvKWgFbepT7T02hXpaaCKUA44Np0gaC3kfkeScBus0OFozia0+g+q6Fvc szgvH4crXSuvVQwbIAZCAW4QX/qrZIvv3w6h1i7pL8JMKmf59oeZz1qREX+3/FQvbMRZoQ w4l+TgkNZATsuNG53ZsZnNc6Nkkj/YmVhFYmAmbbHwzane4lSTU/KV/akeUe2YRJ8inrxH f2aR99a7ACGoiS/1h6q3Vdp6Ifg3qXO+bda+ZagVcXEULVV2rhMRT6pSgJ+wqw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750256332; a=rsa-sha256; cv=none; b=Wz1m4FcR9OXeTZal4OTr+wGPWsJsRn5qN2YacmLgi32ykl9Skdlx5sGSJ5WoW1Ah4agmkq QtxKnbCuL4HMvPBDY5/n8r8RGkfx3FB3V7rsKvgL90uFk8pJgt0JTJq/+1ZbZLy5Uls3fB qcEqlx+yMqLj+mfJan4OQZDBvgDSa3+8Fe13/jKqQPZPH98uKuag0RlkbhDxspaohUAN/T tumkG+0dj/o8v7EX/SeRYzpCxhO81r84R7Y3NYij+7zCF4z2tZtarCL5Ox0uLPGw0h8gmJ wpgQZiu4pcWyAKHHx1PHYAm2QqPXquK+F7ZTr8Dx2iyh2qDI2hieHVMExGQgwQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bMm7b5YFfzYpn for ; Wed, 18 Jun 2025 14:18:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55IEIpl1019421 for ; Wed, 18 Jun 2025 14:18:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55IEIp6e019420 for net@FreeBSD.org; Wed, 18 Jun 2025 14:18:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Wed, 18 Jun 2025 14:18:51 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #12 from Michael Tuexen --- In my view the code is behaving as expected. So can we close this issue? Or= do you think the observed behavior needs any changes? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Wed Jun 18 16:27:27 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bMq003m2pz5pq03 for ; Wed, 18 Jun 2025 16:27:28 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bMpzz4vjlz3yfD for ; Wed, 18 Jun 2025 16:27:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750264047; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Dhl00o+9z/1TOouhYdi525GIv3knhIpBnqDLb4/8Q94=; b=dY8DT1YEEYWAWlpD2kyslD/pjPmP1+VoLchmAqXXRne4DWX5vwkBkqnQMHKOa78YwKO1ct 1hxqqHgjiOGuDKKB5CaapOtw83yFUVP6TXopNYbxvCIZC3wFbqfAylkel+yDUR9Ooir1aa 81oxJLds/gdn4Ejvbwh0FhSdlt/16M3MglVFgIDkuc25iaWBkw8ILw2iGG9NxxL4wPIGmo GkFJNvJm1LAst1bc7o7jdzBl71E7pdsMWHwNxLRYW4VhxfGF6JfPAwiMl4b48kvqo4JptM Heo4HtiEpJ7caxjjHMj6BLxyz/7ru58bLA1YgMfRtbTNUjRLcMpoQSikTG4QqQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750264047; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Dhl00o+9z/1TOouhYdi525GIv3knhIpBnqDLb4/8Q94=; b=s+UVGIn9E5ygPJPHvHpbHmLV1QyDlEiCfW8E0mCCNp8u/hF0q79kQ2dbq0ZGrF0trLeLn4 roUI0e+oEj+ZPtKX1OJWbqUyHeYkadDDR/1awW/X8NGEUHLNxA1i8ewZnJ1OW8kQCbheXZ bqhXWi2bX7WFjXn4u6Q/9253WSGZmHPG4xgvYPkHyoI/0yd2mV2D0VkbOT2NRKOaCdJ8Xc CFD0WetxKi0MhDoYVcfnSH4+Y7tvbsAyvMvsHL6TBEL6Hu2+XAFunMl4ip0d/aTJnGwCgT xOtt8R9klN8KOYSZ3gmep9/oTp9PhkBVozgye9f+sm/NZB7dd+WeAXoPdfFxHQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750264047; a=rsa-sha256; cv=none; b=tJa8uZ3wpWaImiZuHUntpmo9HfghJ9zEe7SX1NA9q+FklLKSewJeMfoRM1M3i/oQdDaBv6 xau61a65wxEkUZ7pVxe8fEkLrkjVs5LJ2ShhJsHFiis40tVpIo+7Gl8gFGr6NhQENU9OC7 1P8vXTyGfaYOUEGrGgs+Gxb+52EsIBU1dyt7wE3hz5XELTJnUkztL7ITcAgeNYImbJPgNn rnRKOyYmBQmsPeaqgcPscCxCC+6LmkBXQDIT4gUH9wFih7ZimOjNJ2cR2vCKFd+ngxGzna xCBdmlrwKZy7ZTdMUSdGR7xgJLr0W73Zu+Au/v6/iNBlt06FIM194BQYXvfFnw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bMpzz1WclzdVC for ; Wed, 18 Jun 2025 16:27:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55IGRRpT083734 for ; Wed, 18 Jun 2025 16:27:27 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55IGRRU9083733 for net@FreeBSD.org; Wed, 18 Jun 2025 16:27:27 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Wed, 18 Jun 2025 16:27:27 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: olivier@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #13 from Olivier Cochard --- (In reply to Michael Tuexen from comment #11) Reducing this specific parameter (vm.kmem_size and vm.kmem_size_max) is not common at all, does not represent any real machine, and seems very unusual = to me. I hope this was not done on purpose to artificially create this problem. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Wed Jun 18 22:00:16 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bMyN758VHz5y7fr for ; Wed, 18 Jun 2025 22:00:23 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bMyN62HD3z3JZv for ; Wed, 18 Jun 2025 22:00:22 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net; dmarc=pass (policy=none) header.from=denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id A25A5B11E6 for ; Wed, 18 Jun 2025 18:00:18 -0400 (EDT) Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id F02B11F3DCE for ; Wed, 18 Jun 2025 18:00:15 -0400 (EDT) Message-ID: Date: Wed, 18 Jun 2025 18:00:16 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: dhcpcd(8) into FreeBSD base To: freebsd-net@freebsd.org References: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> Content-Language: en-US From: Karl Denninger In-Reply-To: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms030503080802030107080907" X-Spamd-Result: default: False [0.15 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_MEDIUM(1.00)[0.998]; NEURAL_SPAM_SHORT(0.98)[0.983]; NEURAL_SPAM_LONG(0.97)[0.970]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; MIME_BASE64_TEXT(0.10)[]; ARC_NA(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; RCVD_VIA_SMTP_AUTH(0.00)[]; FREEFALL_USER(0.00)[karl]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; MID_RHS_MATCH_FROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; R_DKIM_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; HAS_ATTACHMENT(0.00)[] X-Rspamd-Queue-Id: 4bMyN62HD3z3JZv X-Spamd-Bar: / This is a cryptographically signed message in MIME format. --------------ms030503080802030107080907 Content-Type: multipart/alternative; boundary="------------GukcdSY0XoBhrWz0OkjkHBU5" --------------GukcdSY0XoBhrWz0OkjkHBU5 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 UmVzdXJyZWN0aW5nIGFuIG9sZGVyIHRocmVhZC4uLi4NCg0KSSBoYXZlIEt1YiBGaWJlciBo ZXJlIGFuZCBoYXZlIHJ1biBpbnRvIGFuIGludGVyZXN0aW5nIHByb2JsZW0gSSd2ZSBub3Qg DQpzZWVuIG9uIGFueXRoaW5nIGVsc2UgKHRoaXMgc2FtZSBjb25maWcsIGFic2VudCBkaGNw Y2QgYnV0IG9uIHRoZSBzdG9jayANCkZyZWVCU0QgY29uZmlnLCB3b3JrZWQgZmluZSBvbiBi b3RoIENveCBhbmQgU3BlY3RydW0gd2l0aG91dCBjaGFuZ2VzLikNCg0KT24gYSAqX2ZpcnN0 IHVzZV8qwqBkaGNwY2QgZ2V0cyBib3RoIElQdjQgYW5kIElQdjYgYWRkcmVzc2VzLCAvYnV0 IA0KL3NvbWV0aW1lcyB0aGUgSVB2NCBzaWRlIGZhaWxzIHRvIGJlIGFibGUgdG8gQVJQICgh ISEhKSB0aGUgb3RoZXIgZW5kLsKgIA0KSWYgSSBkcm9wIHRoZSBpbnRlcmZhY2UgKGlmY29u ZmlnIGl4MCBkb3duOyBpZmNvbmZpZyBpeDAgdXApIGl0IC9uZXZlciANCi9mYWlscyBvbiB0 aGUgc2Vjb25kIHRyeS4gSWYgaXQgZmFpbHMgb24gdGhlIGZpcnN0IHRyeSBkb2luZyBhICJh cnAgLWQiIA0Kb24gdGhlIG90aGVyIGVuZCAvcmVzb2x2ZXMgbm90aGluZzsgL29ubHkgcmVj eWNsaW5nIHRoZSBpbnRlcmZhY2UgZG9lcy7CoCANCk9uY2UgaXQgY29tZXMgdXAgaXRzIDEw MCUgc3RhYmxlIGFuZCAvbmV2ZXIgL2Ryb3BzIGl0LsKgIE9idmlvdXNseSB3aXRoIA0Kbm8g YXJwIGZvciB0aGUgb3RoZXIgZW5kIHlvdSBnZXQgbm90aGluZyAoaW4gZWl0aGVyIGRpcmVj dGlvbi4pDQoNClRoYXQgSSBjYW4gaGFuZGxlIChidXQgaXRzIGRhbW5lZCBhbm5veWluZykg d2l0aCBhIHNjcmlwdCB0aGF0IGNoZWNrcyANCmNvbm5lY3Rpb24gdG8gdGhlIG90aGVyIHNp ZGUgYW5kLCBpZiBpdCBjYW4ndCBnZXQgYW55dGhpbmcsIGRvZXMgdGhlIGFib3ZlLg0KDQpU aGUgL21vcmUgc2VyaW91cyAvcHJvYmxlbSBpcyB3aXRoIElwdjYuwqAgSWYgSSBzaHV0IGRv d24gbXkgZ2VhciANCigqX2FuZF8qwqB0aGUgY29tcGFueSdzIE9OVCkgYW5kIHRoZW4gdHVy biB0aGUgcG93ZXIgYmFjayBvbiAoc2F5LCANCmJlY2F1c2UgSSBuZWVkIHRvIHdvcmsgb24g dGhlIFVQUyBpbiBteSByYWNrISkgL2l0IHdpbGwgY29tZSBiYWNrIHVwIG9uIA0KSXBWNCBi dXQgbmV2ZXIgZ2V0cyBhbiBhbnN3ZXIgdG8gdGhlIFNPTElDSVQgcmVzcG9uc2UuIC9JdCBh bHNvIG5ldmVyIA0Kc2VlcyBhbnl0aGluZyBmcm9tIHRoZSBuZWlnaGJvciByZXF1ZXN0IQ0K DQpJbiBvdGhlciB3b3JkcyAoInRjcGR1bXAgLWkgaXA2IGl4MCIpOg0KDQoxNDo0MjoyNS4z MDE1NjQgSVA2IGZlODA6OjNhOTQ6ZWRmZjpmZTQ3OmYyZjggPiBmZjAyOjoxOmZmMGI6OTQ2 ZDogDQpJQ01QNiwgbmVpZ2hib3Igc29saWNpdGF0aW9uLCB3aG8gaGFzIGZlODA6OjZhMjI6 OGUwMDpjODBiOjk0NmQsIGxlbmd0aCAzMg0KMTQ6NDI6MzAuNTczNjUwIElQNiBmZTgwOjoy ZTA6YjRmZjpmZTY4OmY4OTQgPiBmZjAyOjoyOiBJQ01QNiwgcm91dGVyIA0Kc29saWNpdGF0 aW9uLCBsZW5ndGggMTYNCjE0OjQyOjMxLjU5NDQ3NCBJUDYgZmU4MDo6MmUwOmI0ZmY6ZmU2 ODpmODk0LmRoY3B2Ni1jbGllbnQgPiANCmZmMDI6OjE6Mi5kaGNwdjYtc2VydmVyOiBkaGNw NiBzb2xpY2l0DQoxNDo0MjozMi42OTAwNjMgSVA2IGZlODA6OjJlMDpiNGZmOmZlNjg6Zjg5 NC5kaGNwdjYtY2xpZW50ID4gDQpmZjAyOjoxOjIuZGhjcHY2LXNlcnZlcjogZGhjcDYgc29s aWNpdA0KMTQ6NDI6MzQuNTA2MDMwIElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4g ZmYwMjo6MTpmZjBiOjk0NmQ6IA0KSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlvbiwgd2hv IGhhcyBmZTgwOjo2YTIyOjhlMDA6YzgwYjo5NDZkLCBsZW5ndGggMzINCjE0OjQyOjM0LjU3 NDkwNCBJUDYgZmU4MDo6MmUwOmI0ZmY6ZmU2ODpmODk0ID4gZmYwMjo6MjogSUNNUDYsIHJv dXRlciANCnNvbGljaXRhdGlvbiwgbGVuZ3RoIDE2DQoxNDo0MjozNC43NjQxNzYgSVA2IGZl ODA6OjJlMDpiNGZmOmZlNjg6Zjg5NC5kaGNwdjYtY2xpZW50ID4gDQpmZjAyOjoxOjIuZGhj cHY2LXNlcnZlcjogZGhjcDYgc29saWNpdA0KMTQ6NDI6MzUuNTAxODE0IElQNiBmZTgwOjoz YTk0OmVkZmY6ZmU0NzpmMmY4ID4gZmYwMjo6MTpmZjBiOjk0NmQ6IA0KSUNNUDYsIG5laWdo Ym9yIHNvbGljaXRhdGlvbiwgd2hvIGhhcyBmZTgwOjo2YTIyOjhlMDA6YzgwYjo5NDZkLCBs ZW5ndGggMzINCjE0OjQyOjM1LjkzNDcxMCBJUDYgMmEwNjo0ODgwOjQwMDA6OjY4LjUzNDkw ID4gDQoyNjA2OjgzYzA6ODAwMDpmZjAwOmJhMjc6ZWJmZjpmZTM5OjcwMWQuNDU2NzogRmxh Z3MgW1NdLCBzZXEgNjA1MjUxODIzLCANCndpbiAxNDYwMCwgb3B0aW9ucyBbbXNzIDE0NDBd LCBsZW5ndGggMA0KMTQ6NDI6MzYuNTA5NTg4IElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0Nzpm MmY4ID4gZmYwMjo6MTpmZjBiOjk0NmQ6IA0KSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlv biwgd2hvIGhhcyBmZTgwOjo2YTIyOjhlMDA6YzgwYjo5NDZkLCBsZW5ndGggMzINCjE0OjQy OjM4LjU4MDYyNyBJUDYgZmU4MDo6MmUwOmI0ZmY6ZmU2ODpmODk0ID4gZmYwMjo6MjogSUNN UDYsIHJvdXRlciANCnNvbGljaXRhdGlvbiwgbGVuZ3RoIDE2DQoxNDo0MjozOC43MzI4MTIg SVA2IGZlODA6OjJlMDpiNGZmOmZlNjg6Zjg5NC5kaGNwdjYtY2xpZW50ID4gDQpmZjAyOjox OjIuZGhjcHY2LXNlcnZlcjogZGhjcDYgc29saWNpdA0KMTQ6NDI6NDAuMzM3NTE1IElQNiBm ZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4gZmYwMjo6MTpmZjBiOjk0NmQ6IA0KSUNNUDYs IG5laWdoYm9yIHNvbGljaXRhdGlvbiwgd2hvIGhhcyBmZTgwOjo2YTIyOjhlMDA6YzgwYjo5 NDZkLCBsZW5ndGggMzINCjE0OjQyOjQxLjMyMTUwOSBJUDYgZmU4MDo6M2E5NDplZGZmOmZl NDc6ZjJmOCA+IGZmMDI6OjE6ZmYwYjo5NDZkOiANCklDTVA2LCBuZWlnaGJvciBzb2xpY2l0 YXRpb24sIHdobyBoYXMgZmU4MDo6NmEyMjo4ZTAwOmM4MGI6OTQ2ZCwgbGVuZ3RoIDMyDQox NDo0Mjo0Mi4zMjk3MzcgSVA2IGZlODA6OjNhOTQ6ZWRmZjpmZTQ3OmYyZjggPiBmZjAyOjox OmZmMGI6OTQ2ZDogDQpJQ01QNiwgbmVpZ2hib3Igc29saWNpdGF0aW9uLCB3aG8gaGFzIGZl ODA6OjZhMjI6OGUwMDpjODBiOjk0NmQsIGxlbmd0aCAzMg0KMTQ6NDI6NDIuNTk1MDExIElQ NiBmZTgwOjoyZTA6YjRmZjpmZTY4OmY4OTQgPiBmZjAyOjoyOiBJQ01QNiwgcm91dGVyIA0K c29saWNpdGF0aW9uLCBsZW5ndGggMTYNCjE0OjQyOjQ0Ljc4MjQ5MiBJUDYgZmU4MDo6M2E5 NDplZGZmOmZlNDc6ZjJmOCA+IGZmMDI6OjE6ZmYwYjo5NDZkOiANCklDTVA2LCBuZWlnaGJv ciBzb2xpY2l0YXRpb24sIHdobyBoYXMgZmU4MDo6NmEyMjo4ZTAwOmM4MGI6OTQ2ZCwgbGVu Z3RoIDMyDQoxNDo0Mjo0NS43NDk1MDMgSVA2IGZlODA6OjNhOTQ6ZWRmZjpmZTQ3OmYyZjgg PiBmZjAyOjoxOmZmMGI6OTQ2ZDogDQpJQ01QNiwgbmVpZ2hib3Igc29saWNpdGF0aW9uLCB3 aG8gaGFzIGZlODA6OjZhMjI6OGUwMDpjODBiOjk0NmQsIGxlbmd0aCAzMg0KMTQ6NDI6NDYu NzQ1NTE1IElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4gZmYwMjo6MTpmZjBiOjk0 NmQ6IA0KSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlvbiwgd2hvIGhhcyBmZTgwOjo2YTIy OjhlMDA6YzgwYjo5NDZkLCBsZW5ndGggMzINCjE0OjQyOjQ3LjEwOTI2NyBJUDYgZmU4MDo6 MmUwOmI0ZmY6ZmU2ODpmODk0LmRoY3B2Ni1jbGllbnQgPiANCmZmMDI6OjE6Mi5kaGNwdjYt c2VydmVyOiBkaGNwNiBzb2xpY2l0DQoxNDo0Mjo0OC44MDk3NDIgSVA2IGZlODA6OjNhOTQ6 ZWRmZjpmZTQ3OmYyZjggPiBmZjAyOjoxOmZmMGI6OTQ2ZDogDQpJQ01QNiwgbmVpZ2hib3Ig c29saWNpdGF0aW9uLCB3aG8gaGFzIGZlODA6OjZhMjI6OGUwMDpjODBiOjk0NmQsIGxlbmd0 aCAzMg0KMTQ6NDI6NDkuODA1NTcyIElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4g ZmYwMjo6MTpmZjBiOjk0NmQ6IA0KSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlvbiwgd2hv IGhhcyBmZTgwOjo2YTIyOjhlMDA6YzgwYjo5NDZkLCBsZW5ndGggMzINCjE0OjQyOjUwLjgw MTY5NyBJUDYgZmU4MDo6M2E5NDplZGZmOmZlNDc6ZjJmOCA+IGZmMDI6OjE6ZmYwYjo5NDZk OiANCklDTVA2LCBuZWlnaGJvciBzb2xpY2l0YXRpb24sIHdobyBoYXMgZmU4MDo6NmEyMjo4 ZTAwOmM4MGI6OTQ2ZCwgbGVuZ3RoIDMyDQoNCipUaGUgaW50ZXJmYWNlIGlzIHVwIGFuZCBp cyBwYXNzaW5nIElwNCB0cmFmZmljLioNCg0KQW5kIGV2ZW4gL21vcmUgb2RkIC9JIGdldCB0 aGlzIG9uY2UgaW4gYSB3aGlsZToNCg0KMTQ6NDU6MjYuNjg4ODU4IElQNiBlbnZpYWJsZS5j ZW5zdXMuaW50ZXJuZXQtbWVhc3VyZW1lbnQuY29tLjUzNTY1ID4gDQoyNjA2OjgzYzA6ODYw MDo6MTBjLjU4MjIyOiBGbGFncyBbU10sIHNlcSAzNjE5ODI2MzQ2LCB3aW4gMTQ2MDAsIG9w dGlvbnMgDQpbbXNzIDE0NDBdLCBsZW5ndGggMA0KMTQ6NDU6MjYuNjk2ODM0IElQNiBzdHVw ZW5kb3VzLmNlbnN1cy5pbnRlcm5ldC1tZWFzdXJlbWVudC5jb20uNTMzMjEgPiANCjI2MDY6 ODNjMDo4NjAwOjoxMGMucnNmLTE6IEZsYWdzIFtTXSwgc2VxIDM5NDAxMDI3MDUsIHdpbiAx NDYwMCwgb3B0aW9ucyANClttc3MgMTQ0MF0sIGxlbmd0aCAwDQoNClRoZSBwcmVmaXggSVMg cGFydCBvZiB0aGUgcHJvdmlkZXIncyBkZWxlZ2F0aW9uIGJ1dCBJIGhhdmUgbm8gSVB2NiAN CmFkZHJlc3Mgc28gSSBoYXZlIC9hYnNvbHV0ZWx5IG5vIGlkZWEgL2hvdyB0aGV5IHRoaW5r IHJvdXRpbmcgdGhhdCB0byBtZSANCmlzIHJlYXNvbmFibGUgLS0gYnV0IHRoZXkgZG8uDQoN ClRoZXkncmUgcG9pbnRpbmcgYXQgIm15IGdlYXIiIGFzIEknbSBub3QgdXNpbmcgdGhlaXIg cm91dGVyLsKgIFVoLCB5ZWFoLCANCm9rLsKgIEl0cyBub3QgaGFyZHdhcmUgLS0gdGhlIHNh bWUgdGhpbmcgaGFwcGVucyBvbiBhIHBjRW5naW5lcyBib3ggd2l0aCANCnR3byAiaWdiIiBp bnRlcmZhY2VzLCBhICJjdWJlIiBib3ggdGhhdCBoYXMgdHdvICJyZSIgaW50ZXJmYWNlcyBh bmQgbXkgDQpjdXJyZW50IGJveCAod2hpY2ggSSB3YW50IHRvIGtlZXAgdXNpbmcpIHRoYXQg aGFzIHR3byBTRlArIGludGVyZmFjZXMgDQp0aGF0IGNvbWUgdXAgb24gdGhlICJpeCIgZHJp dmVyLiAvQWxsIGJlaGF2ZSBleGFjdGx5IHRoZSBzYW1lIHdheS4vDQoNCklmIEkgY2FsbCBh bmQgYml0Y2ggdGhleSByZXNldCAvZXZlcnl0aGluZyAvb24gdGhlaXIgZW5kIGFuZCBpdCBj b21lcyB1cCANCi0tIG9uY2UgYW5kIGZyb20gdGhlcmUgaXRzIHN0YWJsZS7CoCBCdXQgaWYg SSB0YWtlIGEgcG93ZXIgaGl0IGJleW9uZCBteSANClVQUydzIGNhcGFjaXR5LCB3ZWxsLCBp dCdsbCBoYXBwZW4gYWdhaW4uDQoNCkkgc2VlIGFic29sdXRlbHkgbm90aGluZyBpbiB0Y3Bk dW1wIHRoYXQgaW1wbGllcyB0aGVyZSdzIGEgcHJvYmxlbSwgDQpvdGhlciB0aGFuIHRoYXQg d2hlbiB0aGlzIGhhcHBlbnMgdGhleSBuZXZlciBhbnN3ZXIgL2FueXRoaW5nIC9JIHNlbmQg DQp0aGVtLsKgIFRoZXkgY2xhaW0gdGhlaXIgZGhjcDYgc2VydmVyIGhhcyBsb2NrZWQgb3V0 IG15IE1BQyBkdWUgdG8gDQoiaW52YWxpZCIgdGhpbmdzIHRoZXkncmUgc2VlaW5nIGZyb20g bWUuwqAgV2VsbCwgaXQgY2FuJ3QgYmUgY29taW5nIGZyb20gDQp0aGUgaW5zaWRlIGRldmlj ZXMgYmVjYXVzZSAoMSkgdGhlcmUncyBubyByb3V0ZSB1bnRpbCBJUHY2IGNvbWVzIHVwIA0K ZXhjZXB0IGZvciB0aGUgbGluay1sb2NhbCwgd2hpY2ggSSB2ZXJpZnkgaXMgaW4gZmFjdCB0 aGVyZSBidXQgdGhlcmUgaXMgDQpubyBkZWZhdWx0IHJvdXRlIHVudGlsIHRoZXkgc2VuZCBp dCBhbmQgSSByZWNlaXZlIGl0IGFuZCB0aGVyZWZvcmUgaXRzIA0KcmlkaWN1bG91c2x5IGlt cGxhdXNpYmxlIGFueSBpbnNpZGUgZGV2aWNlIHdpdGggYSAic3RhbGUiIElQdjYgYWRkcmVz cyANCmlzIHNlbmRpbmcsIGFuZCBldmVyeXRoaW5nIGluIHRoZSByYWNrICh0aGlzIGxhc3Qg dGltZSBhdCBsZWFzdCkgd2VudCANCmRvd24gd2l0aCB0aGUgcG93ZXIgYW5kIGFsbCB0aGF0 IGdldHMgaXRzIElQdjYgYnkgU0xBQ0MgLS0gc28gdW50aWwgaXQgDQpnZXRzIGEgZGVsZWdh dGlvbiBpdCBvYnZpb3VzbHkgZGlkbid0IGhhdmUgYW55Lg0KDQpJJ20gdHJ5aW5nIHRvIGdl dCB0aGVpciBlbmdpbmVlcmluZyBwZW9wbGUgb24gdGhlIGxpbmUgdG8gZ2V0IGEgcGFja2V0 IA0KY2FwdHVyZSB3aGlsZSBJIHBvd2VyIGN5Y2xlIGFuZCBzZWUgL2V4YWN0bHkgL3doeSB0 aGV5J3JlIGdldHRpbmcgDQpiaWctbWFkIGJ1dCBteSAvc3VzcGljaW9uIC9pcyB0aGF0IHRo ZWlyIE9OVCBpcyBpbiBzb21lIHdheSBvYnRhaW5pbmcgDQphbmQgZm9yd2FyZGluZyB0aGlu Z3MgYmVmb3JlIGl0IG5lZ290aWF0ZXMgZnVsbHkgLS0gd2hpY2ggb2YgY291cnNlIGl0IA0K c2hvdWxkbid0LCBidXQuLi4uLg0KDQpBbnkgaWRlYXMgaGVyZT/CoCBPbmNlIGl0IGNvbWVz IHVwIGl0cyBjb21wbGV0ZWx5IHN0YWJsZSwgYnV0IG9idmlvdXNseSBhIA0KcG93ZXIgbG9z cyB3aGlsZSBJJ20gbm90IGFyb3VuZCBpcyBnb2luZyB0byBiZSBhIHBhaW4gaW4gdGhlIG5l Y2suwqAgT25lIA0KdGhpbmcgSSd2ZSBjb250ZW1wbGF0ZWQgaXMgc3RpY2tpbmcgYSBkZWxh eSBpbiB0aGUgcmMgc2NyaXB0IGZvciBkaGNwY2QgDQpzbyBpdCBkb2Vzbid0IHN0YXJ0IGZv ciBhIGJpdCBhZnRlciBhIGJvb3QsIHdoaWNoIC9wZXJoYXBzIC9naXZlcyB0aGUgDQpwb3J0 IHRpbWUgdG8gbmVnb3RpYXRlLiBTaW5jZSBpdCBkb2VzIHRoZSBzYW1lIHRoaW5nIHdpdGgg YW4gaWdiLCByZSwgDQphbmQgaXggcG9ydCAod2l0aCBhIDFHIFNGUCB0cmFuc2NlaXZlciBp biBpdCkgSSBhc3N1bWUgdGhlIGlzc3VlIGhhcyANCm5vdGhpbmcgdG8gZG8gL3BlciBzZSAv d2l0aCBuZWdvdGlhdGlvbiwgYnV0IHNvbWVob3cgdGhlaXIgZW5kIGlzIA0KZ2V0dGluZyAi YmlnIG1hZCIgd2l0aCBtZSB3aGVuIGl0IGNvbWVzIHRvIElQdjYgZGVsZWdhdGlvbnMgYW5k IG9uY2UgaXQgDQpkb2VzIC9pdCBuZXZlciBjbGVhcnMgaXQgb24gaXRzIG93bi4vDQoNClB1 dHRpbmcgdGhpcyBpbiBmcmVlYnNkLW5ldCByYXRoZXIgdGhhbiBkaXJlY3RseSB0byBSb3kg YmVjYXVzZSBJIHNlZSANCnRoZSAvc2FtZSAvYmVoYXZpb3IgdXNpbmcgdGhlICJzdG9jayIg ZGhjcDZjIGNsaWVudC4uLi4uLg0KDQpPbiA2LzcvMjAyNCAwOToxMiwgUm95IE1hcnBsZXMg d3JvdGU6DQo+IEhpIEVkDQo+DQo+ICAgLS0tLSBPbiBUaHUsIDA2IEp1biAyMDI0IDAyOjQ4 OjM2ICswMTAwICBFZCBNYXN0ZSAgd3JvdGUgLS0tDQo+ICAgPiBPbiBTdW4sIDcgQXVnIDIw MjIgYXQgMDE6MzIsIEJlbiBXb29kc3dvb2RzYjAyQGZyZWVic2Qub3JnPiB3cm90ZToNCj4g ICA+IEluIHRoZSBwcmV2aW91cyB0aHJlYWRzIHNvbWUgb2JqZWN0aW9ucyB3ZXJlIHJhaXNl ZCBhYm91dCBkaGNwY2Qncw0KPiAgID4gbGFjayBvZiBzYW5kYm94aW5nIChDYXBzaWN1bSAv IHByaXZpbGVnZSBzZXBhcmF0aW9uKSwgd2hpY2ggaGFzIHNpbmNlDQo+ICAgPiBiZWVuIGFk ZHJlc3NlZC4NCj4gICA+DQo+ICAgPiBJIHdvdWxkIGxpa2UgdG8gc3RhcnQgYnVpbGRpbmcg YW5kIGluc3RhbGxpbmcgZGhjcGNkIGJ5IGRlZmF1bHQgc28NCj4gICA+IHRoYXQgaXQgaXMg YXZhaWxhYmxlIGZvciB0ZXN0aW5nIGFuZCBleHBlcmltZW50YXRpb24uIEkgZG8gbm90IGlu dGVuZA0KPiAgID4gdG8gcmVwbGFjZSBkaGNsZW50IG9yIHJ0c29sZCwgYXQgbGVhc3Qgd2l0 aG91dCBtb3JlIGluZm9ybWF0aW9uLCB0ZXN0DQo+ICAgPiByZXN1bHRzLCBhbmQgY29uc2Vu c3VzLg0KPg0KPiBUaGF0J3MgbmljZSBuZXdzLCB0aGFua3MgZm9yIGNhcnJ5aW5nIHRoZSB0 b3JjaCBoZXJlIDopDQo+DQotLSANCkthcmwgRGVubmluZ2VyDQprYXJsQGRlbm5pbmdlci5u ZXQNCi9UaGUgTWFya2V0IFRpY2tlci8NCi9bUy9NSU1FIGVuY3J5cHRlZCBlbWFpbCBwcmVm ZXJyZWRdLw0K --------------GukcdSY0XoBhrWz0OkjkHBU5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Resurrecting an older thread....

I have Kub Fiber here and have run into an interesting problem I've not seen on anything else (this same config, absent dhcpcd but on the stock FreeBSD config, worked fine on both Cox and Spectrum without changes.)

On a=C2=A0first use=C2=A0dhcpcd gets both IPv4 and I= Pv6 addresses,=C2=A0but=C2=A0sometimes the IPv4 side fails to be= able to ARP (!!!!) the other end.=C2=A0 If I drop the interface (ifconfig i= x0 down; ifconfig ix0 up) it=C2=A0never=C2=A0fails on the secon= d try.=C2=A0 If it fails on the first try doing a "arp -d" on the other end=C2=A0= resolves nothing;=C2=A0only recycling the interface does.=C2=A0 Once i= t comes up its 100% stable and=C2=A0never=C2=A0drops it.=C2=A0 Obvio= usly with no arp for the other end you get nothing (in either direction.)

That I can handle (but its damned annoying) with a script that checks connection to the other side and, if it can't get anything, does the above.

The=C2=A0more serious=C2=A0problem is with Ipv6.=C2=A0 If I= shut down my gear (and=C2=A0the company's ONT) and then turn the p= ower back on (say, because I need to work on the UPS in my rack!)=C2=A0<= i>it will come back up on IpV4 but never gets an answer to the SOLICIT response.=C2=A0=C2=A0It also never sees anything from= the neighbor request!

In other words ("tcpdump -i ip6 ix0"):

14:42:25.301564 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:30.573650 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:31.594474 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:32.690063 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:34.506030 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:34.574904 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:34.764176 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:35.501814 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:35.934710 IP6 2a06:4880:4000::68.53490 > 2606:83c0:8000:ff00:ba27:ebff:fe39:701d.4567: Flags [S], seq 605251823, win 14600, options [mss 1440], length 0
14:42:36.509588 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:38.580627 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:38.732812 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:40.337515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:41.321509 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.329737 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.595011 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:44.782492 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:45.749503 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:46.745515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:47.109267 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:48.809742 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:49.805572 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:50.801697 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32

The interface is up and is passing Ip4 traffic.

And even=C2=A0more odd=C2=A0I get this once in a while:

=

14:45:26.688858 IP6 enviable.census.internet-measurement.com.53565 > 2606:83c0:8600::10c.58222: Flags [S], seq 3619826346, win 14600, options [mss 1440], length 0
14:45:26.696834 IP6 stupendous.census.internet-measurement.com.53321 > 2606:83c0:8600::10c.rsf-1: Flags [S], seq 3940102705, win 14600, options [mss 1440], length 0

The prefix IS part of the provider's delegation but I have no IPv6 address so I have=C2=A0absolutely no idea=C2=A0how they= think routing that to me is reasonable -- but they do.

They're pointing at "my gear" as I'm not using their router.=C2=A0= Uh, yeah, ok.=C2=A0 Its not hardware -- the same thing happens on a pcEngines box with two "igb" interfaces, a "cube" box that has two "re" interfaces and my current box (which I want to keep using) that has two SFP+ interfaces that come up on the "ix" driver.=C2=A0= =C2=A0All behave exactly the same way.

If I call and bitch they reset=C2=A0everything=C2=A0on thei= r end and it comes up -- once and from there its stable.=C2=A0 But if I take = a power hit beyond my UPS's capacity, well, it'll happen again.

I see absolutely nothing in tcpdump that implies there's a problem, other than that when this happens they never answer any= thing=C2=A0I send them.=C2=A0 They claim their dhcp6 server has locked out my MA= C due to "invalid" things they're seeing from me.=C2=A0 Well, it can'= t be coming from the inside devices because (1) there's no route until IPv6 comes up except for the link-local, which I verify is in fact there but there is no default route until they send it and I receive it and therefore its ridiculously implausible any inside device with a "stale" IPv6 address is sending, and everything in the rack (this last time at least) went down with the power and all that gets its IPv6 by SLACC -- so until it gets a delegation it obviously didn't have any.

I'm trying to get their engineering people on the line to get a packet capture while I power cycle and see=C2=A0exactly=C2=A0why they're getting big-mad but my=C2=A0suspicion=C2=A0is that t= heir ONT is in some way obtaining and forwarding things before it negotiates fully -- which of course it shouldn't, but.....=C2=A0

Any ideas here?=C2=A0 Once it comes up its completely stable, but obviously a power loss while I'm not around is going to be a pain in the neck.=C2=A0 One thing I've contemplated is sticking a delay = in the rc script for dhcpcd so it doesn't start for a bit after a boot, which=C2=A0perhaps=C2=A0gives the port time to negotia= te.=C2=A0 Since it does the same thing with an igb, re, and ix port (with a 1G SFP transceiver in it) I assume the issue has nothing to do=C2=A0= per se=C2=A0with negotiation, but somehow their end is getting "b= ig mad" with me when it comes to IPv6 delegations and once it does=C2=A0= it never clears it on its own.

Putting this in freebsd-net rather than directly to Roy because I see the=C2=A0same=C2=A0behavior using the "stock" dhcp6c cli= ent......

On 6/7/2024 09:12, Roy Marples wrote:<= br> 
Hi Ed

 ---- On Thu, 06 Jun 2024 02:48:36 +0100  Ed Maste  wrote ---=20
 > On Sun, 7 Aug 2022 at 01:32, Ben Woods woodsb02@freebsd.org&g=
t; wrote:
 > In the previous threads some objections were raised about dhcpcd's
 > lack of sandboxing (Capsicum / privilege separation), which has sin=
ce
 > been addressed.
 >=20
 > I would like to start building and installing dhcpcd by default so
 > that it is available for testing and experimentation. I do not inte=
nd
 > to replace dhclent or rtsold, at least without more information, te=
st
 > results, and consensus.

That's nice news, thanks for carrying the torch here :)
--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------GukcdSY0XoBhrWz0OkjkHBU5-- --------------ms030503080802030107080907 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwNjE4MjIwMDE2WjBPBgkqhkiG9w0BCQQxQgRADWOyrZ+b1Fgs OFA0l2tpIMaSxhWbztvCwLc4Tulv0blknVSMnm/F67FE5GqBQDeEUNEXrHqxBOY/Z8cxxrbs uDCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICAEVi7/iNav8c9wUV c26ia2jXY8gNumDd0UtGhSqugmWKU9gR5pUuygU2p+tX8ARgF50QFIKXjPavNgogantm1d5b mAZgdSHsydQqHmhVrRUZoeloyTKy1tr4ztmdxOiU0TNtPQfUjgQ/7cxZBJcQJ5DjqbxjYnRe JJiQAAfHFsljdqyAWcEYsXej+jqdH6EXe8p2SD7ppnmgoZ6U2HVJYYSL8grcC2H7CbHE9gTS jfZj+/gfWPXqhFcE0LhBoAXG2IrnSmu/ErHrEHpx+HkuyacJdBpTtFkV3dKp09hA1SU36cc/ a8nKcEZ/51OUxTPc4vnSOMJC/wki4jgWdIPQwvrQ21gMJ9ygvNcw6eB0Po7mm2YmQChTe+Rx mq7HksBk48mc9dfMnF58zpbWQ0kNiHhuibl8ysn2+wOTVP5CBRePK5qtCjG1EmvCeOTWdSEi E7s4/jfpr2R7R+EibUB29UCm8QRpLy1UcCqquUbybAUvRpZqvo3IGONlQd6O7EBjr1eYRLvG GEwkhYsj7OG0Mqpp6yuoKqyTaPsJqkp88f+2eu5YpvQZV9vfGyLGxiwdVMfct8aqqfTM2TA9 xl2OmHzOjMfu5KyyoEEOnQD+S0SWZRqZHDNMt8s3taFFJL21ZdvHZA1dZzAROBupMPb1x6ew fV88NLAOI+ofGqg9U3SRAAAAAAAA --------------ms030503080802030107080907-- From nobody Thu Jun 19 01:20:51 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bN2qR6xZ0z5yM7r for ; Thu, 19 Jun 2025 01:20:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bN2qR4xmhz3tW0 for ; Thu, 19 Jun 2025 01:20:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750296051; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=K+s8Q+4/jVviIUY3BZgQScTCn0beTKFD1bqe8sZ1Z/U=; b=YaQefbjVDPqpJtpdMlILm76ijWFh17LKnR7ZD4kNXRumP2YuQBNjTJZVx9qVGJt3DqvA8H MpsGO7D8Y+cKFyRX5Mgw0XodFmtVGtq3educn0oi6H8Nkl1Jh5+0SEHlQ9W09eJZIYP3F6 9uExfSxBvSnfxcGxLjJ/GkXJpL6nI6jil1WwHgB3m+y8XECJIgyJKhP2rHpHYKqzIRV9vO VsPG89AFnJj4hujkE3OuVMhMjbqwB7ZeCmQ1924tjMaNFee4fyF4LCguD1xotDflxA/sfX YU1YuUjrZo6HGdh5UGAeMI65C4sfImFzN3G7fcmSVw8cnzwdw6MwMnu2kajIPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750296051; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=K+s8Q+4/jVviIUY3BZgQScTCn0beTKFD1bqe8sZ1Z/U=; b=EToqiNy/QrwDeD9GNz1lSSCTYSBMOpkUvFcrzTbTKOaRPn8rogbIcnLpJInjaPUCeGLMP/ McR4ZYMLfl0NvzfuvfNwInb4DtqDCFsWy9kTmxHUAxarOsQEfXn9hRH+oXwfdSdKFKgU3H bI7uELWcPVweOlfwLkE/Jxb9V1Ft8yQZoCr4F92DsPZfAH9B2F5M+i2DufBRFDj7V6MCQA iFJu12Rv8cM2hARtRR+0JaREILB663Fnoc73mmHx3xcr5B4BKCqZmrZQ3zED4bagaMPaYt nGwQ8KLrrM3OFi/pTSdUvhScZDyBn7mXkO4CD/nkRjbbR5W9zkQ+K2yhIqf0nw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750296051; a=rsa-sha256; cv=none; b=F2wpOXLCaa2qN8L1s+3mrGhR1IJtEvfXw7sS7Vfz76vCm0Y+aXTyQvq7UsBNx4dAtCbfV4 D5q3c0XjSSKtxoPrx9cUINuME4RwuWzInQoW3RQ7qmSh8B1aQXdQ6/482PGDIHcVHXutZq YQCrvT+52DkFfJXRiZsKPnNytzertREIfY0BnmbXGxTs95LRut8GgpM6TbvlFKx1gnvH3R 5d/QCEZ9Ai3sDJuFp1yI7thr5Wyq1cyZ+SEUfPTjR5iJZDbnTq0lTBqRNJrOH+iyOcR3/y e9p5s0cpuo1gcMM3M7cmfUsrpNtIzH0kMCkMaRU9KOQn+eOxu4drZ82y+FHwQQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bN2qR2mNdztKb for ; Thu, 19 Jun 2025 01:20:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55J1KpuU002099 for ; Thu, 19 Jun 2025 01:20:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55J1KpcW002097 for net@FreeBSD.org; Thu, 19 Jun 2025 01:20:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 01:20:51 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: rgrimes@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 Rodney W. Grimes changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rgrimes@FreeBSD.org --- Comment #14 from Rodney W. Grimes --- (In reply to Timo Voelker from comment #10) The number of list entries (net.inet.ip.maxfragbucketsize) seems relevant h= ere. Out of the box, your FreeBSD VM has set maxfragbucketsize=3D1. This means i= f the FreeBSD VM must insert a new entry (i.e., when the first fragment of a pack= et has been received) in a bucket that already contains an entry, it removes t= his one first. In consequence, FreeBSD is probably unable to reassemble that pa= cket with the removed fragments. So I believe the "relevant bug" here is that maxfrqgbucksize is allowed to = go to 1, there should be a clamp on the calculation to prevent this absurd val= ue that would lead to the behavior uncovered by artificially reducing kernel memory space. There are many values that we calculate based on tuning parameters and those values should have reasonable clamps on them, if they = lead to bad behavior when they go to low or two high. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 01:29:20 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bN31M0k2Sz5yMjp for ; Thu, 19 Jun 2025 01:29:27 +0000 (UTC) (envelope-from zlei@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bN31M08g8z41ks; Thu, 19 Jun 2025 01:29:27 +0000 (UTC) (envelope-from zlei@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750296567; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=mZ0AKRC1uBpc1ZN/u8JK8ehSW2BLMVUBq8X/YfwARKI=; b=IbL9tYnKF9gGHHVEblI7KhVuCz5dIHf618X3dDzpv+6+gaHUtbrzRVuLCGFC+7agsIa2EG SrYKO3SpxkbdVOLqExOF/1/jdwfUZq2/Px6X95uo/2PrmtEkoXP9Vcml+YxiNONrsPyCDJ KQrbLODeWh02dEkJ/kAfv1D9iFOtqLq2LibdHpPAHznfZ8D6WjL4z7ob7eVGCbh5JCQPAh kggGVWCAXa7eINJGomOdkNqTwu+B7b5kSrYIav7dIg8SsSp7fs1fQ8UaMvEPxqCnMtZqMS ssRwS7VPwhs4oikudplmb1g33PHkykZKcnkJIDLTBDlCLP9O7dWOSd77MNZZxw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750296567; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=mZ0AKRC1uBpc1ZN/u8JK8ehSW2BLMVUBq8X/YfwARKI=; b=WGKCS5YB3sqjOBE+U080wV2/bdYTKGVASgi8SBZbELUAOSOrRFNCIe/AuVdRXY3HPK9D2b ds7ID5LYhWfMj1M2GIyQG+9nh53AX9v53ly88OvGN2CFl7fwOPZT/8H+9KHYnG6UABjj+g 48XcHdYTBcDhvR0Wl2u12VcvWg7wQFkdEuPNsoB8b6IQMbUFwutp/cE9sCsz0Haul8jIaI yYkI3zMmU/GCxOM5Z16vvNksZNnlsvyZWWyQ4a0402ITAplApud5njgvPEz099al0Ohjsz zqDw7xBOwZDRUqnSFyakSRi/6WLxmX+Q2rvonWqrcPXFGm+eHf/H3yOAeq+lJQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750296567; a=rsa-sha256; cv=none; b=KftEME1Bv9fzLiiAllM1OwKiaqGOqnYoT/zhTHJgVPVSEijtGK45zzU3CAouGxYWNZQ0eZ or6jAjD7WQijkXHC+k/dhLvRTWNqjbZACRddqQ96JPca9RWkZhl3C41Vw7GosYCbTPWh/n hidH5PIi4/2RsKZCd8On1U3zui/+TmeFKgvjpJE8pMVEkEaEucH7cYNou99LqAZ8XytWXC hunBAyyKTEdiNcpbCJjOcJGUupwvFqjDKe1XsCqnmUqwGlJQSaG7KW+2Vr3DeP0llynMie MwC/MYbUVbLAMRFQjWT8w2xtXnhXBYt8LsbVwwYOHoa4wp1eouO8WOUSKaYpfg== Received: from smtpclient.apple (ns1.oxydns.net [45.32.91.63]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: zlei/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4bN31K5rBkz12Pl; Thu, 19 Jun 2025 01:29:25 +0000 (UTC) (envelope-from zlei@FreeBSD.org) From: Zhenlei Huang Message-Id: <79909EDE-CFB2-45E9-8DC0-E042704908B4@FreeBSD.org> Content-Type: multipart/signed; boundary="Apple-Mail=_F02483BA-33A6-40F5-97D8-D4335BFE780B"; protocol="application/pgp-signature"; micalg=pgp-sha512 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.10\)) Subject: Re: dhcpcd(8) into FreeBSD base Date: Thu, 19 Jun 2025 09:29:20 +0800 In-Reply-To: Cc: FreeBSD Net To: Karl Denninger References: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> X-Mailer: Apple Mail (2.3696.120.41.1.10) --Apple-Mail=_F02483BA-33A6-40F5-97D8-D4335BFE780B Content-Type: multipart/alternative; boundary="Apple-Mail=_7E893E2C-C76B-41AF-9D20-3A8B69795A02" --Apple-Mail=_7E893E2C-C76B-41AF-9D20-3A8B69795A02 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii > On Jun 19, 2025, at 6:00 AM, Karl Denninger = wrote: >=20 > Resurrecting an older thread.... >=20 >=20 Can you please point me to the thread ? I'd like to gather more context = from that. > I have Kub Fiber here and have run into an interesting problem I've = not seen on anything else (this same config, absent dhcpcd but on the = stock FreeBSD config, worked fine on both Cox and Spectrum without = changes.) >=20 > On a first use dhcpcd gets both IPv4 and IPv6 addresses, but sometimes = the IPv4 side fails to be able to ARP (!!!!) the other end. If I drop = the interface (ifconfig ix0 down; ifconfig ix0 up) it never fails on the = second try. If it fails on the first try doing a "arp -d" on the other = end resolves nothing; only recycling the interface does. Once it comes = up its 100% stable and never drops it. Obviously with no arp for the = other end you get nothing (in either direction.) >=20 > That I can handle (but its damned annoying) with a script that checks = connection to the other side and, if it can't get anything, does the = above. >=20 > The more serious problem is with Ipv6. If I shut down my gear (and = the company's ONT) and then turn the power back on (say, because I need = to work on the UPS in my rack!) it will come back up on IpV4 but never = gets an answer to the SOLICIT response. It also never sees anything = from the neighbor request! >=20 > In other words ("tcpdump -i ip6 ix0"): >=20 > 14:42:25.301564 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:30.573650 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router = solicitation, length 16 > 14:42:31.594474 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > = ff02::1:2.dhcpv6-server: dhcp6 solicit > 14:42:32.690063 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > = ff02::1:2.dhcpv6-server: dhcp6 solicit > 14:42:34.506030 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:34.574904 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router = solicitation, length 16 > 14:42:34.764176 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > = ff02::1:2.dhcpv6-server: dhcp6 solicit > 14:42:35.501814 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:35.934710 IP6 2a06:4880:4000::68.53490 > = 2606:83c0:8000:ff00:ba27:ebff:fe39:701d.4567: Flags [S], seq 605251823, = win 14600, options [mss 1440], length 0 > 14:42:36.509588 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:38.580627 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router = solicitation, length 16 > 14:42:38.732812 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > = ff02::1:2.dhcpv6-server: dhcp6 solicit > 14:42:40.337515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:41.321509 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:42.329737 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:42.595011 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router = solicitation, length 16 > 14:42:44.782492 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:45.749503 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:46.745515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:47.109267 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > = ff02::1:2.dhcpv6-server: dhcp6 solicit > 14:42:48.809742 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:49.805572 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 > 14:42:50.801697 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: = ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length = 32 >=20 > The interface is up and is passing Ip4 traffic. >=20 > And even more odd I get this once in a while: >=20 > 14:45:26.688858 IP6 enviable.census.internet-measurement.com.53565 > = 2606:83c0:8600::10c.58222: Flags [S], seq 3619826346, win 14600, options = [mss 1440], length 0 > 14:45:26.696834 IP6 stupendous.census.internet-measurement.com.53321 > = 2606:83c0:8600::10c.rsf-1: Flags [S], seq 3940102705, win 14600, options = [mss 1440], length 0 >=20 > The prefix IS part of the provider's delegation but I have no IPv6 = address so I have absolutely no idea how they think routing that to me = is reasonable -- but they do. >=20 >=20 For unwanted IPv6 packets, the net stack should drop them silently, and = fundamentally you can NOT prevent your provider from sending them. Also = be aware that tcpdump(1) by default turns the interface into promisc = mode. > They're pointing at "my gear" as I'm not using their router. Uh, = yeah, ok. Its not hardware -- the same thing happens on a pcEngines box = with two "igb" interfaces, a "cube" box that has two "re" interfaces and = my current box (which I want to keep using) that has two SFP+ interfaces = that come up on the "ix" driver. All behave exactly the same way. >=20 > If I call and bitch they reset everything on their end and it comes up = -- once and from there its stable. But if I take a power hit beyond my = UPS's capacity, well, it'll happen again. >=20 > I see absolutely nothing in tcpdump that implies there's a problem, = other than that when this happens they never answer anything I send = them. They claim their dhcp6 server has locked out my MAC due to = "invalid" things they're seeing from me. >=20 Do ( can ) they provide the details of the "invalid" things ? I'm = recently overhauling the attaching process of interfaces. For ethernet = interfaces, there're rare races that the driver see un-initialized = link-layer address ( 00:00:00:00:00:00 ) or incomplete link-layer = address ( occurs when renaming the interface ) . So I'm curious what = "invalid" things your provider sees. > Well, it can't be coming from the inside devices because (1) there's = no route until IPv6 comes up except for the link-local, which I verify = is in fact there but there is no default route until they send it and I = receive it and therefore its ridiculously implausible any inside device = with a "stale" IPv6 address is sending, and everything in the rack (this = last time at least) went down with the power and all that gets its IPv6 = by SLACC -- so until it gets a delegation it obviously didn't have any. >=20 > I'm trying to get their engineering people on the line to get a packet = capture while I power cycle and see exactly why they're getting big-mad = but my suspicion is that their ONT is in some way obtaining and = forwarding things before it negotiates fully -- which of course it = shouldn't, but..... >=20 > Any ideas here? Once it comes up its completely stable, but obviously = a power loss while I'm not around is going to be a pain in the neck. = One thing I've contemplated is sticking a delay in the rc script for = dhcpcd so it doesn't start for a bit after a boot, which perhaps gives = the port time to negotiate. Since it does the same thing with an igb, = re, and ix port (with a 1G SFP transceiver in it) I assume the issue has = nothing to do per se with negotiation, but somehow their end is getting = "big mad" with me when it comes to IPv6 delegations and once it does it = never clears it on its own. >=20 > Putting this in freebsd-net rather than directly to Roy because I see = the same behavior using the "stock" dhcp6c client...... >=20 > On 6/7/2024 09:12, Roy Marples wrote: >> Hi Ed >>=20 >> ---- On Thu, 06 Jun 2024 02:48:36 +0100 Ed Maste wrote --- >> > On Sun, 7 Aug 2022 at 01:32, Ben Woods woodsb02@freebsd.org = > wrote: >> > In the previous threads some objections were raised about dhcpcd's >> > lack of sandboxing (Capsicum / privilege separation), which has = since >> > been addressed. >> > >> > I would like to start building and installing dhcpcd by default so >> > that it is available for testing and experimentation. I do not = intend >> > to replace dhclent or rtsold, at least without more information, = test >> > results, and consensus. >>=20 >> That's nice news, thanks for carrying the torch here :) >>=20 > -- > Karl Denninger > karl@denninger.net > The Market Ticker > [S/MIME encrypted email preferred] Best regards, Zhenlei --Apple-Mail=_7E893E2C-C76B-41AF-9D20-3A8B69795A02 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii

On Jun 19, 2025, at 6:00 AM, Karl Denninger <karl@denninger.net> wrote:

Resurrecting an older thread....



Can you please point me to the thread ? I'd like to gather more context from that.
 

I have Kub Fiber here and have run into an interesting problem I've not seen on anything else (this same config, absent dhcpcd but on the stock FreeBSD config, worked fine on both Cox and Spectrum without changes.)

On a first use dhcpcd gets both IPv4 and IPv6 addresses, but sometimes the IPv4 side fails to be able to ARP (!!!!) the other end.  If I drop the interface (ifconfig ix0 down; ifconfig ix0 up) it never fails on the second try.  If it fails on the first try doing a "arp -d" on the other end resolves nothing; only recycling the interface does.  Once it comes up its 100% stable and never drops it.  Obviously with no arp for the other end you get nothing (in either direction.)

That I can handle (but its damned annoying) with a script that checks connection to the other side and, if it can't get anything, does the above.

The more serious problem is with Ipv6.  If I shut down my gear (and the company's ONT) and then turn the power back on (say, because I need to work on the UPS in my rack!) it will come back up on IpV4 but never gets an answer to the SOLICIT response.  It also never sees anything from the neighbor request!

In other words ("tcpdump -i ip6 ix0"):

14:42:25.301564 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:30.573650 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:31.594474 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:32.690063 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:34.506030 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:34.574904 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:34.764176 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:35.501814 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:35.934710 IP6 2a06:4880:4000::68.53490 > 2606:83c0:8000:ff00:ba27:ebff:fe39:701d.4567: Flags [S], seq 605251823, win 14600, options [mss 1440], length 0
14:42:36.509588 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:38.580627 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:38.732812 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:40.337515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:41.321509 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.329737 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.595011 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:44.782492 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:45.749503 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:46.745515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:47.109267 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:48.809742 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:49.805572 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:50.801697 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32

The interface is up and is passing Ip4 traffic.

And even more odd I get this once in a while:

14:45:26.688858 IP6 enviable.census.internet-measurement.com.53565 > 2606:83c0:8600::10c.58222: Flags [S], seq 3619826346, win 14600, options [mss 1440], length 0
14:45:26.696834 IP6 stupendous.census.internet-measurement.com.53321 > 2606:83c0:8600::10c.rsf-1: Flags [S], seq 3940102705, win 14600, options [mss 1440], length 0

The prefix IS part of the provider's delegation but I have no IPv6 address so I have absolutely no idea how they think routing that to me is reasonable -- but they do.



For unwanted IPv6 packets, the net stack should drop them silently, and fundamentally you can NOT prevent your provider from sending them.  Also be aware that tcpdump(1) by default turns the interface into promisc mode. 

They're pointing at "my gear" as I'm not using their router.  Uh, yeah, ok.  Its not hardware -- the same thing happens on a pcEngines box with two "igb" interfaces, a "cube" box that has two "re" interfaces and my current box (which I want to keep using) that has two SFP+ interfaces that come up on the "ix" driver.  All behave exactly the same way.

If I call and bitch they reset everything on their end and it comes up -- once and from there its stable.  But if I take a power hit beyond my UPS's capacity, well, it'll happen again.

I see absolutely nothing in tcpdump that implies there's a problem, other than that when this happens they never answer anything I send them.  They claim their dhcp6 server has locked out my MAC due to "invalid" things they're seeing from me.

Do ( can ) they provide the details of the "invalid" things ? I'm recently overhauling the attaching process of interfaces. For ethernet interfaces, there're rare races that the driver see un-initialized link-layer address ( 00:00:00:00:00:00 ) or incomplete link-layer address ( occurs when renaming the interface ) . So I'm curious what "invalid" things your provider sees.

  Well, it can't be coming from the inside devices because (1) there's no route until IPv6 comes up except for the link-local, which I verify is in fact there but there is no default route until they send it and I receive it and therefore its ridiculously implausible any inside device with a "stale" IPv6 address is sending, and everything in the rack (this last time at least) went down with the power and all that gets its IPv6 by SLACC -- so until it gets a delegation it obviously didn't have any.

I'm trying to get their engineering people on the line to get a packet capture while I power cycle and see exactly why they're getting big-mad but my suspicion is that their ONT is in some way obtaining and forwarding things before it negotiates fully -- which of course it shouldn't, but..... 

Any ideas here?  Once it comes up its completely stable, but obviously a power loss while I'm not around is going to be a pain in the neck.  One thing I've contemplated is sticking a delay in the rc script for dhcpcd so it doesn't start for a bit after a boot, which perhaps gives the port time to negotiate.  Since it does the same thing with an igb, re, and ix port (with a 1G SFP transceiver in it) I assume the issue has nothing to do per se with negotiation, but somehow their end is getting "big mad" with me when it comes to IPv6 delegations and once it does it never clears it on its own.

Putting this in freebsd-net rather than directly to Roy because I see the same behavior using the "stock" dhcp6c client......

On 6/7/2024 09:12, Roy Marples wrote:
Hi Ed

 ---- On Thu, 06 Jun 2024 02:48:36 +0100  Ed Maste  wrote --- 
 > On Sun, 7 Aug 2022 at 01:32, Ben Woods woodsb02@freebsd.org> wrote:
 > In the previous threads some objections were raised about dhcpcd's
 > lack of sandboxing (Capsicum / privilege separation), which has since
 > been addressed.
 > 
 > I would like to start building and installing dhcpcd by default so
 > that it is available for testing and experimentation. I do not intend
 > to replace dhclent or rtsold, at least without more information, test
 > results, and consensus.

That's nice news, thanks for carrying the torch here :)
--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]

Best regards,
Zhenlei

--Apple-Mail=_7E893E2C-C76B-41AF-9D20-3A8B69795A02-- --Apple-Mail=_F02483BA-33A6-40F5-97D8-D4335BFE780B Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iNUEARYKAH0WIQRj28YmNowGX1isJg7GJJ6Jgbd0XwUCaFNn8F8UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0NjNE QkM2MjYzNjhDMDY1RjU4QUMyNjBFQzYyNDlFODk4MUI3NzQ1RgAKCRDGJJ6Jgbd0 X7exAQCvVJ4p9Nizeuylb8lqPaGRSGVKNEeOUq2y26fluy16IwEAw/TImjfwMdij M9HV8Uq6dAnf/SFrVGT/HQWEPj1n4wU= =15Rt -----END PGP SIGNATURE----- --Apple-Mail=_F02483BA-33A6-40F5-97D8-D4335BFE780B-- From nobody Thu Jun 19 01:45:02 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bN3Mz4QmDz5yP2G for ; Thu, 19 Jun 2025 01:45:35 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bN3Mx6sHdz49dT for ; Thu, 19 Jun 2025 01:45:33 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net; dmarc=pass (policy=none) header.from=denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id 5F0DEB11E6 for ; Wed, 18 Jun 2025 21:45:05 -0400 (EDT) Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 9DF421F43B3 for ; Wed, 18 Jun 2025 21:45:02 -0400 (EDT) Message-ID: Date: Wed, 18 Jun 2025 21:45:02 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: dhcpcd(8) into FreeBSD base To: freebsd-net@freebsd.org References: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> <79909EDE-CFB2-45E9-8DC0-E042704908B4@FreeBSD.org> Content-Language: en-US From: Karl Denninger In-Reply-To: <79909EDE-CFB2-45E9-8DC0-E042704908B4@FreeBSD.org> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms080502070608050402020104" X-Spamd-Result: default: False [-1.20 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_LONG(1.00)[1.000]; NEURAL_SPAM_MEDIUM(1.00)[1.000]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; NEURAL_HAM_SHORT(-0.40)[-0.401]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; R_SPF_ALLOW(-0.20)[+mx]; MIME_BASE64_TEXT(0.10)[]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; FREEFALL_USER(0.00)[karl]; MID_RHS_MATCH_FROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; R_DKIM_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; HAS_ATTACHMENT(0.00)[] X-Rspamd-Queue-Id: 4bN3Mx6sHdz49dT X-Spamd-Bar: - This is a cryptographically signed message in MIME format. --------------ms080502070608050402020104 Content-Type: multipart/alternative; boundary="------------IYZ4E5kCHDr100xZzdAmb6o1" --------------IYZ4E5kCHDr100xZzdAmb6o1 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gNi8xOC8yMDI1IDIxOjI5LCBaaGVubGVpIEh1YW5nIHdyb3RlOg0KPg0KPj4gT24gSnVu IDE5LCAyMDI1LCBhdCA2OjAwIEFNLCBLYXJsIERlbm5pbmdlciA8a2FybEBkZW5uaW5nZXIu bmV0PiB3cm90ZToNCj4+DQo+PiBSZXN1cnJlY3RpbmcgYW4gb2xkZXIgdGhyZWFkLi4uLg0K Pj4NCj4NCj4gQ2FuIHlvdSBwbGVhc2UgcG9pbnQgbWUgdG8gdGhlIHRocmVhZCA/IEknZCBs aWtlIHRvIGdhdGhlciBtb3JlIA0KPiBjb250ZXh0IGZyb20gdGhhdC4NCkl0IHdhcyB1bmRl ciB0aGlzIHRpdGxlOyBzaG91bGQgYmUgaW4gdGhlIGFyY2hpdmVzIGZyb20gSnVuZSBvZiBs YXN0IHllYXIuDQo+Pg0KPj4gSSBoYXZlIEt1YiBGaWJlciBoZXJlIGFuZCBoYXZlIHJ1biBp bnRvIGFuIGludGVyZXN0aW5nIHByb2JsZW0gSSd2ZSANCj4+IG5vdCBzZWVuIG9uIGFueXRo aW5nIGVsc2UgKHRoaXMgc2FtZSBjb25maWcsIGFic2VudCBkaGNwY2QgYnV0IG9uIHRoZSAN Cj4+IHN0b2NrIEZyZWVCU0QgY29uZmlnLCB3b3JrZWQgZmluZSBvbiBib3RoIENveCBhbmQg U3BlY3RydW0gd2l0aG91dCANCj4+IGNoYW5nZXMuKQ0KPj4NCj4+IE9uIGEgKl9maXJzdCB1 c2VfKsKgZGhjcGNkIGdldHMgYm90aCBJUHY0IGFuZCBJUHY2IGFkZHJlc3NlcywgL2J1dCAN Cj4+IC9zb21ldGltZXMgdGhlIElQdjQgc2lkZSBmYWlscyB0byBiZSBhYmxlIHRvIEFSUCAo ISEhISkgdGhlIG90aGVyIA0KPj4gZW5kLsKgIElmIEkgZHJvcCB0aGUgaW50ZXJmYWNlIChp ZmNvbmZpZyBpeDAgZG93bjsgaWZjb25maWcgaXgwIHVwKSBpdCANCj4+IC9uZXZlciAvZmFp bHMgb24gdGhlIHNlY29uZCB0cnkuwqAgSWYgaXQgZmFpbHMgb24gdGhlIGZpcnN0IHRyeSBk b2luZyANCj4+IGEgImFycCAtZCIgb24gdGhlIG90aGVyIGVuZCAvcmVzb2x2ZXMgbm90aGlu ZzsgL29ubHkgcmVjeWNsaW5nIHRoZSANCj4+IGludGVyZmFjZSBkb2VzLsKgIE9uY2UgaXQg Y29tZXMgdXAgaXRzIDEwMCUgc3RhYmxlIGFuZCAvbmV2ZXIgL2Ryb3BzIA0KPj4gaXQuwqAg T2J2aW91c2x5IHdpdGggbm8gYXJwIGZvciB0aGUgb3RoZXIgZW5kIHlvdSBnZXQgbm90aGlu ZyAoaW4gDQo+PiBlaXRoZXIgZGlyZWN0aW9uLikNCj4+DQo+PiBUaGF0IEkgY2FuIGhhbmRs ZSAoYnV0IGl0cyBkYW1uZWQgYW5ub3lpbmcpIHdpdGggYSBzY3JpcHQgdGhhdCBjaGVja3Mg DQo+PiBjb25uZWN0aW9uIHRvIHRoZSBvdGhlciBzaWRlIGFuZCwgaWYgaXQgY2FuJ3QgZ2V0 IGFueXRoaW5nLCBkb2VzIHRoZSANCj4+IGFib3ZlLg0KPj4NCj4+IFRoZSAvbW9yZSBzZXJp b3VzIC9wcm9ibGVtIGlzIHdpdGggSXB2Ni7CoCBJZiBJIHNodXQgZG93biBteSBnZWFyIA0K Pj4gKCpfYW5kXyrCoHRoZSBjb21wYW55J3MgT05UKSBhbmQgdGhlbiB0dXJuIHRoZSBwb3dl ciBiYWNrIG9uIChzYXksIA0KPj4gYmVjYXVzZSBJIG5lZWQgdG8gd29yayBvbiB0aGUgVVBT IGluIG15IHJhY2shKSAvaXQgd2lsbCBjb21lIGJhY2sgdXAgDQo+PiBvbiBJcFY0IGJ1dCBu ZXZlciBnZXRzIGFuIGFuc3dlciB0byB0aGUgU09MSUNJVCByZXNwb25zZS4gL0l0IGFsc28g DQo+PiBuZXZlciBzZWVzIGFueXRoaW5nIGZyb20gdGhlIG5laWdoYm9yIHJlcXVlc3QhDQo+ Pg0KPj4gSW4gb3RoZXIgd29yZHMgKCJ0Y3BkdW1wIC1pIGlwNiBpeDAiKToNCj4+DQo+PiAx NDo0MjoyNS4zMDE1NjQgSVA2IGZlODA6OjNhOTQ6ZWRmZjpmZTQ3OmYyZjggPiBmZjAyOjox OmZmMGI6OTQ2ZDogDQo+PiBJQ01QNiwgbmVpZ2hib3Igc29saWNpdGF0aW9uLCB3aG8gaGFz IGZlODA6OjZhMjI6OGUwMDpjODBiOjk0NmQsIA0KPj4gbGVuZ3RoIDMyDQo+PiAxNDo0Mjoz MC41NzM2NTAgSVA2IGZlODA6OjJlMDpiNGZmOmZlNjg6Zjg5NCA+IGZmMDI6OjI6IElDTVA2 LCByb3V0ZXIgDQo+PiBzb2xpY2l0YXRpb24sIGxlbmd0aCAxNg0KPj4gMTQ6NDI6MzEuNTk0 NDc0IElQNiBmZTgwOjoyZTA6YjRmZjpmZTY4OmY4OTQuZGhjcHY2LWNsaWVudCA+IA0KPj4g ZmYwMjo6MToyLmRoY3B2Ni1zZXJ2ZXI6IGRoY3A2IHNvbGljaXQNCj4+IDE0OjQyOjMyLjY5 MDA2MyBJUDYgZmU4MDo6MmUwOmI0ZmY6ZmU2ODpmODk0LmRoY3B2Ni1jbGllbnQgPiANCj4+ IGZmMDI6OjE6Mi5kaGNwdjYtc2VydmVyOiBkaGNwNiBzb2xpY2l0DQo+PiAxNDo0MjozNC41 MDYwMzAgSVA2IGZlODA6OjNhOTQ6ZWRmZjpmZTQ3OmYyZjggPiBmZjAyOjoxOmZmMGI6OTQ2 ZDogDQo+PiBJQ01QNiwgbmVpZ2hib3Igc29saWNpdGF0aW9uLCB3aG8gaGFzIGZlODA6OjZh MjI6OGUwMDpjODBiOjk0NmQsIA0KPj4gbGVuZ3RoIDMyDQo+PiAxNDo0MjozNC41NzQ5MDQg SVA2IGZlODA6OjJlMDpiNGZmOmZlNjg6Zjg5NCA+IGZmMDI6OjI6IElDTVA2LCByb3V0ZXIg DQo+PiBzb2xpY2l0YXRpb24sIGxlbmd0aCAxNg0KPj4gMTQ6NDI6MzQuNzY0MTc2IElQNiBm ZTgwOjoyZTA6YjRmZjpmZTY4OmY4OTQuZGhjcHY2LWNsaWVudCA+IA0KPj4gZmYwMjo6MToy LmRoY3B2Ni1zZXJ2ZXI6IGRoY3A2IHNvbGljaXQNCj4+IDE0OjQyOjM1LjUwMTgxNCBJUDYg ZmU4MDo6M2E5NDplZGZmOmZlNDc6ZjJmOCA+IGZmMDI6OjE6ZmYwYjo5NDZkOiANCj4+IElD TVA2LCBuZWlnaGJvciBzb2xpY2l0YXRpb24sIHdobyBoYXMgZmU4MDo6NmEyMjo4ZTAwOmM4 MGI6OTQ2ZCwgDQo+PiBsZW5ndGggMzINCj4+IDE0OjQyOjM1LjkzNDcxMCBJUDYgMmEwNjo0 ODgwOjQwMDA6OjY4LjUzNDkwID4gDQo+PiAyNjA2OjgzYzA6ODAwMDpmZjAwOmJhMjc6ZWJm ZjpmZTM5OjcwMWQuNDU2NzogRmxhZ3MgW1NdLCBzZXEgDQo+PiA2MDUyNTE4MjMsIHdpbiAx NDYwMCwgb3B0aW9ucyBbbXNzIDE0NDBdLCBsZW5ndGggMA0KPj4gMTQ6NDI6MzYuNTA5NTg4 IElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4gZmYwMjo6MTpmZjBiOjk0NmQ6IA0K Pj4gSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlvbiwgd2hvIGhhcyBmZTgwOjo2YTIyOjhl MDA6YzgwYjo5NDZkLCANCj4+IGxlbmd0aCAzMg0KPj4gMTQ6NDI6MzguNTgwNjI3IElQNiBm ZTgwOjoyZTA6YjRmZjpmZTY4OmY4OTQgPiBmZjAyOjoyOiBJQ01QNiwgcm91dGVyIA0KPj4g c29saWNpdGF0aW9uLCBsZW5ndGggMTYNCj4+IDE0OjQyOjM4LjczMjgxMiBJUDYgZmU4MDo6 MmUwOmI0ZmY6ZmU2ODpmODk0LmRoY3B2Ni1jbGllbnQgPiANCj4+IGZmMDI6OjE6Mi5kaGNw djYtc2VydmVyOiBkaGNwNiBzb2xpY2l0DQo+PiAxNDo0Mjo0MC4zMzc1MTUgSVA2IGZlODA6 OjNhOTQ6ZWRmZjpmZTQ3OmYyZjggPiBmZjAyOjoxOmZmMGI6OTQ2ZDogDQo+PiBJQ01QNiwg bmVpZ2hib3Igc29saWNpdGF0aW9uLCB3aG8gaGFzIGZlODA6OjZhMjI6OGUwMDpjODBiOjk0 NmQsIA0KPj4gbGVuZ3RoIDMyDQo+PiAxNDo0Mjo0MS4zMjE1MDkgSVA2IGZlODA6OjNhOTQ6 ZWRmZjpmZTQ3OmYyZjggPiBmZjAyOjoxOmZmMGI6OTQ2ZDogDQo+PiBJQ01QNiwgbmVpZ2hi b3Igc29saWNpdGF0aW9uLCB3aG8gaGFzIGZlODA6OjZhMjI6OGUwMDpjODBiOjk0NmQsIA0K Pj4gbGVuZ3RoIDMyDQo+PiAxNDo0Mjo0Mi4zMjk3MzcgSVA2IGZlODA6OjNhOTQ6ZWRmZjpm ZTQ3OmYyZjggPiBmZjAyOjoxOmZmMGI6OTQ2ZDogDQo+PiBJQ01QNiwgbmVpZ2hib3Igc29s aWNpdGF0aW9uLCB3aG8gaGFzIGZlODA6OjZhMjI6OGUwMDpjODBiOjk0NmQsIA0KPj4gbGVu Z3RoIDMyDQo+PiAxNDo0Mjo0Mi41OTUwMTEgSVA2IGZlODA6OjJlMDpiNGZmOmZlNjg6Zjg5 NCA+IGZmMDI6OjI6IElDTVA2LCByb3V0ZXIgDQo+PiBzb2xpY2l0YXRpb24sIGxlbmd0aCAx Ng0KPj4gMTQ6NDI6NDQuNzgyNDkyIElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4g ZmYwMjo6MTpmZjBiOjk0NmQ6IA0KPj4gSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlvbiwg d2hvIGhhcyBmZTgwOjo2YTIyOjhlMDA6YzgwYjo5NDZkLCANCj4+IGxlbmd0aCAzMg0KPj4g MTQ6NDI6NDUuNzQ5NTAzIElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4gZmYwMjo6 MTpmZjBiOjk0NmQ6IA0KPj4gSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlvbiwgd2hvIGhh cyBmZTgwOjo2YTIyOjhlMDA6YzgwYjo5NDZkLCANCj4+IGxlbmd0aCAzMg0KPj4gMTQ6NDI6 NDYuNzQ1NTE1IElQNiBmZTgwOjozYTk0OmVkZmY6ZmU0NzpmMmY4ID4gZmYwMjo6MTpmZjBi Ojk0NmQ6IA0KPj4gSUNNUDYsIG5laWdoYm9yIHNvbGljaXRhdGlvbiwgd2hvIGhhcyBmZTgw Ojo2YTIyOjhlMDA6YzgwYjo5NDZkLCANCj4+IGxlbmd0aCAzMg0KPj4gMTQ6NDI6NDcuMTA5 MjY3IElQNiBmZTgwOjoyZTA6YjRmZjpmZTY4OmY4OTQuZGhjcHY2LWNsaWVudCA+IA0KPj4g ZmYwMjo6MToyLmRoY3B2Ni1zZXJ2ZXI6IGRoY3A2IHNvbGljaXQNCj4+IDE0OjQyOjQ4Ljgw OTc0MiBJUDYgZmU4MDo6M2E5NDplZGZmOmZlNDc6ZjJmOCA+IGZmMDI6OjE6ZmYwYjo5NDZk OiANCj4+IElDTVA2LCBuZWlnaGJvciBzb2xpY2l0YXRpb24sIHdobyBoYXMgZmU4MDo6NmEy Mjo4ZTAwOmM4MGI6OTQ2ZCwgDQo+PiBsZW5ndGggMzINCj4+IDE0OjQyOjQ5LjgwNTU3MiBJ UDYgZmU4MDo6M2E5NDplZGZmOmZlNDc6ZjJmOCA+IGZmMDI6OjE6ZmYwYjo5NDZkOiANCj4+ IElDTVA2LCBuZWlnaGJvciBzb2xpY2l0YXRpb24sIHdobyBoYXMgZmU4MDo6NmEyMjo4ZTAw OmM4MGI6OTQ2ZCwgDQo+PiBsZW5ndGggMzINCj4+IDE0OjQyOjUwLjgwMTY5NyBJUDYgZmU4 MDo6M2E5NDplZGZmOmZlNDc6ZjJmOCA+IGZmMDI6OjE6ZmYwYjo5NDZkOiANCj4+IElDTVA2 LCBuZWlnaGJvciBzb2xpY2l0YXRpb24sIHdobyBoYXMgZmU4MDo6NmEyMjo4ZTAwOmM4MGI6 OTQ2ZCwgDQo+PiBsZW5ndGggMzINCj4+DQo+PiAqVGhlIGludGVyZmFjZSBpcyB1cCBhbmQg aXMgcGFzc2luZyBJcDQgdHJhZmZpYy4qDQo+Pg0KPj4gQW5kIGV2ZW4gL21vcmUgb2RkIC9J IGdldCB0aGlzIG9uY2UgaW4gYSB3aGlsZToNCj4+DQo+PiAxNDo0NToyNi42ODg4NTggSVA2 IGVudmlhYmxlLmNlbnN1cy5pbnRlcm5ldC1tZWFzdXJlbWVudC5jb20gDQo+PiA8aHR0cDov L2VudmlhYmxlLmNlbnN1cy5pbnRlcm5ldC1tZWFzdXJlbWVudC5jb20+LjUzNTY1ID4gDQo+ PiAyNjA2OjgzYzA6ODYwMDo6MTBjLjU4MjIyOiBGbGFncyBbU10sIHNlcSAzNjE5ODI2MzQ2 LCB3aW4gMTQ2MDAsIA0KPj4gb3B0aW9ucyBbbXNzIDE0NDBdLCBsZW5ndGggMA0KPj4gMTQ6 NDU6MjYuNjk2ODM0IElQNiBzdHVwZW5kb3VzLmNlbnN1cy5pbnRlcm5ldC1tZWFzdXJlbWVu dC5jb20gDQo+PiA8aHR0cDovL3N0dXBlbmRvdXMuY2Vuc3VzLmludGVybmV0LW1lYXN1cmVt ZW50LmNvbT4uNTMzMjEgPiANCj4+IDI2MDY6ODNjMDo4NjAwOjoxMGMucnNmLTE6IEZsYWdz IFtTXSwgc2VxIDM5NDAxMDI3MDUsIHdpbiAxNDYwMCwgDQo+PiBvcHRpb25zIFttc3MgMTQ0 MF0sIGxlbmd0aCAwDQo+Pg0KPj4gVGhlIHByZWZpeCBJUyBwYXJ0IG9mIHRoZSBwcm92aWRl cidzIGRlbGVnYXRpb24gYnV0IEkgaGF2ZSBubyBJUHY2IA0KPj4gYWRkcmVzcyBzbyBJIGhh dmUgL2Fic29sdXRlbHkgbm8gaWRlYSAvaG93IHRoZXkgdGhpbmsgcm91dGluZyB0aGF0IHRv IA0KPj4gbWUgaXMgcmVhc29uYWJsZSAtLSBidXQgdGhleSBkby4NCj4+DQo+DQo+IEZvciB1 bndhbnRlZCBJUHY2IHBhY2tldHMsIHRoZSBuZXQgc3RhY2sgc2hvdWxkIGRyb3AgdGhlbSBz aWxlbnRseSwgDQo+IGFuZCBmdW5kYW1lbnRhbGx5IHlvdcKgY2FuIE5PVCBwcmV2ZW50IHlv dXIgcHJvdmlkZXIgZnJvbSBzZW5kaW5nIHRoZW0uIA0KPiDCoEFsc28gYmUgYXdhcmUgdGhh dCB0Y3BkdW1wKDEpIGJ5IGRlZmF1bHQgdHVybnMgdGhlIGludGVyZmFjZSBpbnRvIA0KPiBw cm9taXNjIG1vZGUuDQoNCkkgdW5kZXJzdGFuZCB0aGF0LCBidXQgdGhlaXIgaW5mcmFzdHJ1 Y3R1cmUgc2hvdWxkIG5vdCBiZSBzZW5kaW5nIHRoZW0uwqAgDQpJdCBpcy7CoCBCdXQgaXRz IG9ubHkgYSBmZXcgcGFja2V0cyBoZXJlIGFuZCB0aGVyZSwgd2hpY2ggaW1wbGllcyANCnJh dGhlci1zdHJvbmdseSBpdCB3YXMgYWltZWQgYXQgdGhlIGZvcm1lciAodmFsaWQpIGFkZHJl c3MgSSBoYWQgYW5kIG5vdCANCnNvbWV0aGluZyBlbHNlIGluIHRoZWlyIGluZnJhc3RydWN0 dXJlIC0tIEkgdGhpbmsuIFRoZSBwcmVmaXggaXMgY29ycmVjdCANCihhdCBsZWFzdCkgYnV0 IEkgZG9uJ3Qga25vdyB3aGF0IG15IGVuZCBhY3R1YWxseSBnb3QgZm9yIHRoZSBmaW5hbCAN Cm9jdGV0cyBzaW5jZSBpdCB3YXMgYmVmb3JlIEkgdHVybmVkIHRoZSBwb3dlciBvZmYuDQoN ClRoZXkgaGFuZCBvdXQgYSAvNTYgZm9yIElQdjYuDQoNCj4+IFRoZXkncmUgcG9pbnRpbmcg YXQgIm15IGdlYXIiIGFzIEknbSBub3QgdXNpbmcgdGhlaXIgcm91dGVyLsKgIFVoLCANCj4+ IHllYWgsIG9rLsKgIEl0cyBub3QgaGFyZHdhcmUgLS0gdGhlIHNhbWUgdGhpbmcgaGFwcGVu cyBvbiBhIHBjRW5naW5lcyANCj4+IGJveCB3aXRoIHR3byAiaWdiIiBpbnRlcmZhY2VzLCBh ICJjdWJlIiBib3ggdGhhdCBoYXMgdHdvICJyZSIgDQo+PiBpbnRlcmZhY2VzIGFuZCBteSBj dXJyZW50IGJveCAod2hpY2ggSSB3YW50IHRvIGtlZXAgdXNpbmcpIHRoYXQgaGFzIA0KPj4g dHdvIFNGUCsgaW50ZXJmYWNlcyB0aGF0IGNvbWUgdXAgb24gdGhlICJpeCIgZHJpdmVyLiAv QWxsIGJlaGF2ZSANCj4+IGV4YWN0bHkgdGhlIHNhbWUgd2F5Li8NCj4+DQo+PiBJZiBJIGNh bGwgYW5kIGJpdGNoIHRoZXkgcmVzZXQgL2V2ZXJ5dGhpbmcgL29uIHRoZWlyIGVuZCBhbmQg aXQgY29tZXMgDQo+PiB1cCAtLSBvbmNlIGFuZCBmcm9tIHRoZXJlIGl0cyBzdGFibGUuwqAg QnV0IGlmIEkgdGFrZSBhIHBvd2VyIGhpdCANCj4+IGJleW9uZCBteSBVUFMncyBjYXBhY2l0 eSwgd2VsbCwgaXQnbGwgaGFwcGVuIGFnYWluLg0KPj4NCj4+IEkgc2VlIGFic29sdXRlbHkg bm90aGluZyBpbiB0Y3BkdW1wIHRoYXQgaW1wbGllcyB0aGVyZSdzIGEgcHJvYmxlbSwgDQo+ PiBvdGhlciB0aGFuIHRoYXQgd2hlbiB0aGlzIGhhcHBlbnMgdGhleSBuZXZlciBhbnN3ZXIg L2FueXRoaW5nIC9JIHNlbmQgDQo+PiB0aGVtLsKgIFRoZXkgY2xhaW0gdGhlaXIgZGhjcDYg c2VydmVyIGhhcyBsb2NrZWQgb3V0IG15IE1BQyBkdWUgdG8gDQo+PiAiaW52YWxpZCIgdGhp bmdzIHRoZXkncmUgc2VlaW5nIGZyb20gbWUuDQo+Pg0KPiBEbyAoIGNhbiApIHRoZXkgcHJv dmlkZSB0aGUgZGV0YWlscyBvZiB0aGUgImludmFsaWQiIHRoaW5ncyA/IEknbSANCj4gcmVj ZW50bHnCoG92ZXJoYXVsaW5nIHRoZSBhdHRhY2hpbmcgcHJvY2VzcyBvZiBpbnRlcmZhY2Vz LiBGb3IgZXRoZXJuZXQgDQo+IGludGVyZmFjZXMsIHRoZXJlJ3JlIHJhcmUgcmFjZXMgdGhh dCB0aGUgZHJpdmVyIHNlZSB1bi1pbml0aWFsaXplZCANCj4gbGluay1sYXllciBhZGRyZXNz ICggMDA6MDA6MDA6MDA6MDA6MDAgKSBvciBpbmNvbXBsZXRlIGxpbmstbGF5ZXIgDQo+IGFk ZHJlc3MgKCBvY2N1cnMgd2hlbiByZW5hbWluZyB0aGUgaW50ZXJmYWNlICkgLiBTbyBJJ20g Y3VyaW91cyB3aGF0IA0KPiAiaW52YWxpZCIgdGhpbmdzIHlvdXIgcHJvdmlkZXIgc2Vlcy4N Cj4NCldlbGwgbm90IHNvIHN1cmUgb24gdGhhdC7CoCBJJ3ZlIGFza2VkLCBhbmQgd2lsbCBj b250aW51ZSB0bywgYnV0IHRoZXkgDQpoYXZlbid0IHNhaWQgZXhhY3RseSAqX3doYXRfKsKg Z290IHRoZWlyIGVuZCBiaWctbWFkLsKgIEJ1dCB3aGF0ZXZlciBpdCBpcyANCnRoZXkncmUg Z2V0dGluZyBpdCBtYWtlcyB0aGVpciBJUHY2IERIQ1Agc2VydmVyIGFuZ3J5IGVub3VnaCB0 aGF0IGl0IA0KbG9ja3MgbXkgY29ubmVjdGlvbiBvdXQgb25jZSB0aGV5IHNlZSBpdC7CoCBU byBjbGVhciBpdCB0aGV5IGNsZWFyIHRoZSANCnByb3Zpc2lvbmluZyB3aGljaCByZXNldHMg Qk9USCBJUHY0IGFuZCBWNiBhc3NpZ25tZW50cyBzbyB3aGF0ZXZlciANCnRoZXkncmUgY2xl YXJpbmcgaXQgbG9va3MgdG8gbWUgbGlrZSB0aGV5J3JlIHJlc2V0dGluZyBhbGwgdGhlaXIg DQpwcm92aXNpb25pbmcgZm9yIG15IHNlcnZpY2UsIGluY2x1ZGluZyAocHJvYmFibHkpIHRo ZSBPTlQgY29uZmlndXJhdGlvbiANCnRoYXQgdGhleSBzZW5kIGRvd24gdG8gdGhlaXIgYm94 IGhlcmUuDQoNCkkgaGF2ZSBhIHRoZW9yeSBob3dldmVyIHdoaWNoIG1pZ2h0IGJlIGludm9s dmVkIGFmdGVyIGdvaW5nIGJhY2sgdGhyb3VnaCANCnRoZSBsYXN0IHRpbWUgLS3CoCBJIGhh ZCBub3Qgc2h1dCBvZmYgaXB2NGxsOyBpZiB0aGUgaW50ZXJmYWNlIGNvbWVzIHVwLCANCnRo ZWlyIERIQ1Agc2VydmVyIGlzIHNsb3csIG15IGVuZCBzZW5kcyBhIHJlcXVlc3QgYW5kIGdl dHMgbm8gaW1tZWRpYXRlIA0KcmVwbHkgZGhjcGNkIHdpbGwgdHJ5IHRvIGNvbmZpZ3VyZSBh IGxpbmstbG9jYWwgYWRkcmVzcyBvbiB0aGF0IA0KaW50ZXJmYWNlIC9hbmQgdGhlbiBhdHRl bXB0IHRvIEFSUCB0aGUgYWRkcmVzcyBhY3Jvc3MgdGhhdCBpbnRlcmZhY2UgdG8gDQpjb25m aXJtIGl0cyBub3QgaW4gdXNlLi8gSWYgdGhleSBzZWUgKl90aGF0XyosIHdoaWNoIGlzIG9m IGNvdXJzZSANCm5vbi1yb3V0ZWFibGUgYW5kIHRoZWlyIHN5c3RlbSBzYXlzICJvaCBubyB5 b3UgZG9uJ3QhIiBhbmQgaW5zdGVhZCBvZiANCmp1c3QgdGhyb3dpbmcgaXQgb3V0IHRoZXkg bG9jayBvdXQgdGhhdCBzb3VyY2UgYXMgYXR0ZW1wdGVkIGdhbWUtcGxheWluZyANCndlbGwu Li4uIHRoYXQgY291bGQgY2VydGFpbmx5IGJlIGl0LsKgIFRoZW4gdGhlIHNvbGljaXRhdGlv biBuZXZlciBnZXRzIA0KYW55d2hlcmUgYmVjYXVzZSB0aGUgYmxhY2tiYWxsIGlzIG9uIHRo ZSBPTlQncyBhZGRyZXNzIGFzIHRoZSAicm9ndWUiIA0Kc291cmNlIChpdHMgYSBGVFRIIHNl dHVwIHdpdGggb3B0aWNhbCBzcGxpdHRlcnMgYW5kIGFuIE9OVCBhdCBteSANCnByZW1pc2Vz IHRoYXQgZmVlZHMgYSBzdGFuZGFyZCBnaWdhYml0IGV0aGVybmV0IG91dCB0aGUgYmFjayBv ZiBpdCB0byBteSANCmdlYXIuKQ0KDQpJJ3ZlIHR1cm5lZCB0aGF0IG9wdGlvbiBvZmYgKGFu ZCBzZXQgbm9hcnApIGFuZCB3aWxsIHNlZSBpZiBpdCBoYXBwZW5zIA0KYWdhaW4gYnV0IHNp bmNlIHRoZXkncmUgcGxheWluZyBhIGJpdCBjb3kgd2l0aCBtZSBJIGFtIGxvYXRoZSB0byBq dXN0IA0KeWFuayB0aGUgY29yZCBvdXQgb2YgdGhlaXIgT05UIGFuZCByZXNldCBpdCB3aXRo b3V0IGtub3dpbmcgdGhhdCB0aGlzIA0KTUlHSFQgYmUgaW52b2x2ZWQgbGVzdCBJIGZpbmQg bXlzZWxmIHdpdGggbm8gSVB2NiBhZ2FpbiAoYW5kIGhhdmUgdG8gZ28gDQp0aHJvdWdoIHRo ZWlyIGNhbGwgY2VudGVyIGFuZCBzdWNoLikgT2YgY291cnNlIHRoYXQgd2lsbCBldmVudHVh bGx5IA0KaGFwcGVuIGJlY2F1c2UgZXZlbnR1YWxseSBJJ3ZlIGhhdmUgdG8gdGFrZSB0aGlu Z3MgZG93biBvciB0aGVyZSB3aWxsIGJlIA0KYW4gZXh0ZW5kZWQgcG93ZXIgb3V0YWdlIHRo YXQgZXhjZWVkcyB3aGF0IG15IFVQUyBjYW4gaG9sZCB0aGluZ3MgdXAgZm9yIA0KKG9yIGEg ZmliZXIgY3V0LCBvciBwcm9ibGVtIG9uIHRoZWlyIGVuZCB0aGF0IGNhdXNlcyBhIHJlc2V0 IG9uIHRoZSANCmNvbm5lY3Rpb24sIGV0Yy4pDQoNCkkgdXNlZCB0byBiZSBvbiBjYWJsZSBz ZXJ2aWNlIGFuZCBoYWQgbm8gcHJvYmxlbXMgd2l0aCB0aGlzOyB0aGUgY2FibGUgDQpjb21w YW5pZXMgKHR3byBvZiB0aGVtIG92ZXIgdGhlIHllYXJzIHdpdGggdmFyaW91cyBoYXJkd2Fy ZSBidXQgdGhpcyANCnNhbWUgYmFzaWMgc29mdHdhcmUgbG9hZCwgYWx0aG91Z2ggaXRzIGJl ZW4gdXBkYXRlZCBzZXZlcmFsIHRpbWVzIG92ZXIgDQp0aGUgeWVhcnMgYXMgRnJlZUJTRCBo YXMgYWR2YW5jZWQpIHdlcmUgZWl0aGVyIGZhc3QgZW5vdWdoIHRoYXQgaXQgbmV2ZXIgDQp0 cmllZCBmb3IgbGluay1sb2NhbCBvciBkaWRuJ3QgY2FyZSAtLSBhbmQgdGhlIGRlZmF1bHQg b2YgZGhjcGNkIElTIHRvIA0KdHJ5IHRvIHVzZSBpdCB0ZW1wb3JhcmlseSBhdCBsZWFzdCBp ZiB0aGUgREhDUCBzZXJ2ZXIgZG9lc24ndCByZXBseSANCnJpZ2h0IGF3YXkuDQoNCj4NCj4g QmVzdCByZWdhcmRzLA0KPiBaaGVubGVpDQo+DQotLSANCkthcmwgRGVubmluZ2VyDQprYXJs QGRlbm5pbmdlci5uZXQNCi9UaGUgTWFya2V0IFRpY2tlci8NCi9bUy9NSU1FIGVuY3J5cHRl ZCBlbWFpbCBwcmVmZXJyZWRdLw0K --------------IYZ4E5kCHDr100xZzdAmb6o1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On 6/18/2025 21:29, Zhenlei Huang wrote:

On Jun 19, 2025, at 6:00 AM, Karl Denninger <= ;ka= rl@denninger.net> wrote:

Resurrecting an older thread....


Can you please point me to the thread ? I'd like to gather more context from that.
It was under this title; should be in the archives from June of last year.

I have Kub Fiber here and have run into an interesting problem I've not seen on anything else (this same config, absent dhcpcd but on the stock FreeBSD config, worked fine on both Cox and Spectrum without changes.)

On a=C2=A0first u= se=C2=A0dhcpcd gets both IPv4 and IPv6 addresses,=C2=A0but= =C2=A0sometimes the IPv4 side fails to be able to ARP (!!!!) the other end.=C2=A0 If I drop the interface (ifconfig ix0 down; ifconfig ix0 up) it=C2=A0never=C2=A0fai= ls on the second try.=C2=A0 If it fails on the first try doing a "a= rp -d" on the other end=C2=A0resolves nothing;= =C2=A0only recycling the interface does.=C2=A0 Once it comes up its = 100% stable and=C2=A0never=C2=A0drops it.=C2= =A0 Obviously with no arp for the other end you get nothing (in either direction.)

That I can handle (but its damned annoying) with a script that checks connection to the other side and, if it can't get anything, does the above.

The=C2=A0more serious=C2=A0= problem is with Ipv6.=C2=A0 If I shut down my gear (and=C2=A0the company's ONT) and th= en turn the power back on (say, because I need to work on the UPS in my rack!)=C2=A0it will come back= up on IpV4 but never gets an answer to the SOLICIT response.=C2=A0=C2=A0It also never sees anything fr= om the neighbor request!

In other words ("tcpdump -i ip6 ix0"):

14:42:25.301564 IP6 fe80::3a94:edff:fe47:f2f8= > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:30.573650 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:31.594474 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:32.690063 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:34.506030 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:34.574904 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:34.764176 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:35.501814 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:35.934710 IP6 2a06:4880:4000::68.53490 > 2606:83c0:8000:ff00:ba27:ebff:fe39:701d.4567: Flags [S], seq 605251823, win 14600, options [mss 1440], length 0 14:42:36.509588 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:38.580627 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:38.732812 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:40.337515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:41.321509 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.329737 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.595011 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router solicitation, length 16
14:42:44.782492 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:45.749503 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:46.745515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:47.109267 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
14:42:48.809742 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:49.805572 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:50.801697 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32

The interface is up and is pass= ing Ip4 traffic.

And even=C2=A0more odd=C2=A0I get this once in a while:

14:45:26.688858 IP6 enviable.census.int= ernet-measurement.com.53565 > 2606:83c0:8600::10c.58222: Flags [S], seq 3619826346, win 14600, options [mss 1440], length 0
14:45:26.696834 IP6 stupendous.census.internet-mea= surement.com.53321 > 2606:83c0:8600::10c.rsf-1: Flags [S], seq 3940102705, win 14600, options [mss 1440], length 0

The prefix IS part of the provider's delegation but I have no IPv6 address so I have=C2=A0absolutely no idea=C2=A0how they think r= outing that to me is reasonable -- but they do.


For unwanted IPv6 packets, the net stack should drop them silently, and fundamentally=C2=A0you=C2=A0can NOT prevent your provider from= sending them. =C2=A0Also be aware that tcpdump(1) by default tu= rns the interface into promisc mode.=C2=A0

I understand that, but their infrastructure should not be sending them.=C2=A0 It is.=C2=A0 But its only a few packets here and there,= which implies rather-strongly it was aimed at the former (valid) address I had and not something else in their infrastructure -- I think.=C2= =A0 The prefix is correct (at least) but I don't know what my end actually got for the final octets since it was before I turned the power off.

They hand out a /56 for IPv6.

They're pointing at "my gear" as I'm not usin= g their router.=C2=A0 Uh, yeah, ok.=C2=A0 Its not hardware = -- the same thing happens on a pcEngines box with two "igb" interfaces, a "cube" box that has two "re" interfaces and my current box (which I want to keep using) that has two SFP+ interfaces that come up on the "ix" driver.=C2=A0= =C2=A0All behave exactly the same way.

If I call and bitch they reset=C2=A0everything=C2=A0on their end and it comes up -- once and from there its stable.=C2=A0 But if I take a power hit beyond my UPS's capacity, well, it'll happen again.

I see absolutely nothing in tcpdump that implies there's a problem, other than that when this happens they never answer anything=C2=A0I send them.=C2=A0 They claim their dhcp6 server has locked= out my MAC due to "invalid" things they're seeing from me.

Do ( can ) they provide the details of the "invalid" things ? I'm recently=C2=A0overhauling the attaching process of interfaces. For ethernet interfaces, there're rare races that the driver see un-initialized link-layer address ( 00:00:00:00:00:00 ) or incomplete=C2=A0link-layer address ( occurs when renaming the interface )=C2=A0. So I'm curious what "invalid" thing= s your provider sees.

Well not so sure on that.=C2=A0 I've asked, and will continue to, = but they haven't said exactly what=C2=A0got their end big-mad.=C2=A0 But whatever it is they're getting it makes their IP= v6 DHCP server angry enough that it locks my connection out once they see it.=C2=A0 To clear it they clear the provisioning which resets = BOTH IPv4 and V6 assignments so whatever they're clearing it looks to me like they're resetting all their provisioning for my service, including (probably) the ONT configuration that they send down to their box here.

I have a theory however which might be involved after going back through the last time --=C2=A0 I had not shut off ipv4ll; if the interface comes up, their DHCP server is slow, my end sends a request and gets no immediate reply dhcpcd will try to configure a link-local address on that interface=C2=A0and then attempt to AR= P the address across that interface to confirm its not in use.=C2= =A0 If they see=C2=A0that, which is of course non-routeab= le and their system says "oh no you don't!" and instead of just throwing it out they lock out that source as attempted game-playing well.... that could certainly be it.=C2=A0 Then the solicitation never gets anywhere because the blackball is on the ONT's address as the "rogue" source (its a FTTH setup with optical splitters and an ONT at my premises that feeds a standard gigabit ethernet out the back of it to my gear.)

I've turned that option off (and set noarp) and will see if it happens again but since they're playing a bit coy with me I am loathe to just yank the cord out of their ONT and reset it without knowing that this MIGHT be involved lest I find myself with no IPv6 again (and have to go through their call center and such.)=C2=A0= Of course that will eventually happen because eventually I've have to take things down or there will be an extended power outage that exceeds what my UPS can hold things up for (or a fiber cut, or problem on their end that causes a reset on the connection, etc.)

I used to be on cable service and had no problems with this; the cable companies (two of them over the years with various hardware but this same basic software load, although its been updated several times over the years as FreeBSD has advanced) were either fast enough that it never tried for link-local or didn't care -- and the default of dhcpcd IS to try to use it temporarily at least if the DHCP server doesn't reply right away.


Best regards,
Zhenlei

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------IYZ4E5kCHDr100xZzdAmb6o1-- --------------ms080502070608050402020104 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwNjE5MDE0NTAyWjBPBgkqhkiG9w0BCQQxQgRAwt9V+9kphtCj vtwmFBymuZ6FWd3IcX4/+LvIjyGICX/JyyhSiUgsXd1t/RhsKTLNHdnJQASLChD6mDeF7cB0 MDCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICADRbuwB33W/sF9gY UO8g/K/LI84Vyv6yG1j911bKF8na6iJKDxwVfTcnVwBJ4hhLicg8sDijNWHmvzWUZAbiEwiB ZuLN4YwW8rHwe458ORsDP2tqXErp6s4SxY2wcOPgud+til/7wyUjKJs5j1K1iIyDoX+EE2j8 n+NkQd2nrgx6p/2lqL7MBI3xrTrQmJInfhczvs4t+rcN/zY+NEWQ7+ZYt+jEDtLtpy4DUAaN 7RdnxU9vJKZNcNIv1XF5mMSVD9GVkV7LKf7hDgiQfHNQGPME1mKdUvhEX6IG+fLuoQgDtZmd zdzsO2663qvdjASxpPLIjdxMj6bxpTyakGdiIQFzpsAJ/nC09Ais3xR5+6xSpSxa1D0p8msq Lh9cMBbXiC/g65lwTAro1wgztLlC9Uqu/J02sp0+5Fg+2bR1ZHW9oMpkq5aoSbVOuW/t7pJ4 nu7fz1BWMhFXNqbG1gT3KTvThWSvO6PdTJd2P7TVnxea+U0KHKHqIannge+yt0Xw6iKu4hbU qfP/d9T+5b/jUNiXSPQY8u2gcLgJi8bOjWrrxSkFMpC25EoCErvnkrp7erZ3CEfuOcpxDWaZ zzqCGj3ZQHH+H3dECjN78h6EU0XZRulEeAnEZEmmx2QjYWwH9qkJT4K537uSLn7sg0MZFxAL Fb89JtUk6+dRN02wFu5RAAAAAAAA --------------ms080502070608050402020104-- From nobody Thu Jun 19 08:21:03 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bND8V5k0Sz5yMGy for ; Thu, 19 Jun 2025 08:21:14 +0000 (UTC) (envelope-from SRS0=ghkO=ZC=klop.ws=ronald-lists@realworks.nl) Received: from smtp-relay-int-backup.realworks.nl (smtp-relay-int-backup.realworks.nl [87.255.56.188]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bND8V0B8zz3nCs for ; Thu, 19 Jun 2025 08:21:13 +0000 (UTC) (envelope-from SRS0=ghkO=ZC=klop.ws=ronald-lists@realworks.nl) Authentication-Results: mx1.freebsd.org; none Received: from smtp-relay-int-backup.realworks.nl (crmlive3.colo2.realworks.nl [10.2.52.23]) by mailrelayint1.colo2.realworks.nl (Postfix) with ESMTP id 4bND8J2njZz1Fq; Thu, 19 Jun 2025 10:21:04 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=klop.ws; s=rw2; t=1750321264; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=TszEFAgry4dw5M5JY28F1il3tICdPGnEoevRKK0t21A=; b=WTVFESYkI9BozG0DcW0HzCUDIHcoxUx4F6Gq9wR+P2uecWEqldZe06uPMU8YHPstF8efSV APGy1B8AOv5OXKGW2hW6BtKrTIMtyGaiMfyTeuyAAP23FUoFfNa55hiXlQyEGgo2V/YMIY quoGQJ30VaC79wBwLnV3RTEUgDbJq+qK80MjdJ7liK+tzlxJZRqlOVOH++m9Hszi9jthnc 9CRpQGIqF47LienpFPX+vrAnbUZrko2XMm5dujaSFhoWp299etWpeyX9qQpoOGlRLSAiiI 8/qlalUVT0Sit4CY3I3Ku0wLzJSpMNn1fLYdTc420KANEOwYH/KObYjlMgCyBA== Received: from crmlive3.colo2.realworks.nl (localhost [127.0.0.1]) by crmlive3.colo2.realworks.nl (Postfix) with ESMTP id 0D6DF2A02EA; Thu, 19 Jun 2025 10:21:03 +0200 (CEST) Date: Thu, 19 Jun 2025 10:21:03 +0200 (CEST) From: Ronald Klop To: Karl Denninger Cc: freebsd-net@freebsd.org Message-ID: <1188806329.62817.1750321263908@localhost> In-Reply-To: References: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> Subject: Re: dhcpcd(8) into FreeBSD base List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_62812_84339164.1750321263682" X-Mailer: Realworks (752.24) X-Originating-Host: from (83-81-212-149.cable.dynamic.v4.ziggo.nl [83.81.212.149]) by crmlive3 [10.2.52.23] with HTTP; Thu, 19 Jun 2025 10:21:03 +0200 Importance: Normal X-Priority: 3 (Normal) X-Originating-User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:139.0) Gecko/20100101 Firefox/139.0 X-Rspamd-Queue-Id: 4bND8V0B8zz3nCs X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:38930, ipnet:87.255.32.0/19, country:NL] ------=_Part_62812_84339164.1750321263682 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hi, I don't know the details about your setup, but I tried dhcpcd in my network= last few months and I encountered that it: - runs fine in a 14.X jail on a 14.X machine (RPI3B) for both IP4 and IP6 = =F0=9F=91=8D - it does not work well on a 14.X jail on a 15.x machines. (RPI4) The symptoms look a lot like what you describe. Sometimes it got an address= and a day later it was gone again. Restarting sometimes helped, often didn= 't change anything. Up to the point that I started reading to code of dhcpcd and encountered th= at it writes a line in the log about getting a lease and the next statement= was sending a packet out on the network and I never see that packet in tcp= dump. Anyway on the RPI3 I still use it. On the RPI4 I went back to dhclient + SL= AAC after I put a lot of time in tcpdumping and testing. Maybe it is just t= hat 14 userland doesn't match enough with 15 kernel to do BPF/dhcp. But tha= n again.... with dhclient it works fine. I didn't run dhcpcd yet on the host OS yet as I was first testing it in the= VNET jails. Just my 2 cents. Regards, Ronald. =20 Van: Karl Denninger Datum:donderdag, 19 juni 2025 00:00 Aan:freebsd-net@freebsd.org Onderwerp:dhcpcd(8) into FreeBSD base >=20 > Resurrecting an older thread.... >=20 > I have Kub Fiber here and have run into an interesting problem I've not s= een on anything else (this same config, absent dhcpcd but on the stock Free= BSD config, worked fine on both Cox and Spectrum without changes.) >=20 > On a first use dhcpcd gets both IPv4 and IPv6 addresses, but sometimes th= e IPv4 side fails to be able to ARP (!!!!) the other end. If I drop the in= terface (ifconfig ix0 down; ifconfig ix0 up) it never fails on the second t= ry. If it fails on the first try doing a "arp -d" on the other end resolve= s nothing; only recycling the interface does. Once it comes up its 100% st= able and never drops it. Obviously with no arp for the other end you get n= othing (in either direction.) >=20 > That I can handle (but its damned annoying) with a script that checks con= nection to the other side and, if it can't get anything, does the above. >=20 > The more serious problem is with Ipv6. If I shut down my gear (and the c= ompany's ONT) and then turn the power back on (say, because I need to work = on the UPS in my rack!) it will come back up on IpV4 but never gets an answ= er to the SOLICIT response. It also never sees anything from the neighbor = request! >=20 > In other words ("tcpdump -i ip6 ix0"): >=20 > 14:42:25.301564 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:30.573650 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router sol= icitation, length 16 > 14:42:31.594474 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dh= cpv6-server: dhcp6 solicit > 14:42:32.690063 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dh= cpv6-server: dhcp6 solicit > 14:42:34.506030 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:34.574904 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router sol= icitation, length 16 > 14:42:34.764176 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dh= cpv6-server: dhcp6 solicit > 14:42:35.501814 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:35.934710 IP6 2a06:4880:4000::68.53490 > 2606:83c0:8000:ff00:ba27:e= bff:fe39:701d.4567: Flags [S], seq 605251823, win 14600, options [mss 1440]= , length 0 > 14:42:36.509588 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:38.580627 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router sol= icitation, length 16 > 14:42:38.732812 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dh= cpv6-server: dhcp6 solicit > 14:42:40.337515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:41.321509 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:42.329737 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:42.595011 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router sol= icitation, length 16 > 14:42:44.782492 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:45.749503 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:46.745515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:47.109267 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.dh= cpv6-server: dhcp6 solicit > 14:42:48.809742 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:49.805572 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 > 14:42:50.801697 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6,= neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 >=20 > The interface is up and is passing Ip4 traffic. >=20 > And even more odd I get this once in a while: >=20 > 14:45:26.688858 IP6 enviable.census.internet-measurement.com.53565 > 2606= :83c0:8600::10c.58222: Flags [S], seq 3619826346, win 14600, options [mss 1= 440], length 0 > 14:45:26.696834 IP6 stupendous.census.internet-measurement.com.53321 > 26= 06:83c0:8600::10c.rsf-1: Flags [S], seq 3940102705, win 14600, options [mss= 1440], length 0 >=20 > The prefix IS part of the provider's delegation but I have no IPv6 addres= s so I have absolutely no idea how they think routing that to me is reasona= ble -- but they do. >=20 > They're pointing at "my gear" as I'm not using their router. Uh, yeah, o= k. Its not hardware -- the same thing happens on a pcEngines box with two = "igb" interfaces, a "cube" box that has two "re" interfaces and my current = box (which I want to keep using) that has two SFP+ interfaces that come up = on the "ix" driver. All behave exactly the same way. >=20 > If I call and bitch they reset everything on their end and it comes up --= once and from there its stable. But if I take a power hit beyond my UPS's= capacity, well, it'll happen again. >=20 > I see absolutely nothing in tcpdump that implies there's a problem, other= than that when this happens they never answer anything I send them. They = claim their dhcp6 server has locked out my MAC due to "invalid" things they= 're seeing from me. Well, it can't be coming from the inside devices becau= se (1) there's no route until IPv6 comes up except for the link-local, whic= h I verify is in fact there but there is no default route until they send i= t and I receive it and therefore its ridiculously implausible any inside de= vice with a "stale" IPv6 address is sending, and everything in the rack (th= is last time at least) went down with the power and all that gets its IPv6 = by SLACC -- so until it gets a delegation it obviously didn't have any. >=20 > I'm trying to get their engineering people on the line to get a packet ca= pture while I power cycle and see exactly why they're getting big-mad but m= y suspicion is that their ONT is in some way obtaining and forwarding thing= s before it negotiates fully -- which of course it shouldn't, but.....=20 >=20 > Any ideas here? Once it comes up its completely stable, but obviously a = power loss while I'm not around is going to be a pain in the neck. One thi= ng I've contemplated is sticking a delay in the rc script for dhcpcd so it = doesn't start for a bit after a boot, which perhaps gives the port time to = negotiate. Since it does the same thing with an igb, re, and ix port (with= a 1G SFP transceiver in it) I assume the issue has nothing to do per se wi= th negotiation, but somehow their end is getting "big mad" with me when it = comes to IPv6 delegations and once it does it never clears it on its own. >=20 > Putting this in freebsd-net rather than directly to Roy because I see the= same behavior using the "stock" dhcp6c client...... >=20 > On 6/7/2024 09:12, Roy Marples wrote: >>=20 >> Hi Ed >>=20 >> ---- On Thu, 06 Jun 2024 02:48:36 +0100 Ed Maste wrote ---=20 >> > On Sun, 7 Aug 2022 at 01:32, Ben Woods woodsb02@freebsd.org> wrote: >> > In the previous threads some objections were raised about dhcpcd's >> > lack of sandboxing (Capsicum / privilege separation), which has since >> > been addressed. >> >=20 >> > I would like to start building and installing dhcpcd by default so >> > that it is available for testing and experimentation. I do not intend >> > to replace dhclent or rtsold, at least without more information, test >> > results, and consensus. >>=20 >> That's nice news, thanks for carrying the torch here :) >>=20 >>=20 >=20 > -- > Karl Denninger > karl@denninger.net > The Market Ticker > [S/MIME encrypted email preferred] > =20 =20 ------=_Part_62812_84339164.1750321263682 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi,

I don't know the details about your setup, but I tried dhcpcd in my network= last few months and I encountered that it:

- runs fine in a 14.X jail on a 14.X machine (RPI3B) for both IP4 and IP6 = =F0=9F=91=8D
- it does not work well on a 14.X jail on a 15.x machines. (RPI4)

The symptoms look a lot like what you describe. Sometimes it got an address= and a day later it was gone again. Restarting sometimes helped, often didn= 't change anything.
Up to the point that I started reading to code of dhcpcd and encountered th= at it writes a line in the log about getting a lease and the next statement= was sending a packet out on the network and I never see that packet in tcp= dump.

Anyway on the RPI3 I still use it. On the RPI4 I went back to dhclient + SL= AAC after I put a lot of time in tcpdumping and testing. Maybe it is just t= hat 14 userland doesn't match enough with 15 kernel to do BPF/dhcp. But tha= n again.... with dhclient it works fine.

I didn't run dhcpcd yet on the host OS yet as I was first testing it in the= VNET jails.

Just my 2 cents.

Regards,
Ronald.

 

Van: Karl Denninger <karl@denninger.net>
Datum:donderdag, 19 juni 2025 00:00
Aan:freebsd-net@freebsd.org
Onderwerp:dhcpcd(8) into FreeBSD base

Resurrecting an older thread....

I have Kub Fiber here and have run into an interesting problem I've not = seen on anything else (this same config, absent dhcpcd but on the stock Fre= eBSD config, worked fine on both Cox and Spectrum without changes.)

On a first use dhcpcd gets both IPv4 and IPv6 ad= dresses, but sometimes the IPv4 side fails to be able to A= RP (!!!!) the other end.  If I drop the interface (ifconfig ix0 down; = ifconfig ix0 up) it never fails on the second try.  I= f it fails on the first try doing a "arp -d" on the other end resol= ves nothing; only recycling the interface does.  Once it come= s up its 100% stable and never drops it.  Obviously w= ith no arp for the other end you get nothing (in either direction.)

That I can handle (but its damned annoying) with a script that checks co= nnection to the other side and, if it can't get anything, does the above.

The more serious problem is with Ipv6.  If I shut = down my gear (and the company's ONT) and then turn the p= ower back on (say, because I need to work on the UPS in my rack!) i= t will come back up on IpV4 but never gets an answer to the SOLICIT respons= e.  It also never sees anything from the neighbor request!

In other words ("tcpdump -i ip6 ix0"):

14:42:25.301564 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: IC= MP6, neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32 14:42:30.573650 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router so= licitation, length 16
14:42:31.594474 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.d= hcpv6-server: dhcp6 solicit
14:42:32.690063 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.d= hcpv6-server: dhcp6 solicit
14:42:34.506030 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:34.574904 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router so= licitation, length 16
14:42:34.764176 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.d= hcpv6-server: dhcp6 solicit
14:42:35.501814 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:35.934710 IP6 2a06:4880:4000::68.53490 > 2606:83c0:8000:ff00:ba27:= ebff:fe39:701d.4567: Flags [S], seq 605251823, win 14600, options [mss 1440= ], length 0
14:42:36.509588 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:38.580627 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router so= licitation, length 16
14:42:38.732812 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.d= hcpv6-server: dhcp6 solicit
14:42:40.337515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:41.321509 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.329737 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:42.595011 IP6 fe80::2e0:b4ff:fe68:f894 > ff02::2: ICMP6, router so= licitation, length 16
14:42:44.782492 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:45.749503 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:46.745515 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:47.109267 IP6 fe80::2e0:b4ff:fe68:f894.dhcpv6-client > ff02::1:2.d= hcpv6-server: dhcp6 solicit
14:42:48.809742 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:49.805572 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32
14:42:50.801697 IP6 fe80::3a94:edff:fe47:f2f8 > ff02::1:ff0b:946d: ICMP6= , neighbor solicitation, who has fe80::6a22:8e00:c80b:946d, length 32

The interface is up and is passing Ip4 traffic.

And even more odd I get this once in a while:

14:45:26.688858 IP6 enviable.census.internet-measurement.com.53565 > = 2606:83c0:8600::10c.58222: Flags [S], seq 3619826346, win 14600, options [m= ss 1440], length 0
14:45:26.696834 IP6 stupendous.census.internet-measurement.com.53321 > 2= 606:83c0:8600::10c.rsf-1: Flags [S], seq 3940102705, win 14600, options [ms= s 1440], length 0

The prefix IS part of the provider's delegation but I have no IPv6 addre= ss so I have absolutely no idea how they think routing tha= t to me is reasonable -- but they do.

They're pointing at "my gear" as I'm not using their router.  Uh, y= eah, ok.  Its not hardware -- the same thing happens on a pcEngines bo= x with two "igb" interfaces, a "cube" box that has two "re" interfaces and = my current box (which I want to keep using) that has two SFP+ interfaces th= at come up on the "ix" driver.  All behave exactly the same wa= y.

If I call and bitch they reset everything on their end = and it comes up -- once and from there its stable.  But if I take a po= wer hit beyond my UPS's capacity, well, it'll happen again.

I see absolutely nothing in tcpdump that implies there's a problem, othe= r than that when this happens they never answer anything I send= them.  They claim their dhcp6 server has locked out my MAC due to "in= valid" things they're seeing from me.  Well, it can't be coming from t= he inside devices because (1) there's no route until IPv6 comes up except f= or the link-local, which I verify is in fact there but there is no default = route until they send it and I receive it and therefore its ridiculously im= plausible any inside device with a "stale" IPv6 address is sending, and eve= rything in the rack (this last time at least) went down with the power and = all that gets its IPv6 by SLACC -- so until it gets a delegation it obvious= ly didn't have any.

I'm trying to get their engineering people on the line to get a packet c= apture while I power cycle and see exactly why they're get= ting big-mad but my suspicion is that their ONT is in some= way obtaining and forwarding things before it negotiates fully -- which of= course it shouldn't, but..... 

Any ideas here?  Once it comes up its completely stable, but obviou= sly a power loss while I'm not around is going to be a pain in the neck.&nb= sp; One thing I've contemplated is sticking a delay in the rc script for dh= cpcd so it doesn't start for a bit after a boot, which perhaps = ;gives the port time to negotiate.  Since it does the same thing w= ith an igb, re, and ix port (with a 1G SFP transceiver in it) I assume the = issue has nothing to do per se with negotiation, but someh= ow their end is getting "big mad" with me when it comes to IPv6 delegations= and once it does it never clears it on its own.

Putting this in freebsd-net rather than directly to Roy because I see th= e same behavior using the "stock" dhcp6c client......

On 6/7/2024 09:12, Roy Marples wrote:
Hi Ed

 ---- On Thu, 06 Jun 2024 02:48:36 +0100  Ed Maste  wrote ---=20
 > On Sun, 7 Aug 2022 at 01:32, Ben Woods woodsb02@freebsd.org> w=
rote:
 > In the previous threads some objections were raised about dhcpcd's
 > lack of sandboxing (Capsicum / privilege separation), which has since
 > been addressed.
 >=20
 > I would like to start building and installing dhcpcd by default so
 > that it is available for testing and experimentation. I do not intend
 > to replace dhclent or rtsold, at least without more information, test
 > results, and consensus.

That's nice news, thanks for carrying the torch here :)
--
Karl Denninger
karl@= denninger.net
The Market Ticker
[S/MIME encrypted email preferred]
 

  ------=_Part_62812_84339164.1750321263682-- From nobody Thu Jun 19 10:41:18 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNHGl0Fd1z5yWl6 for ; Thu, 19 Jun 2025 10:41:51 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNHGk26f4z3Sr9 for ; Thu, 19 Jun 2025 10:41:50 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net; dmarc=pass (policy=none) header.from=denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id 2982AB11E6 for ; Thu, 19 Jun 2025 06:41:22 -0400 (EDT) Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 33FCC1F4AE9 for ; Thu, 19 Jun 2025 06:41:19 -0400 (EDT) Message-ID: <1650053f-bae7-435f-9bb7-f2d8cf3ebb7d@denninger.net> Date: Thu, 19 Jun 2025 06:41:18 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: dhcpcd(8) into FreeBSD base To: freebsd-net@freebsd.org References: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> <1188806329.62817.1750321263908@localhost> Content-Language: en-US From: Karl Denninger In-Reply-To: <1188806329.62817.1750321263908@localhost> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms060801030405030101030505" X-Spamd-Result: default: False [-1.51 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_LONG(1.00)[1.000]; NEURAL_SPAM_MEDIUM(1.00)[1.000]; NEURAL_HAM_SHORT(-0.71)[-0.715]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; R_SPF_ALLOW(-0.20)[+mx:c]; MIME_BASE64_TEXT(0.10)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; FREEFALL_USER(0.00)[karl]; MID_RHS_MATCH_FROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; R_DKIM_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; HAS_ATTACHMENT(0.00)[] X-Rspamd-Queue-Id: 4bNHGk26f4z3Sr9 X-Spamd-Bar: - This is a cryptographically signed message in MIME format. --------------ms060801030405030101030505 Content-Type: multipart/alternative; boundary="------------d06Fu6ufBAlcBtrrLSKSMFj1" --------------d06Fu6ufBAlcBtrrLSKSMFj1 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 DQpPbiA2LzE5LzIwMjUgMDQ6MjEsIFJvbmFsZCBLbG9wIHdyb3RlOg0KPiBIaSwNCj4NCj4g SSBkb24ndCBrbm93IHRoZSBkZXRhaWxzIGFib3V0IHlvdXIgc2V0dXAsIGJ1dCBJIHRyaWVk IGRoY3BjZCBpbiBteSANCj4gbmV0d29yayBsYXN0IGZldyBtb250aHMgYW5kIEkgZW5jb3Vu dGVyZWQgdGhhdCBpdDoNCj4NCj4gLSBydW5zIGZpbmUgaW4gYSAxNC5YIGphaWwgb24gYSAx NC5YIG1hY2hpbmUgKFJQSTNCKSBmb3IgYm90aCBJUDQgYW5kIA0KPiBJUDYg8J+RjQ0KPiAt IGl0IGRvZXMgbm90IHdvcmsgd2VsbCBvbiBhIDE0LlggamFpbCBvbiBhIDE1LnggbWFjaGlu ZXMuIChSUEk0KQ0KPg0KPiBUaGUgc3ltcHRvbXMgbG9vayBhIGxvdCBsaWtlIHdoYXQgeW91 IGRlc2NyaWJlLiBTb21ldGltZXMgaXQgZ290IGFuIA0KPiBhZGRyZXNzIGFuZCBhIGRheSBs YXRlciBpdCB3YXMgZ29uZSBhZ2Fpbi4gUmVzdGFydGluZyBzb21ldGltZXMgDQo+IGhlbHBl ZCwgb2Z0ZW4gZGlkbid0IGNoYW5nZSBhbnl0aGluZy4NCj4gVXAgdG8gdGhlIHBvaW50IHRo YXQgSSBzdGFydGVkIHJlYWRpbmcgdG8gY29kZSBvZiBkaGNwY2QgYW5kIA0KPiBlbmNvdW50 ZXJlZCB0aGF0IGl0IHdyaXRlcyBhIGxpbmUgaW4gdGhlIGxvZyBhYm91dCBnZXR0aW5nIGEg bGVhc2UgYW5kIA0KPiB0aGUgbmV4dCBzdGF0ZW1lbnQgd2FzIHNlbmRpbmcgYSBwYWNrZXQg b3V0IG9uIHRoZSBuZXR3b3JrIGFuZCBJIG5ldmVyIA0KPiBzZWUgdGhhdCBwYWNrZXQgaW4g dGNwZHVtcC4NCj4NCj4gQW55d2F5IG9uIHRoZSBSUEkzIEkgc3RpbGwgdXNlIGl0LiBPbiB0 aGUgUlBJNCBJIHdlbnQgYmFjayB0byBkaGNsaWVudCANCj4gKyBTTEFBQyBhZnRlciBJIHB1 dCBhIGxvdCBvZiB0aW1lIGluIHRjcGR1bXBpbmcgYW5kIHRlc3RpbmcuIE1heWJlIGl0IA0K PiBpcyBqdXN0IHRoYXQgMTQgdXNlcmxhbmQgZG9lc24ndCBtYXRjaCBlbm91Z2ggd2l0aCAx NSBrZXJuZWwgdG8gZG8gDQo+IEJQRi9kaGNwLiBCdXQgdGhhbiBhZ2Fpbi4uLi4gd2l0aCBk aGNsaWVudCBpdCB3b3JrcyBmaW5lLg0KPg0KPiBJIGRpZG4ndCBydW4gZGhjcGNkIHlldCBv biB0aGUgaG9zdCBPUyB5ZXQgYXMgSSB3YXMgZmlyc3QgdGVzdGluZyBpdCANCj4gaW4gdGhl IFZORVQgamFpbHMuDQo+DQo+IEp1c3QgbXkgMiBjZW50cy4NCj4NCj4gUmVnYXJkcywNCj4g Um9uYWxkLg0KDQpUaGUgaXNzdWUgSSBoYXZlIGhlcmUgaXMgdGhhdCB3aGVuIHRoZSBvdGhl ciBlbmQgZ2V0cyAiYmlnIG1hZCIgSSBoYXZlIA0KdG8gY2FsbCB0aGVtIHRvIHJlc3RvcmUg SVB2Ni7CoCBCZWZvcmUgZGhjcGNkIEkgd2FzIHJ1bm5pbmcgYm90aCBidWlsdC1pbiANCkRI Q1AgZnJvbSBGcmVlQlNEIGFuZCBkaGNwNmMgdG8gZ2V0IHRoZSBJUHY2IHN0dWZmIGFuZCBo YWQgYmVlbiBmb3IgYSANCnZlcnkgbG9uZyB0aW1lLsKgIFRoZSBjb21wbGV4aXR5IHRoZXJl IGlzIHRoYXQgSSBuZWVkIHRvIGRvIHRoaW5ncyB3aGVuIA0KYW4gYWRkcmVzcyBpcyBib3Vu ZCAob3IgbG9zdCkgYW5kIHRoYXQgZ2V0cyBjb25zaWRlcmFibHkgbW9yZS1jb21wbGV4IA0K d2l0aCB1c2luZyB0aGUgdHdvIGRhZW1vbnMgcmF0aGVyIHRoYW4gdGhlIG9uZS4NCg0KSSBj YW4gdHJ5IHRvIGdvIGJhY2sgdG8gdGhlIG90aGVyIHNldHVwIGJ1dCBpZiBpdCBnZXRzIGJp ZyBtYWQgYXQgbWUgDQphZ2FpbiB0aGVuIEkgZ2V0IHRvIGNhbGwgdGhlbSBhZ2Fpbi4uLi4g Oi0pwqAgU2luY2UgaXQgbmV2ZXIgY2xlYXJzIG9uIA0KaXRzIG93biBvbmNlIGl0IGhhcHBl bnMgdGhpcyBpcyBlc3BlY2lhbGx5IHZleGluZyBpbiB0ZXJtcyBvZiBmaWd1cmluZyANCm91 dCBwcmVjaXNlbHkgd2hhdCBpcyBnb2luZyBvbi4NCg0KSSBoYXZlIGEgc3VzcGljaW9uIHRo YXQgaXQgaXMgdGhlIGlwNGxsIG9wdGlvbiBhbmQgYSBzbG93IHJlc3BvbnNlIHRoYXQgDQpt YXkgYmUgaW52b2x2ZWQgaGVyZSAoYW5kIGlwNGxsIGRlZmF1bHRzIC9vbiwgL3doaWNoIG1p Z2h0IGJlIGEgdmVyeSANCnBvb3IgY2hvaWNlKSwgYW5kIHBlcmhhcHMgbm90ICJ0ZWNobmlj YWxseSIgdGhlIElTUHMgZmF1bHQgaW4gdGhhdCBpdHMgDQplbnRpcmVseSBwb3NzaWJsZSB0 aGVpciBPTlQgY29tZXMgcmVhZHkgb24gdGhlIGN1c3RvbWVyLXNpZGUgaW50ZXJmYWNlIA0K KHRodXMgdGhlIGdhdGV3YXkgdGhpbmtzIHRoZSBsaW5lIGlzIHVwKSBiZWZvcmUgdGhlIGZp YmVyLXNpZGUgaGFzIA0KY29tcGxldGVkIHJhbmdpbmcgYW5kIHRodXMgaXQgaXMgbm90IGVu dGlyZWx5IHVwIGFuZCBwcm92aXNpb25lZC7CoCBJbiANCnRoYXQgY2FzZSBkaGNwY2QgaXMg Z29pbmcgdG8gc2VuZCBhIHJlcXVlc3QgdGhhdCBnb2VzIGludG8gYSBibGFjayBob2xlIA0K YW5kLCBoYXZpbmcgZ290dGVuIG5vIHJlcGx5IHdpdGhpbiBhIGNvdXBsZSBvZiBzZWNvbmRz IGl0IGRvZXMgdGhlIGlwNGxsIA0KdGhpbmcuDQoNCklmIFRIQVQgaXMgd2hhdCdzIG1ha2lu ZyBpdCBtYWQgKGl0cyBzZWVpbmcgcmVzZXJ2ZWQgYWRkcmVzcyBwYWNrZXRzIA0KdGhhdCBh cmUgbmV2ZXIgcm91dGFibGUgY29taW5nIGZyb20gbWUpIHRoZW4gbXkgdHVybmluZyBpdCBv ZmYgbWF5IGZpeCANCml0LCBidXQgSSBkb24ndCBrbm93Lg0KDQotLSANCkthcmwgRGVubmlu Z2VyDQprYXJsQGRlbm5pbmdlci5uZXQNCi9UaGUgTWFya2V0IFRpY2tlci8NCi9bUy9NSU1F IGVuY3J5cHRlZCBlbWFpbCBwcmVmZXJyZWRdLw0K --------------d06Fu6ufBAlcBtrrLSKSMFj1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On 6/19/2025 04:21, Ronald Klop wrote:=
Hi,

I don't know the details about your setup, but I tried dhcpcd in my network last few months and I encountered that it:

- runs fine in a 14.X jail on a 14.X machine (RPI3B) for both IP4 and IP6 =F0=9F=91=8D
- it does not work well on a 14.X jail on a 15.x machines. (RPI4)
The symptoms look a lot like what you describe. Sometimes it got an address and a day later it was gone again. Restarting sometimes helped, often didn't change anything.
Up to the point that I started reading to code of dhcpcd and encountered that it writes a line in the log about getting a lease and the next statement was sending a packet out on the network and I never see that packet in tcpdump.

Anyway on the RPI3 I still use it. On the RPI4 I went back to dhclient + SLAAC after I put a lot of time in tcpdumping and testing. Maybe it is just that 14 userland doesn't match enough with 15 kernel to do BPF/dhcp. But than again.... with dhclient it works fine.

I didn't run dhcpcd yet on the host OS yet as I was first testing it in the VNET jails.

Just my 2 cents.

Regards,
Ronald.

The issue I have here is that when the other end gets "big mad" I have to call them to restore IPv6.=C2=A0 Before dhcpcd I was runnin= g both built-in DHCP from FreeBSD and dhcp6c to get the IPv6 stuff and had been for a very long time.=C2=A0 The complexity there is th= at I need to do things when an address is bound (or lost) and that gets considerably more-complex with using the two daemons rather than the one.

I can try to go back to the other setup but if it gets big mad at me again then I get to call them again.... :-)=C2=A0 Since it never= clears on its own once it happens this is especially vexing in terms of figuring out precisely what is going on.

I have a suspicion that it is the ip4ll option and a slow response that may be involved here (and ip4ll defaults=C2=A0on,=C2= =A0which might be a very poor choice), and perhaps not "technically" the ISPs fault in that its entirely possible their ONT comes ready on the customer-side interface (thus the gateway thinks the line is up) before the fiber-side has completed ranging and thus it is not entirely up and provisioned.=C2=A0 In that case dhcpcd is going to = send a request that goes into a black hole and, having gotten no reply within a couple of seconds it does the ip4ll thing.

If THAT is what's making it mad (its seeing reserved address packets that are never routable coming from me) then my turning it off may fix it, but I don't know.

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------d06Fu6ufBAlcBtrrLSKSMFj1-- --------------ms060801030405030101030505 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwNjE5MTA0MTE4WjBPBgkqhkiG9w0BCQQxQgRAAIi7Sg/OLhFY 3gy0Uy8t+I3TjvCEWqtG/lq6wXkFTOFGCG89BEnZ8fdf3rmgCUWbmjVHggioI93I7VcFHeKk 9TCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICAHPVTgPsYDwJpFRR bzXTYho8wY9yIetP6K5OKSE7mlcsH03vaWpKpIGN515wmIBlRrDucFoNoKIDfEXWTO/AQ71E hI0JAGZ3zlxXe38KfNf+uAo4UrchbRJ4dyPjkVvqj4iUaYrJjcUjuLnkV3TVn4dp6vxn3EbI 2ajdbcs12eMU9eNbGDEbdUF3Bth0aioUu+IXPLOjxANFIVJ5vUu3Q5lXgUlTFxgU94rBcItn zzZZ14o1uY3i6SA1kv+vWbH3OOe8UmG9BWMFm9AKao1HczmlloQGK17iglrtiqN2+c6ww8bs cPdWV1Gl02M9TR2jK//WnVEvkGS9kqbtectp2KNZSoe3jxVI9hlydobMk20CJhkcLXDBRyKq YCnHZGZBSm2CgKZms83QXxDpgPkcuOzhXtd4x89/xPf15NdGFcTGDEZVJ6ouSekddhZ1a9Gy L7E0ieYdhlo1Jh29jM1Ry7jMMff8IQEqMBkZXSIPHW70IIHC7wjeIgaEiDXTz4h7fSJC2how hrGxs/UOUhAYILtxFIIXYIvc47qL2LpxzV1hVSHX15X02/kJPE8PDEkaasaby5dNaCX3sHsj Gt7B4rk2q70ulQCAIQwp6rMZEaF0/P9guxR4hmBHQxMId/VfUokEKADLr6v7j6lninDHGIEu PMp47IRI0A+CxSzisQNkAAAAAAAA --------------ms060801030405030101030505-- From nobody Thu Jun 19 11:26:30 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNJGH16Sfz5yYh2 for ; Thu, 19 Jun 2025 11:26:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNJGG5Zldz3lHL for ; Thu, 19 Jun 2025 11:26:30 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750332390; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=I5EtSWgdDbGGzOQMM2NUuLusikamrXdYJhTJizugMSs=; b=oFwGL4RChSUZs+ggxVI3VJR/deJQmRbo0049YPHIRg/OLRhi5wN8dX36UI052oVnL5eO1h Iygd/aRvHgQh3dNzWQa5Rzp9wSZ6VGg+xKKlR1bwbB1ETJx6NKGlz9eDSKDkOhin0+LR/a xJZNoaxj/6r8bKJMvX9GZxH1b7Kg7vjduvH19cag+T0j9VV4NNXo/mHimJagFzsOCP9q3E maioBV8dGfS1RMwsd2fjPkznSuvMYKhQE5WS3uoZtOmcjv7er5hORHFtiMVygoUQRgXFXt P+Fp/pGWCEdkrGjGpPvo5c34s7lW5mOy2gDrnpvGRI5HLmXQP3kUF7zuaon4pQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750332390; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=I5EtSWgdDbGGzOQMM2NUuLusikamrXdYJhTJizugMSs=; b=T9yuix2iXjGWO5bX/VJpl2thKCaVIgsHgv7JXWNK3SfWj1YRbIhu2BRcSGiy+MkMGvrR5O zcGVAdpdGmYPyLIttzW2cQzFiKyH7VAiuDi3J5KNDjUgD7O0QkfRVA4z8ViA1h7MH2uZVo oUbdkD1Mke47L9rxYdlc01ySo98sgZTsrvwFchiKRCsezlEp4yBmRChCK5VdkFKPA5ydRm XwyU6ek5IIbPJ6bER6ZJ0KLHoajbe3/dp49a53GdHXxQZFcdQG83JtE7ph4E3xb+of6Dg5 VPJGTXDAECWMxsTVrP2DnhAxpZhkYHMB1lVw/M35V6BLKxGI5Fxcvn0tAQwdjQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750332390; a=rsa-sha256; cv=none; b=X6xT2fYjvMSNhpwo/5RkcZKxHJSehA9I2opwJ0tJ8MEqrQ+adMTtm2zO/Yiz1y+nQQsi08 hVRCLGxdEhWCBTpvI6XPElsfJCbHGnaHDzn7KDUEyDgd94M6MJvVmxHt/mm9QaMneohazK gUx8pIjP9Myr4EfBY/cNqyhwpoqGjwGYFZyBj19mWu8vKb8FMh7hSQ4stDK90fXreT9RRP AHg1L0h76SiAh34DhHB2rPOVphodV2ghCDqFSum+5q2iBEEBicFh7CQMafCXQNDL+E7IAs 7uUvsou6ylIfOdWqn9AMBMUc21R5Y6SWPtxi9woLhM4wbecib4/xCWmLju0kRQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNJGG4lwfz1Bxc for ; Thu, 19 Jun 2025 11:26:30 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JBQUIX067264 for ; Thu, 19 Jun 2025 11:26:30 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JBQUqR067263 for net@FreeBSD.org; Thu, 19 Jun 2025 11:26:30 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 11:26:30 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: lucas.aubard@irisa.fr X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #15 from Lucas Aubard --- Sorry for the late reply; I was running more tests based on the information= you provided. @Timo=20 Thanks for the FreeBSD operating description when processing fragments.=20 I confirm that by commenting vm.kmem_size and vm.kmem_size_max in box bento/freebsd-14.1, the net.inet.ip.maxfragbucketsize value is now set to 7 after a reboot.=20 I also confirm observing the same reassembly across the runs for all our te= st cases. Thanks a lot for pointing out these kernel parameters. @Michael=20 Actually, I did not modify nor check the default VM settings since I observ= ed this behavior with different FreeBSD boxes. For example, the official (?) FreeBSD box freebsd/FreeBSD-14.1-STABLE has o= nly one parameter specified in /boot/loader.conf: autoboot_delay=3D"-1". I am a= lso able to observe a net.inet.ip.maxfragbucketsize value of 1 with this box (t= hat has thus not the vm.kmem_size and vm.kmem_size_max specified) in the case I= run multiple VMs in parallel. From @Rodney's comment, I guess the memory dynamically allocated to the FreeBSD VM is low because multiple VMs are running, leading to a net.inet.ip.maxfragbucketsize value of 1.=20 With the freebsd/FreeBSD-14.1-STABLE box, by manually allocating memory to = the Vagrantfile: - 512Mb gives net.inet.ip.maxfragbucketsize =3D 1. For 40 test cases tested= in parallel, I observed many reassembly inconsistencies. - 1024Mb gives net.inet.ip.maxfragbucketsize =3D 3. For 40 test cases teste= d in parallel, I observed 1 test case reassembly inconsistency (out of the 10,362 test cases). - 2048Mb gives net.inet.ip.maxfragbucketsize =3D 7. For 40 test cases teste= d in parallel, I did not observe any reassembly inconsistency. So, I should force the allocated memory to the FreeBSD box to 2048Mb when running my tests in parallel to avoid observing reassembly inconsistencies. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 11:32:11 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNJNr0B6cz5yZ9D for ; Thu, 19 Jun 2025 11:32:11 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNJNq2YPWz3nvh for ; Thu, 19 Jun 2025 11:32:11 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750332731; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bjVeAHIydfvP404jymXncmjFYkSr3kH3Y3jz3VxEbQE=; b=k0SYseC/IBcz4ZNKKuBZr8IfVhqK5UQ7ZvImEc7/vQxrPKMjvV08TFzA/LKdotq9TVdHK7 O3CgSSd6F5r+OLGsju56ymDoCoqHJUZWT+ECuVIvT7jweOUErTeZdNoy+rgFBrFFe3tQ0N 3pgrNdG4dGGTgKazBlWOOjoxHABH3H5whAJcQU0XrroJeqiYvTk9g1mOCSVbpgRQ/l1n4b jKHtBlOa1NM2bcrIDtBr1oM55mzyyINw+bvJBZscAE+5PjBI0yQ89Htj5iZ5n5XoXbDkhh w9cY5h0hf2zbi8qndDPuFLwvhrsGjoOUdpqFIEammW5FLItcdHQWx/kwKVb/iQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750332731; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bjVeAHIydfvP404jymXncmjFYkSr3kH3Y3jz3VxEbQE=; b=RGqnF7rCiNIPYvAow654R6WTM9erLnwemtcKWUke6+64O9ExCDQGpjuFZ25wvs4+H3S6l1 q7cah4wpF9ELHFXrH2IZk/R3ETrMUyJUvOpLqHBLnLnrFvZLuxbftGoWG7s6q+7c5fev3m MNxe3Z4mJd6uD88RPj7xyM/V2MN4KsUMLS/f2zpK0KJzfjPgx39sAdJfBcFsAkARexJEJ3 4rK/o89uZMlgPgwYQN6slDQ9eSw/3LGPNdou9+bxw4jpyJDiaH8sHL3qwxyCTokIkPeprg 7XgUVZAubeaAuRhezuw3lpAsmHP75/PdZUozEjfZxu7syvngOOAMRw61qMKtAg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750332731; a=rsa-sha256; cv=none; b=X/OiSRrbnAAC3oAKYyQ3RnUZn9S+NaJvm7fuzD5Ls2/DTgwfBS5u7tHPhuXa8BM7z3cAEv b2+V06BMMvw9AJRyYOE+mHKvH2fqU07smIM8JIE58YIR+WVYCHFviAfwfDFACJ3PT/NRJR ld64CdnJGg7Jrg7ih6MeJ0cHsHR/skRNcxPFFHkv1pyEHPg2qdZ/ZxgXvcJTjwPdz+kfV8 IWLeYHbE3kAqiGnu4Ynmrix8FvlP1mNmpUuSuV74jma7oq6RmGGn/103ULEwQg2d/ZZHHY kXalEorOG7fFL5gqXd0vBzXUpBTWidk90wSYxXP1GW+GFggHkYiHh0SxYi3dmA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNJNq25NGz1CFq for ; Thu, 19 Jun 2025 11:32:11 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JBWBkV079968 for ; Thu, 19 Jun 2025 11:32:11 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JBWB5p079967 for net@FreeBSD.org; Thu, 19 Jun 2025 11:32:11 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 11:32:11 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #16 from Michael Tuexen --- (In reply to Rodney W. Grimes from comment #14) What limits do you suggest? The total number of entries (IP_MAXFRAGS) is limited to nmbclusters / 32, w= hich is 400 in this case, since nmbclusters is 12800. Since we have 1024 queues, only up to 400 could be used. This also means that we can reassemble up to = 400 packets in parallel, as long as the hash value is different. You just can't handle collisions. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 12:22:28 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNKVt0Fdsz5yclZ for ; Thu, 19 Jun 2025 12:22:30 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNKVs67JXz43r2 for ; Thu, 19 Jun 2025 12:22:29 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750335749; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=zOkwKRXBetkXH+G8MkLUW1nzNKjklnzLOXkRY7kiVvo=; b=Qwr8GqsBUHJiTjj+iNuUdqDaZzjMInu9wj+YoeoqsBRLcbn57pbwJB+CBrvxzBVO7lX2pR DDP1bfEEywgr0M7nbiH/ertUgmt1jhxjdNLDsc1C8CfIc7Bbj93JMBMvTU+Y9YeG7RPxTN Oq348tnTvdnI0mPDo6T3M5YJkVKs9YZznq4CpnTpDn4bwLvDs3sAq5hrjv4g8oRrcjQa8w IZmoTBMWYWJtYVzJS2FEVqTat29kGGLPfTsHoD9T8tsrsmsKiPGPaSTxYmI2mj2gfO39fC XZvDOY3TJt2Uj/i2iOrJWmlX3fANi8DxlGA8hGI1AtQHZLYp6xI9a6kRXfqdAQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750335749; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=zOkwKRXBetkXH+G8MkLUW1nzNKjklnzLOXkRY7kiVvo=; b=pquK88zuSZd56lAraMLNeCsMZbJNqGMc6xdVyJQd3b3cXHY+wsY5gcXKGspDZFVzuX13Eb hL9iB7H4KmzkHw1ZXzUrX3k3bBuPtO+0PuVvh1IEzfcglxeuBAygpRceEK0HJrGOvc0/HW xsoEqcyEwkWbk9MwhxXEpJ90EkbjbYQ0/mzE7kwTuHWBAye02OuttmBzEryauUHb8OTAO3 D30KrL46FfXr/pmNj5d8HhzvBonZ0cfqUmH830E9Xj4E+Q82fdhS0y5xO15u48N96A1GP1 BFDz3CIAfNFcQpwMy9oprQiFp/S9pmfG2ALYrS1y5tRCjLQqzlZV5YGNAFI65w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750335749; a=rsa-sha256; cv=none; b=C6anUKhGDRiIq9e/3ssCmSjmglXiOMRp2LCpdLgPBD6lxUK/Qlu44tZerkwgA+z/aKppJz H9nguHDQ0yzMvag0rLqG4/oDwYPU4zBRCegR+1wHwPjSwajGHX301qZb7enM3pas7n1qqq /EnF8tZB3JimnP1GF61HX5IT33uQInsmligkdjIQTHxR6K+p4oCWs6mpkyXMHYwDUuRESb Ap1vkTbUv/ySMti3TjhpC83JsG23qQoUkgBbeaQHh5wMnmVXvZoF64MCc+o2JmrbYyM4vb o6OO5r64/aJEPIFUya3I9yieOVDaX/2LsmreQGPIKQNvDw7HdMJv4qr3n7zFTQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNKVs5kh9z1DPp for ; Thu, 19 Jun 2025 12:22:29 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JCMT4Y079031 for ; Thu, 19 Jun 2025 12:22:29 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JCMTQB079029 for net@FreeBSD.org; Thu, 19 Jun 2025 12:22:29 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 12:22:28 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: olivier@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #17 from Olivier Cochard --- (In reply to Lucas Aubard from comment #15) Using multiple VMs on a lab, then having to reduce the amount of available = RAM to a level not commonly found in today's real hardware is indeed a common pitfall that many have encountered before. However, I have reviewed what is currently available on the market: - Raspberry Pi current version (5) come with 2GB RAM; - The smallest AWS EC2 instances have 4GB RAM; - But on Google and Microsoft Azure we can have 1GB RAM instance; Thus, this reassembly issue is expected behavior in low-RAM scenarios, but = how critical is it? (This is a question for Lucas.) I mean, is it worth adding a warning message if net.inet.ip.maxfragbucketsi= ze is configured to 1, or do we need to find a more complex solution?" --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 12:40:59 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNKwD2hLjz5ydjN for ; Thu, 19 Jun 2025 12:41:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNKwD1FtWz49S7 for ; Thu, 19 Jun 2025 12:41:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750336860; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=lJ8KO1644+lJm01Bvnms2BO83gjs4ejBhdubxzICWr4=; b=MTuNC+GodDo6cWzhh5CrCaszsJha4shIJI2lGf8qvfBBjipibAXxe4b65L6mOvowE72bcw FsW4MIcvzOygxclub0qEXT4maRnebxT2SA4uG8I/2Ry4EuxL36rJOIn2C4IRy68DvCQbtq +L84YnhPjgjQoNzGBGOXbNHl5r7WWr9o0d5SUp57OvOS4kSLGZW+34D5DzkxA2gtHOZ2Pk 1Qe/lXZLXWSFACsbR+y3q1TLtLNTYOlu2gBC0rFmqbS2dNG2WulvRoN8BjIPpcCNTozYki Oq7xiY16YbW9gQfY13dr0mRZ6ZqwIaqwIPTg3brq3shMH8fmVBV43SAqqRNuOA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750336860; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=lJ8KO1644+lJm01Bvnms2BO83gjs4ejBhdubxzICWr4=; b=XNsC1g9husJsCGYV9TgXovTJvaeGMSh8XfItBbJ2GiPdlKrGjqU6gFAv0KFdM4nwgw6NdP 5QnFxmdS9H7OGSdl6lFuJ3WIQlMQ06MlW0vD0xi8T1VuZQL6psxpqonOwtBgySPhZFFBYE QhKe6aZqWxuRfEJzbMLVsE4eucVKZzPNn7ZKCPwlqRAmnp1vDHlVydq7pAT3rVaH7esCmk 4qoECqoGv4gEBX1QtW+djDiitrhrvxYhI3eVGHVWDxTIJSfr95JeFlphx8kFZI43R3uWnB Mqwu7Fif8hAnAf2JUSawGsCWS80xv7VrtCUvpZdAhlWr9SPC5pmeUHQS6oAXrw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750336860; a=rsa-sha256; cv=none; b=NlDucHH1WKd24H2hyYjxxCCxHwSgLN4FAzEHOUpHCsJjBaq97YvtMx7JPGFiG3/cl7dbTU nBIqlQueQwytyjxZOZLMdmH+9U9jTJy6bHybO0wp+2iREniPW+rnrbKOlnY1FdLk0+lJg3 lS0JUcL3PD2NkmtxrpHx8W1Dk6i0TcNakRfs5KqZiqCxqFBP++oUkf+3q/adrPYGBAvubZ D7lqdvQMIFM1V8GLd01s64sUEiA9GMMyda3EYqoh2LO2dVU5REB4rif1VkhLy6uDpb9yi8 KLXSmb5ceC9T4YxLbyZgBE1LUEhpO9s7ioblwcHUANLrbLK4FEdB4Fdm/+n8sA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNKwD0DYcz1DXk for ; Thu, 19 Jun 2025 12:41:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JCexhY007298 for ; Thu, 19 Jun 2025 12:40:59 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JCexPN007297 for net@FreeBSD.org; Thu, 19 Jun 2025 12:40:59 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 12:40:59 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #18 from Michael Tuexen --- (In reply to Lucas Aubard from comment #15) The maxfragbucketsize is computed (in your cases) as follows: * We start with the kernel memory size, which you can observe via the sysctl variable vm.kmem_size. This is either set in /boot/loader.conf or it is a bit less then the memory of the machine. * The maximum memory used for mbufs maxmbufmem is computed as half of the kernel memory. * The maximum number of mbuf clusters is computed as nmbclusters =3D maxmbufmem / MCLBYTES / 4 where MCLBYTES is 2048. * The maximum number of fragments maxfrags is maxfrags =3D nmbclusters / 32. * The maximum number of fragments per queue is maxfragbucketsize =3D imax(maxfrags / (V_ipq_hashsize / 2), 1) where V_ipq_hashsize is 1024 when not changed in /boot/loader.conf kmem_size maxmbufmem nmbclusters maxfrags maxfragbucketsize 200 MB 100 MB 12800 400 1 500 MB 250 MB 32000 1000 1 1000 MB 500 MB 64000 2000 3 2000 MB 1000 MB 128000 4000 7 This explains the parameters you are observing. I was guessing the kmem_siz= e, so it might be a bit smaller or larger but it gives you an approximation of maxfrags and the values you observed for maxfragbucketsize. Please note that any host should avoid IP fragmentation. So, in my view, yo= ur tool tests the behavior under attack. We could increase maxfragbucketsize, = but then you could increase the number of threads you are using from 40 to 400. Then you will hit the maxfrags limit. Could you explain what attack you have in mind? Why are you testing with 40 packets in parallel and not with more or less? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 12:43:13 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNKyn4xnvz5ydrY for ; Thu, 19 Jun 2025 12:43:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNKyn2Vfxz3CT0 for ; Thu, 19 Jun 2025 12:43:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750336993; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vMeurJgmSb/0OwtfoON9G7RNotX1NdwPxK/EMeAeGxE=; b=Gu2M/RkMy5VGdNZaZBjcdrLRWuRK9zpBYMHpBoPly4FPiU4HT2qOFqHDDlP2F3CnwpCrYt s+pxBfgLjC2eWhmxEQXne3Gqe58r7Q4wP9nV8x21wLHBhc/5wfrtQ1ygO1sy2u4rppevTi kPJ0sK9jkdKE45Nb3DIVn9+h0ufvqnYoeV27gMBo3rVf4CkvsyJucVMYBe/FFiycA6WuE5 yk/Y4if3yXR7aJbuvdH2ldjKdpwFLoINIZGFOS9hjqOhwEXXEk0nuXbvkRPbkuMcs+vCO+ T1HPmt2a8kUj9WMm+aZoQvh2t7ZZFjwhU/kMkTb9lwAvDcMDUXkJypWFE43tUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750336993; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vMeurJgmSb/0OwtfoON9G7RNotX1NdwPxK/EMeAeGxE=; b=dm4b4zBjprc/w88dB4Wk1AI4bcH20HiUybCgh+75wtDd+mnV5ocTG75MXy0AT1QFjVRWnj sBPgfY0GfCN7wLSRBGbzuKcGbQbPzpSf6zsXQ4yfXy9EDftJOzw+l/e7k+TsT8VrLXE9Py z2m9+1VpDS4rXQk8jAnsIjjZOliWJUZTbFA8OB+5K59g9c0SV6+rd3pIG14VBuSpF17f3J IhNNhTjZfmMn7BuvwwvOv+Cg9gqcdMObnsszKezdBFxoDZfUddc31GwAugSEnFreU3uWnl xE0CYow6BwPB0coqdgI8BURDPDJrY6Fi1/+OtsViozfpzM9GQBG66LogCwAUAQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750336993; a=rsa-sha256; cv=none; b=PrjOA5ahYgEAyfR0XsLh8wxPGQCedt7gLCCoiLfFy2IYkT1+skVn0TGAk4CErAmWIlHDtv fkbhg1cNlAIZRYPw3bSBnRzl5L3l8fhRrXfIdkXc++x1Juntulhv12+UQ/n7KebUKNyDbx Ln7KFuzV0Fw9BiIaLTe5cLzF4omvrIkR2X6WKLaJzx6mnyfiW0z2ed4kgLzyWct0nLv/dW QPf56/kruHKVKCQeLIY8hQGDJ/SJk/FLzTbY4ldGuAqSmnuy2jWfESXLzH7mFeP8WP9BZY kkRB+QaxOgBUErNCE3IEtGyrvKg+OsN/5uDBRhgtXh5Hh8p4dAxBiZUjokFmCQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNKyn24sLz1DlC for ; Thu, 19 Jun 2025 12:43:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JChDQJ017726 for ; Thu, 19 Jun 2025 12:43:13 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JChDk8017725 for net@FreeBSD.org; Thu, 19 Jun 2025 12:43:13 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 12:43:13 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #19 from Michael Tuexen --- (In reply to Olivier Cochard from comment #17) We could make the minimum bucket queue limit larger than 1. We want to limit the queue size to 100. This is a critical limit. By why not use that limit always? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 12:43:30 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNKz734ttz5yfB3 for ; Thu, 19 Jun 2025 12:43:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNKz70wYNz3D4w for ; Thu, 19 Jun 2025 12:43:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750337011; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0LfxfXSuv768HXHPOKAsG7sP8zKTJaxP//SeLNFXAhM=; b=uzaqT69GKjQ2BM9BWCSJkxOEHpaNlG6hK6lmOufDoeSMBGqKqVR1WmgvMy6wEbqXMo9WYe j2HWApYquYOm4uelDB7V0StQK/TGKTxUZmp+YTfVgyAyY12oU2KyuKFFZrKEZg3opCcTJB /cZ1CYn+7xCFcNfv8/hcfMmWoU25eZ+8Lb8IeaxqazZtlQXYc3wYMT8Yk25EJ0EUF9WpuB ReFjJrCRKgEZAq0XdyAJT5c3bpLaUYzepkV7xXAp0aQBDvTrk7UkmyO0hfbNwkK7zkE8/t WNXsMa0gMGswwhud3w+kPHEGDqStV2dcGUlqFBYuTxp/mMVe+WdXyuruuiM0yw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750337011; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0LfxfXSuv768HXHPOKAsG7sP8zKTJaxP//SeLNFXAhM=; b=QBNFPI0ZSRWzdfj6suh2sowDGNIYT3DtAHX4+Qq0lJJf3UreCLJ+4xH9O16UR3vTA7W2d0 KrnjmTuXUaD9BrXs7okZTYVyUmIIHSFxpscc0HLALix9kdLomBudjyEgMEaywyp/SGKpgI 3OHM3btFo/PfE+ZqSTfmnxPBO5vH15iXR/dqB7tzbc1L0yJQeinb2YZgdOBKhHAjpUFmmg RdKMISC5nk+oTrOiX5pBBmF3EgeBuo9j2qq/FFzweMLs8yRBXTaeINov2QYS76W6HmHRPo KQgAWRbYQUSEJcwKOcjFcOF741e6JTzpFUvUNwNcZgkzWBEwKICO3iUEkOd3pA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750337011; a=rsa-sha256; cv=none; b=uXcgzTa4sBvLpIM/IrMSSR3iQ3ANZV4ZOHEX03UVfOsqOPyb7WmEuF+vqYJnrpGsh5x2DL In19x626836c4dElLlGrb9lc+GWPHb8qtBvX4RQJSCiHYQskolLJXwttBgIKXCnQMhNR27 v4DquYa1D3N9fU5rFI/s3QNTzWl+hUk7sSLJLApcVZyu3nuTEejTqS5kf2AZdkiTE8e6we c3hlR4so6VzoHRAyN/q/3EUT0VjJ+nP8wG+3oyr3xcbPxwtzwiI9WjmXYXa2Ci1+nxmJhK pr2OqhNQStwCake3pYdml3RCvaevVqrDO23FBb5vF+M9tFcyh8K/V5sK6A4bFA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNKz70PzSz1DYC for ; Thu, 19 Jun 2025 12:43:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JChU4q017982 for ; Thu, 19 Jun 2025 12:43:30 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JChU6P017980 for net@FreeBSD.org; Thu, 19 Jun 2025 12:43:30 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 12:43:30 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #20 from Michael Tuexen --- (In reply to Olivier Cochard from comment #17) We could make the minimum bucket queue limit larger than 1. We want to limit the queue size to 100. This is a critical limit. By why not use that limit always? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 13:39:20 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNMCX4YSFz5yhwG for ; Thu, 19 Jun 2025 13:39:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNMCX2s9cz3XdR for ; Thu, 19 Jun 2025 13:39:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750340360; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=fZO3zUlD8heGRLpSzVKSH7vLeYt+NBGuE06+U8JYCuU=; b=poeRRddRnvCMAhi7th7iu1vDj8rsia13N6NzzSpwPjwJgDolfaoxdv0d1TJlg8PsrzMbtf WGxseVNDRuiPsHGMlUDFQ7jniXWlSpGeGYG7/9ZMgYGjO5ATrCgW438L0tjfr+eYju9ipj VfpnByxAbrg7Mh7oiHNwaY4CL4sl3mTZ0yC2umXwE+dcGUBKGfEPCEwHpKDUX2GzRCk4hn h25dL9vMFMvFqnx0QLUjYtSOPF1zavq0oxkJx9fL32Db0Qxn1of6444skzQxVYkzBnzv6e pCENLpUqcyoIe11Xlc8ayoeMS8XKGcJ52caPFcWUeubdfQ08YaqfqeMWGFhqGA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750340360; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=fZO3zUlD8heGRLpSzVKSH7vLeYt+NBGuE06+U8JYCuU=; b=HZ50tvgig4mIMLg7WRiQxJfNeJWETfiJCB1C/EXZ37OYOEWqpDGQ+fjlJw4PsfpTnCOKWz d21riCbP9uijko77IAG5EE9eTQQq+ZqFKJpt+t2i5iqej+SqM4B3KMWlCX6hB5MfgJYRwh o4mta8ptg1MQQnW8vcP9e5LUdtm1gHKT0x9opQiZZ40/cJLe/hKAGnAq+D/uZdULyRyZnD 7/Sg/kkBt1fM0YOyafQOsqLOGKIoHZtKE06qIGCB5yeORm3vEP83ESNWw5RYf9aVhK3MBN gUlo8Sg8p1FmeVQ8TX5WhvAN0M6uXgKKNpWoN2UoiSmcCMXgB/0nEluoncdkiA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750340360; a=rsa-sha256; cv=none; b=WvQ+YbUnvS1sAr+JfnOr0PtM113gpEur6jah+MmQp5BBmRKcWmvv4dGksWq7G2mr5sbKDi Jduo8eQE6EFyWNbMtANEZ+eokBXq4rXe2UmcGtoCasM2qXHkV3O85WOD7hW2z9s5SyHkT1 o9FFKFtAp9Z3M/7603mccQZPMwy+ZEBft7gU8pvgFjaMNwM4YIG/j7XC4yey+q1n0F8/gJ OY0aMQBuBumoVFECL1ZlFQ0Pnr4qLqXkaOHgMA9YL1/mOJVBKtgp8Z3xGeo07bnn/4sEZy Vi2MHazAPaHLRfwe0nitTgQ33hJYzUjn7xmHCbwEv3S1ScWdWT/coUZ3TVOWIQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNMCX27hwz1GRH for ; Thu, 19 Jun 2025 13:39:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JDdKq7012304 for ; Thu, 19 Jun 2025 13:39:20 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JDdKM8012303 for net@FreeBSD.org; Thu, 19 Jun 2025 13:39:20 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 13:39:20 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #21 from Michael Tuexen --- (In reply to Michael Tuexen from comment #20) Answering myself: I guess we want to limit * the length of the queue based on the CPU capabilities * the total number of entries based on the available memory I guess we use also the memory for estimating the CPU capabilities. You don= 't use a lot of memory on slow systems... So using a constant queue length does not seem very good unless we use a li= mit small enough for slow CPUs... @Lucas If you put on the FreeBSD machine with 200MB kernel space net.inet.ip.maxfragbucketsize=3D100 in /etc/sysctl.conf and reboot it and run again your tests. Are the results the same? If you still observe differences, then you are hitting the limit of 400 entries in the hash table. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Thu Jun 19 19:02:57 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNVNy2nHgz602x7 for ; Thu, 19 Jun 2025 19:02:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNVNy022Vz3XDt for ; Thu, 19 Jun 2025 19:02:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750359778; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=qDO85y9ZhX/pqJsEvJjKQNdNTSkZXTd7AUesPkb9W5w=; b=Xw403NZFIg2BQtl7lk66vXyiWzfY6laETuvk9Ift8kiuID386YXu77OG8wEQ1icr5CNSLQ xnLyar+XPTb57DE3a9EVxLvnWeGkkoiMg7u76GeTw85CURjgvVLO3Rs3RcBLhb5NthFih8 5TJSQIbS74VX0tB+DpAnf8xlEbGqKHkxt/qvzFAWB8ClbQ0wP6D8JhE3S8i6C6Qsafq2gL K8O3VZv53X3YA1hModl2f1vrclzfcCqafUoN8zMTmkl6UIPE+6OQF45fKoZhMm1edfXn09 90oYJcwjX/w3xouHcbxq9ZcSlFIgcUrKYSJ511Yf+3TTc+Plj5fGfkDvw7uptw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750359778; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=qDO85y9ZhX/pqJsEvJjKQNdNTSkZXTd7AUesPkb9W5w=; b=PfRZslqNgecKHWpRbAuKNvDIpPutlzVvu4nlJnp6xqSHUE1lUoZNtNzNuckYR64Ckh7qdQ yD2dQbL7sEp1UGypibvWy0n4mux8qFUw833VYKFuiCINhavRYQOtj3w3fC7X40OKCWYKKq VXDO9qFwOzTqSJTdcAXSZET2rjaufn12dwmvd+CCZ8y68IEtQsSnLCRLnFYDzAEHQuI8dt vfdjLAyKNrvO6CLPYS8y0xrihO9X6EmA2M4yBr9ZELpPWHIrHrmB3AyTE2sPpyLKVEa3bS i6qOL+Tou8JHv4ZcYioV+YV4tonwLES2uqrlwaveqElPG7s0uRtYjhd/kKpNZg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750359778; a=rsa-sha256; cv=none; b=AtJl6OlW9L/b8YcfEGrvTFHqYafgMJeKVl6uQNAG1npsf6Xx7YCXupoJc6sYurZBVnAUcP EcIBN8PSvorBrXGQEqpeRUhcmWnP6waTpRyLpJUSDH2koEYPl/Qx/CGsmLxQTlbbGvDN4U z3HZvYaERUEX7z5NVC99etbIIRDgLhiSEgdkYlkSsUYew//FCL+oBZWhnUBmZQ6BT8eQZ5 jy4qeDZuEglx1CrqohZ6C6wRoJbpUMspavhqG3FCzIKCyIC/elT5VMZdEa/e8BbEnyMQDj Uqphn8fqzEI9H0IisD6DEjn6Hz882Vjthpkea8rQdlc/y1aA0qyi/DD9XTKbqQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNVNx6YSwz1QYg for ; Thu, 19 Jun 2025 19:02:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55JJ2vs3024897 for ; Thu, 19 Jun 2025 19:02:57 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55JJ2vbG024896 for net@FreeBSD.org; Thu, 19 Jun 2025 19:02:57 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287653] if_ovpn can't be pre-configured with ifconfig; can't be assigned to fib Date: Thu, 19 Jun 2025 19:02:57 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: linimon@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: assigned_to Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287653 Mark Linimon changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@FreeBSD.org |net@FreeBSD.org --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Fri Jun 20 09:30:50 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNsfM3wxRz5ynVc for ; Fri, 20 Jun 2025 09:30:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNsfM1tHXz43T9 for ; Fri, 20 Jun 2025 09:30:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750411851; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=brlsWgXAwjbmU6Ab3tEGSDjEiP3GCWiDKMp0kp8ZrWQ=; b=uqIsjcPht42dTPWyiOEkFJWYYFKD1X8svkDgFbHkcTvNWQUPnK4uQFK/7ro0XMlSc8SFRv kFMHGmZibU76bkH+Qv+6DdG1sBbR2EKa/Z/4c4s8fwg2pDQ3U8xUGVcYJxhFQuIWrhbOwD Wojy8NhdtP1dxqaKvwpY6L6ciEKmPYUIkYe9/7VYSAcwAvuG6jHDDd1kYz9hUemdGVjbWO JDk/eO3iQFTkyOkd/j4ij6kAJuH2jE7Axv/FnGL5ffT1v4ljjjNRvt+a0nCcDKK7+q9bWc iIg1LalY3ss+R5qWNR5p0QVVNM9ZD2d0s2rcbq+k53SQRqDq5E4dmuImGHT0TA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750411851; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=brlsWgXAwjbmU6Ab3tEGSDjEiP3GCWiDKMp0kp8ZrWQ=; b=vQ0PGtD7Gm/Na0bMD4wsa928K9RSjZGxl6pb8QA0LscIeluxKupQXV9PbYaeCiRjhm5wWC vOcQ7Ielq/GZ1Y6X+TmkVOu2K9hcFj31ZGwY5EfiKC62N9xvrSEIp+RMTABn8+cR+8mxBM Pwg9/0LJx57pCmYH6XRL48ZyKCQRIAjRlzj8yJizuUhZZbRn6oMFrk6yUi1LyTrEUDP77n Fd+dhMg8T/+cYLI5GYBftPpucKJy1GgsrIgjJDNjbw5rai/f5YDKcg0nAxY5pDkwL5HRt3 eMTWEEEgK3pTdGpZ+Xx8knrxDbHtSzvT9GAeS0ZbI1NO9XpACk8D1mjmhtQc4g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750411851; a=rsa-sha256; cv=none; b=gPriqt9DwUjDzhoVXYDWA6tMDZGfJVGVtxpz82AWHILOoH8zwpnDE5lYOtIz90iIKm0OrB 9Xjml+aDpHyaB2GhwLC8GVNG9i0kSo3Fpsn2ZjJKxPDqEWzIrXNvhIdOIQGJQcz2d42HD9 e7Rv4joFwyKWqv++zokWYso+U5PepDThx6oSAjHIH6GDEPmQrRb08vDsE0mfXDAWCot4qP Lk1fUiUF+4m5CeW0LGsyQ5KC00/vOuZrMWWWNyXtSflvUpvzb5EOjGKwuCz/j69s/LhtRN 15Rj4sOZcVBoJ94mJPUZtDCuz8kzDFjwQj+2a8zao3zeoI0e1YlAsgwQA/wwiw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNsfM1J14zfsH for ; Fri, 20 Jun 2025 09:30:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55K9Up8H068879 for ; Fri, 20 Jun 2025 09:30:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55K9UpMp068878 for net@FreeBSD.org; Fri, 20 Jun 2025 09:30:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 09:30:50 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: timo.voelker@fh-muenster.de X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #22 from Timo Voelker --- (In reply to Michael Tuexen from comment #21) I was curious and did the test myself. I booted the FreeBSD VM with=20 vm.kmem_size=3D"200M" vm.kmem_size_max=3D"200M" in /boot/loader.conf and set maxfragbucketsize to 100 with sudo sysctl net.inet.ip.maxfragbucketsize=3D100=20 I executed five runs and each gave the same result. Therefore, based on my short test, it is indeed the maxfragbucketsize limit that is relevant here. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 10:02:55 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNtMM6vgxz5yq9V for ; Fri, 20 Jun 2025 10:02:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNtMM63WYz3GHS for ; Fri, 20 Jun 2025 10:02:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750413775; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=cTq2rsHvsFhcxV65M79OC+iCMEWaHr3+6wGkXt2Z1dI=; b=qfp7ZovPu1kq3RHbpqdfDPMsoPXhDHEIl3qP7FtbMx6q/pjxDFkrTs7A4RoIMXDXRwNPeJ j1dE6IJ9yN69GU7YhmOwhilH0LOBJYGJlHHbcyNB/tVxzxpeE2g7ehZ7C9b8iYPVgDorhG MrSgKxm24xtOYXCcxTFz50JEWBMbmffMPJikdLn9i3vs3adpfubEkNi7jJcfG3bqrZSI2/ zZLmBFN9BnnKKLxhnMZhguRmptks7mnI8eJ29vxkJWnPEbxtBoV/1++OaBGq2Y9DJrBZ8e FonGzTAAaeb2UJG8QfF7X3yFF1884UFqvUVXT7WWdbG+Mjg+q34qmWEy693k/Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750413775; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=cTq2rsHvsFhcxV65M79OC+iCMEWaHr3+6wGkXt2Z1dI=; b=faIjKb+4fOZms2cDwKRFpt53EZ1TjF7AK2PFVr8TD8dvwu8SBftw6kuiFTYUdNqu2TbsTm FHVVQsWobYy1lpofI7W0mlZLe2vC3KlfBXMu3xtfHgYnU77jSnBAsxKjZcTF9+nVgPZ9ZZ 9O2Wg3dXvYfmVxB6nYf+FH9qeIATAJDOXAjs2nlf9xNeU8BhxIs3IEQuLHeaaZbgk58dD/ iu81tNiHCwsr3kdfVG6FHWG3kyua2mFaW8KD0Pw52wzXtmmBPGk21gjfcqfxR58dcUNhd5 oz4lm6oz5AvrHojpZpqGB+rMzmiLvXwBHuRsZMJZ2JjCItApJfb1f8R8mrKF2Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750413775; a=rsa-sha256; cv=none; b=MCorwvkp1r20cA4RKRofx7NEJG1Ht8NTp68zqX9/sXCOsSrQjejZfo6AUDon8W4vb7aMQb 1zvL1+WZe3x+f0yCNnsojxkozH+7vTQ/VoBUni8DYeLqZCSOrSlzAqDXdRTwJ5qoa5cSop zTJGbQFr6O0T5LVXmD1op3/EsmgoEawbt0Y1xvZw+m4J1yXA/AHePTvYHDxds7JQtp87W5 RkFQ9TliZuEtd/gnRz6wlXC5oROdQ2+LZkO0KL/TcinDZEOxymMJJsDxMmLoXNkYC1hrjh BVSVoJ04RQ4orpQARrcSEfvgLfJDjXPwoJOhrLF0FtAGpIQlGb2aqnynkEITVA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNtMM5QGZzhPJ for ; Fri, 20 Jun 2025 10:02:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KA2t4T037193 for ; Fri, 20 Jun 2025 10:02:55 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KA2t8a037192 for net@FreeBSD.org; Fri, 20 Jun 2025 10:02:55 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 10:02:55 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: lucas.aubard@irisa.fr X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #23 from Lucas Aubard --- (In reply to Olivier Cochard from comment #17) I do not think inconsistent reassemblies in low-RAM scenarii are critical f= rom FreeBSD's perspective. As I mentioned in my initial message, I would not qualify this as a bug.=20 The goal of my message was to 1) inform you of such behavior (in the case y= ou did not already know) and 2) understand its cause. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 10:03:19 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNtMq1mRbz5yq8b for ; Fri, 20 Jun 2025 10:03:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNtMq0kgBz3HBj for ; Fri, 20 Jun 2025 10:03:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750413799; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bZZ7u2VyZHu3ta6ty23rRSnZd6ac/fIdZJoGFt89jP4=; b=LhGM8BWCQCuFs4KUXM6vo0GNN+uEwZreNUARDf+AcsuYqSOfGbtUTNmlC4zhl8TGy1tYYK hl5G3whrf2lVs2C//Lv/W45xyEB2E6EqiAAYgwkwu2kFGRNkynrjRtkFU9zbIuL82aDxG5 Jzb5G1b2xB+giiVyBUOvY/lrsNXjrKh6KGygsjNgicBylFfIb4eCAWYVfEX7kRe11yMVM3 i3+64/xDjJY49TRMeY/HB8jfibW8FmEEkH1Sv2U+QNA08oXu1Ca8UdEcsLcGtodN+ZQu0/ nV2zsrq+Ex0bemuqsvX8vCUH1gdBTuF+wglCyGMLjAeMuWrfdKCzbMiimdNDsA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750413799; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bZZ7u2VyZHu3ta6ty23rRSnZd6ac/fIdZJoGFt89jP4=; b=U+cImMDI0d1gNzEZB302k0PMnbU09VXdAZpDM5Zqwr4IxtU4laYoXCmLLT0r7qP/hU4EGk 7/mWKjjMyWsj1JB8OkWnfNW0LvCW+Pm3h89nAPINGVph6PndP2TZHJairaFDXMR25NOES0 ZaZTLegMFB1EAyHPsry6EUY0adeXvlp221igm+xk1vccJMiQ9Ni/QWPdQ1Pa8D8badzzno zn64RLnZJIZSUCc/GWuLvCZLvgeZ7g/sAdo8xb3/ifRE4alBOQvUj+DjWe613Q2/qunDbI e061B9SS1gSnm26VQmPKLbtiJAoNDY9QGhDWFo2JadNQDN1+Ptj9u8QvYCKYUw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750413799; a=rsa-sha256; cv=none; b=CT3qawW/Yxefgbn0hVnlwI0ye9DGrn36qa3Rt8cSPCkdlsvrY6aoWkJi5wWx5fU0NItzWf Z1iP41SSc0HfoMvPMfInJRa6r2KancLikCs4bHd4Tpq7YChwCOT0bV45NWhFyhgm7vWNbK ABXfF8XDHTqbZio0pjX+q+LDocV9UDu3mDzu+cAayhxNiv86JlScyOQRofmAgBWkh++N4O iAYoztWcrbo6+i5V7vFhNt+ymsWE/yEfMzNNQrJ7hrKUrKExX/eVokvi3UoaceZ3UQpxW2 v527f1NDJ1mptRWbeLcZMXooQuJY9eyoqhRAMBlMSkj+DHndUMNHW+3JXisjbw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNtMq0BSNzhK3 for ; Fri, 20 Jun 2025 10:03:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KA3Iol037688 for ; Fri, 20 Jun 2025 10:03:18 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KA3IEU037687 for net@FreeBSD.org; Fri, 20 Jun 2025 10:03:18 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 10:03:19 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: lucas.aubard@irisa.fr X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #24 from Lucas Aubard --- (In reply to Michael Tuexen from comment #18) Thanks for the details! We are currently working on Network Intrusion Detection Systems (NIDS) evas= ion with overlapping IP fragments or TCP segments.=20 Some NIDSes (Suricata, Snort) propose configuring their IP and TCP reassemb= lies based on the supervised host OSes as an evasion countermeasure to overlapping-based attacks. In that context, we test OSes (and other stacks)= to obtain and describe their reassembly policies so NIDSes can implement and propose them. >From a NIDS perspective, OS reassembly consistency is thus quite important. We recently wrote a paper on that subject https://arxiv.org/pdf/2504.21618 (that will appear at DIMVA'25) if you want more details. The 40 processes do not correspond to any particular real situation I would= try to reproduce. As I mentioned, I test OS VMs simultaneously if possible, and= 40 processes is a good tradeoff between the time it takes for the entire experiment to finish and the number of VMs I can run in parallel. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 10:03:50 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNtNR1KN1z5ypZG for ; Fri, 20 Jun 2025 10:03:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNtNR0t6cz3HQG for ; Fri, 20 Jun 2025 10:03:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750413831; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Kf7mbPPb1LhI9CynwzMAwxHlURUPDqoxa2xcx95St6Y=; b=Nd5LS9UYvnRhn2QT2AzFhgQRVl9ZsRXXFZm/G4VhlmNSsDLOQHztJRYqFYj9uufwwP7uHy p43zF0tKl1bP628Nvp0mlWWvA5ZOBK3XRxk9QESf2XzJ2roqxLqQ64TDTbwIf75+Pr0FBO Ks/KIry3QsM2UfOOugxIw2CQBkptW25xsNdL5TDeR5m+cWevEm4rRzzuzJjB6eNHUQ4Yyh qji2oC9OvYkyYghBCZMocgXOn5W1XuYjTKJXAbfoPy/oX2B/zR84zm2Sa4hyXjrQtSCSVc XLFSZzSJPDh6F24d3Yr5FuVYSSFO3iAjBkNnVIS0EcSbEslp4dGcuv2ou1xdYA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750413831; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Kf7mbPPb1LhI9CynwzMAwxHlURUPDqoxa2xcx95St6Y=; b=lL+xiELrfqtDOqM4rQ4l9k5/+YfaKOwKoimeqgF95O3uB6rBa1qXQRF6+LLOzBZVn1SmBZ Tl51u9wmhFKn21AywHIgzuKXKgW5oSWa2UQNt6KlVQgCf6irzsoEXBCzHQm6gT1HAyv6L2 5BPp4KUufEW3ei7L1VAuyLfNgkMwf3whv1NEZ2S0RYwnDxVuyuaDVnw2sjQqeboy7MG31P SNZOsnwQpz+P3CvucslLuqP9hsRmFLzO2ciErW2WnWgY8FjBgsPXxb9RtaDbViFxFwrinz ZjSe/YwbcgNPqMJYAjjKRJ98n0nYyRhsIFuqhloWWoMeuQf35EhGsZIu5mHIag== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750413831; a=rsa-sha256; cv=none; b=TtpnIE4T0XwMzBnSo/Svc3hlzPcDne0zaxR7LUHwbrHnknnAgLaM6q4Mb3miRbI6M+g/Fd 8CGbWVITMbmJxS4YChboWuPvZZzJnYLpykspRZIBDsTdoyXgtuCmkR3GeteDFbO1CrYFXK VbnQgOL5Nc2YOj/ua1Yo0jRC69cG9pviT0asQfwtuAO9LJbWgPIl1q8CEiidW3E/3F3KXv 8XuXdFmuqovbiZLgx9vcW2zY50HfXGAGNCjB+tXSEwoLJhQYT65ZGnm+v1GHkHOmwMQb24 XYPI7S1J5rwD5nPo3kLluvnZ+Cup5cnnZKIX0k7Bo1PO6m+QCWBL04wKWYO7dg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNtNR0TzLzhK6 for ; Fri, 20 Jun 2025 10:03:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KA3o23038257 for ; Fri, 20 Jun 2025 10:03:50 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KA3oMb038256 for net@FreeBSD.org; Fri, 20 Jun 2025 10:03:50 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 10:03:50 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: lucas.aubard@irisa.fr X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #25 from Lucas Aubard --- (In reply to Michael Tuexen from comment #21) With vm.kmem_size=3D"200M", vm.kmem_size_max=3D"200M", maxfragbucketsize=3D= 100, 40 processes in parallel (and the unmodified maxfrags=3D400), I still observe inconsistencies with the complete set of test cases on my side. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 10:59:55 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNvd80xHSz5ysmx for ; Fri, 20 Jun 2025 10:59:56 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNvd804Lxz3cjH for ; Fri, 20 Jun 2025 10:59:56 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750417196; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=xMBrxjHMaWPEgXlT8oJgmvpr8Wv6NLxq5uhGgD14j/w=; b=Yrxo8ip0r12+YbI084ZkhZkNhbWARBT+079SiFizJnJGwL89MtdLQjmPn8eOrLCB19ZJVT f7pFuXiL9/KCxZl1bMUL5QqszTZ7pgL6kRk1hfhGFiFrD+8zRGhjc7R58dXkuKv3qPYjnD Wh3HdXYaFhhs83Bg+IVsS7/RE+u1PfEv9bBaUeALFjjoDvE2Pop7VDLyAq+vTvX8gTFZQs nrF7do8l+vuTaqj9E08T4MSGCeUkFVKCCx3sy4Er8qQhVfB4iA/DB5zs3DKuvnRcRaJ2iv /+8cB9K7yd0ZMHTOrEtUBYGz5ltNFv6PKgx/2Dk6r7+lqEHcDooQta78OTeiRQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750417196; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=xMBrxjHMaWPEgXlT8oJgmvpr8Wv6NLxq5uhGgD14j/w=; b=mnXpvAfgzBUeXjaKwUBR5vZ4zlKvp2AMWnCB0M3mLcmhEsXvKp/k0WbE/Li3+704yHRKDu IxNPwy3QrxN3Y+6jPWZEiqvl5V1itMDFbwcVDG0hGM1aiv3pHnQBeDXhqgVVyxAJzAeSHt kSsTbqy6bENu2EDZldskWG/WXD2oy8XgqjlW6ziuKX+/vTl0ccfOqQQtIqjmji8ZdnzuEg oOjinegBq0saof963BZeKqiL8AjuX/5LIVq1add04RczeR659RgY7TwXUx0AuHBI2OA0HB zKiovuxyVu6e5n5Wll7URYz+lnBDzdlzMSJIxv/WwVA/FOpjad66gtOup0Y/9A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750417196; a=rsa-sha256; cv=none; b=HwNLmojFEYDystajY5UMH2nFNHMtASkaLc59pF6yeMvTYgxuyWZBKC8453l5IeF0feHsp7 l8i3ukvPomMGzOJcUeB2YCAj3iPphamVZe+LMc2xYaeBKbGAm/91E1Qzamq4xmdOCtOixD 89p3rqXGnl0N0VbMeRsPW3iEut+v48cQp6AUvVy6+1DBDy/dTzNb+4nW1IWBXks5pv82S3 HqEBa8Egn6rSzO04ybMFp9jPW8yBN/zWMDLce67wNSwigLBuZiWdhgZzsffLO3e7HH5G05 KkRMQMdf4IY9PHJtARLrFLv3l8+adBIelmfj/nff9SUZLLag5o4GpDQLDHBGyQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNvd75ygrzjB7 for ; Fri, 20 Jun 2025 10:59:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KAxthp051375 for ; Fri, 20 Jun 2025 10:59:55 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KAxtia051374 for net@FreeBSD.org; Fri, 20 Jun 2025 10:59:55 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 10:59:55 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #26 from Michael Tuexen --- (In reply to Lucas Aubard from comment #25) Just to double check: The following is in /boot/loader.conf vm.kmem_size=3D"200M" vm.kmem_size_max=3D"200M" The following is in /etc/sysctl.conf maxfragbucketsize=3D100 These are two different files. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 11:48:57 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNwjj38wDz5yw1Q for ; Fri, 20 Jun 2025 11:48:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNwjj2VqJz3t2t for ; Fri, 20 Jun 2025 11:48:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750420137; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=gEU0G3Zpc3vUR3fd2APl1FLpVvFIbA1aDrYyMgBsaOg=; b=CSecZy+LWc3fGeQUjA2cNmC/VeNjdoyAFuVqpF+bzwHMGgj7kr0SzNf8wpNQO4On27KOGM 6U97k/iWe2b/zW7vOo6hm3jiQAO8gd3QsMVBERwMWKUeLRZ9gdPbExlRUcmz+/ilaR/u+x z4o/LRmgEEaTUqghSgDvq3o/GWEPs3E579jcQhRmPa6wAtS7VXv50oBngFQSzBUsBl/HJs SkPMMZFgY3KBW2owZcWtJQCPHrB1YDAnMWA4wkaTSi8YQ4RHvkLeNGq0hW4qpikcyYHuqb 2uFaQI35SK21+SPvdzGPHo/QFhuWySQEgWoQIeOstC3vdF2cYfPT/gfnn27Eow== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750420137; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=gEU0G3Zpc3vUR3fd2APl1FLpVvFIbA1aDrYyMgBsaOg=; b=guffjJPrQqme6HsBAomymtI0VopEaUTmkM9SRdYxDQLMVgZz5ZToIT5UhdNNPLFMJOOrsm 3rksR11/j2UxehUClr90G9YLmendnOdA9SpXntOe0NREs1/dyndHO0Yk+5nSwxfJB3xZ4p BYMsZEwe3y5nfsMnAnw2mRor/9HpbR8WjntXdMVfXIfBEUsGuipRs+39GPQz13GITFwJC2 7mvMsuDsjBEJgzoW2Hufx678T/RU9aI61s5n1hF3h/X2lBxr/qCZRaqCREG/PK5d38XEYQ +ZoFaAwb1ttAoUfedrwPChfUqYcDKoe5BVc3B+oo8GnmnpazxhJitT3j2lBuKw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750420137; a=rsa-sha256; cv=none; b=K1N59CIHa1Mg17aUyL03AkrP44+kBs1s8Dxn8CRNuflcnq/urRp9HosULvtY9nFowCdHLr E4tkLPrpzLZBPFE+zyc7NqHFVpe2QfhbzbSdheT8QeRmx1HINLL3FfVTFm0Cc62+l+K3hT o5qKr95njjGeYiosKHo0xBZjFyvOROBQ9Nev9UbxnKqRKlE/2hLYDhiEBeAatH3/zDPYW7 orF8QLtSWjK2B/QJaVDYrBkubZf4pkANUeQVKGatY6WFn/RYvR64QiLq2QFtuKmFonI6cP VY/am05XJySNVeoDnby4voreSDhg07wQXR70rVhBAczDG9J1sRSGkitJfbqfjg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNwjj25QrzkR7 for ; Fri, 20 Jun 2025 11:48:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KBmvbD054631 for ; Fri, 20 Jun 2025 11:48:57 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KBmv0M054629 for net@FreeBSD.org; Fri, 20 Jun 2025 11:48:57 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 11:48:57 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #27 from Michael Tuexen --- (In reply to Michael Tuexen from comment #26) You to be precise: You need net.inet.ip.maxfragbucketsize=3D100=20 in /etc/sysctl.conf --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 11:59:18 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNwxf4yJ0z5ywbc for ; Fri, 20 Jun 2025 11:59:18 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNwxf4DHTz400S for ; Fri, 20 Jun 2025 11:59:18 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750420758; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0rk6RFFK0pL/KnAEeKUBkxMmRdBqUIjRv1PztiAnXx8=; b=Yt77NtAFWbqmx0zz9Qe/trUm4f/6S0i8ynYrOAECrjyZWwQmjKEv5NkyOkJYbuDsaCmhDy ajfUBqN1VKSlnztI4/9Wn1/KB8Yvu4RVVcIQqtRFKxoTia9nEOPot5+jdIYCY58kKiuDnE nphm5OJwuVhKD4Us/nkPBImlxqDS8OuM8dH/xn90I9M9HlitrQHpk1cxAC0gYQXxqTs2YJ lOuvfIHYwGcWdgpnO0coenxm/7rSrBVW/f673qEANpfa06Ro4oDT5ZjTYzih3jrqPGhckK g17XZVXCLxRigyOONeTHyoioooH7hObTbNtKPQutzAn8ZfcaMLQW4oSHgekH9A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750420758; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0rk6RFFK0pL/KnAEeKUBkxMmRdBqUIjRv1PztiAnXx8=; b=x86k0T3BAo4JSqVypq20GOAlq+A5+SYIAX8NyDaKrSoGOzNeDRtv+7CjDKu/KWsuYPGl4i v3xas9ZFLH7OKtSYg4nw22aa/YXzlJweoK5f4glqwCzivkp0IHgxoyw3CUysm0xxzH4HzK rTH3iEyGCGKzlsV2ECBb9KwJWrwXK1gkZCtckgR/AJFbu1CkekJgNJJ+y83J2bJJ8m6HGt OoiSc+K1wTECFfqQRxxzlgrrEfxOOKjGeOJ40R+7ZeZPc5goxJekbGRSY/RUi7q2OBmCPy ijnFHbTnqBzX3BoTUKbZex2FN9TFl8MNjcYUd6VV+QHrYusnHeYoeidUMSAydw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750420758; a=rsa-sha256; cv=none; b=gIlu6Y3WGKP+GsujGfCzBrLN6t2w4+sDxLuECOFROI3MJ2gYqy1B1eeCNIb/pUDJRt5khS bxTDL9AX6rCZq4/mVXKRprXUA8avdns0RIqHqwvsflVCLnxItKxCk+xCTUL6j3RnvOJ/Vi L481FZ+8cem4xRskZEom+dO3repTBJTZsX9hE75K+M7VKDUIw8WvvTH1NqSdfdDjg1vNaX 8huHbbDRBzKzJsOEVWnAkovo/oD+tazUhftTTMWW05/NrZCaGWgGJkEzUOStO4Czqlc+td 7VTlmV6Zxd7X+FzF4OyiYg34LxtiJQUmi7lR5/ruPB4YEoitHYsgwv8R4vqNQw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNwxf3M79zkGL for ; Fri, 20 Jun 2025 11:59:18 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KBxI7n078833 for ; Fri, 20 Jun 2025 11:59:18 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KBxIIS078832 for net@FreeBSD.org; Fri, 20 Jun 2025 11:59:18 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 11:59:18 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: lucas.aubard@irisa.fr X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #28 from Lucas Aubard --- (In reply to Michael Tuexen from comment #27) Yes, exactly:=20 - vm.kmem_size=3D"200M" and vm.kmem_size_max=3D"200M" in /boot/loader.conf - net.inet.ip.maxfragbucketsize=3D100 in /etc/sysctl.conf --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 12:47:05 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNy0q16SFz60067 for ; Fri, 20 Jun 2025 12:47:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNy0p72rjz3CT6 for ; Fri, 20 Jun 2025 12:47:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750423627; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=owTQjgzRhJw2smHYLvUR2dELJtlNUhQYMAILGULbJeg=; b=GmB5Xk2SS8d+jMRze8CpaqE1nqjcgORq5fB3ACjay+vRjVgSnmAQOGxk13WU8q1x+OHmgI AQ0n+ARfxIFZOb5qqBSN2XvL+4cxE3J+djpNn7Hp2Uw1/eii92Glu0tpLQppJkxGc01A8A ya6EE8N+7qmh2q45ZXmsJ9FKlMg1t7czWHkmArl/hOlFLedL2YmLBFlv2reLp4wjhCLlcl PG4My2xArNswjl7GEYDoEaSPxCdLP1XTlyKh/Db2YUtEnT3zF8nVIulJqD3OEgBmQjLmDL QKxrNgaKFZ7rQTLENKP1RRusr0cnv0j/if+/GimHXMN6NLrah/GI4O8WA8gtOg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750423627; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=owTQjgzRhJw2smHYLvUR2dELJtlNUhQYMAILGULbJeg=; b=m8BeNupijKBF+U+dlvX3ikqybGihq01uJhdvuio0AuJcrkzOW+uxAWfyCu2tlBvGp0hhdK iCrMOkIlwu34YLxZUpa1O90C6MfEuoAJO26d89dCbz+kVxiKeQsMwNzBoNQrzJhocvNPpo bsBysD/hJd+SzzJgMvq5yucxuM7XmkjaTeuzRPemEbvX+QN92wWwxgHdSfBEhzY0HilZ75 17QECWeovJoUjLQFM7kUTKCHiCCQmApFCZzCd/VNW3EwZ7iZaBPOu7e1bf4ziYeGP8dFYf IeYrNMinOgkcyBVRChIWR3WLC5oLwXY9yBl4g44Vng+3a2wgJABVDUiNTpbu7w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750423627; a=rsa-sha256; cv=none; b=AUumzQi0RJDQ0pyaRwJd1/TiDkWaLxHgmmgkvX0A5Ir85wMJ+pb8V/D2EO4f+lqZbc6NBF woujQ5ZCTw0cX30x/1b+p8KF3Y5xOrYb0fqrlROREIBn7T9ThVVIJDIaNDQfxnKfqu6lXP 9mEF0BffSmc+eU9FY2uPELP1JNPBTOf6Cv7sQ7gFiDjIvUgR3Sd7XYZ5jylDMzt/HcAO+Y pM1MtZvvAwTiOfYxQ33gOy4MzmHjFdLLnhAk+WzllbfLx3OT5sQjLSBDzpAiudk2OkBR7f oZMRmKy82H4jbXwfO6K2FP5E0RZsHhD2CqNECM9b1gzNNw2h+U4SNq8Mb+XKGg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNy0p6MzLzlqG for ; Fri, 20 Jun 2025 12:47:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KCl6us079837 for ; Fri, 20 Jun 2025 12:47:06 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KCl67n079835 for net@FreeBSD.org; Fri, 20 Jun 2025 12:47:06 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 12:47:05 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #29 from Michael Tuexen --- (In reply to Lucas Aubard from comment #28) Strange that there is a different results between you and Timo... What is the output of netstat -spip netstat -spicmp after a single run of your tool? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 13:24:42 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNyrL4fK9z6020k for ; Fri, 20 Jun 2025 13:24:50 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNyrK3pdSz3PKY for ; Fri, 20 Jun 2025 13:24:49 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net; dmarc=pass (policy=none) header.from=denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id 07D06B11E6 for ; Fri, 20 Jun 2025 09:24:46 -0400 (EDT) Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 69B531F7648 for ; Fri, 20 Jun 2025 09:24:43 -0400 (EDT) Message-ID: <5f4fe904-dda8-42d8-8325-dd3bb0403df8@denninger.net> Date: Fri, 20 Jun 2025 09:24:42 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: dhcpcd(8) into FreeBSD base To: freebsd-net@freebsd.org References: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> <1188806329.62817.1750321263908@localhost> Content-Language: en-US From: Karl Denninger In-Reply-To: <1188806329.62817.1750321263908@localhost> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms020407020206010002090201" X-Spamd-Result: default: False [-1.71 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_SPAM_LONG(1.00)[1.000]; NEURAL_SPAM_MEDIUM(1.00)[1.000]; NEURAL_HAM_SHORT(-0.91)[-0.910]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; R_SPF_ALLOW(-0.20)[+mx]; MIME_BASE64_TEXT(0.10)[]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; FREEFALL_USER(0.00)[karl]; MID_RHS_MATCH_FROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; R_DKIM_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; HAS_ATTACHMENT(0.00)[] X-Rspamd-Queue-Id: 4bNyrK3pdSz3PKY X-Spamd-Bar: - This is a cryptographically signed message in MIME format. --------------ms020407020206010002090201 Content-Type: multipart/alternative; boundary="------------5AaCHjXlqI3INRyz044jDCix" --------------5AaCHjXlqI3INRyz044jDCix Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gNi8xOS8yMDI1IDA0OjIxLCBSb25hbGQgS2xvcCB3cm90ZToNCj4gSGksDQo+DQo+IEkg ZG9uJ3Qga25vdyB0aGUgZGV0YWlscyBhYm91dCB5b3VyIHNldHVwLCBidXQgSSB0cmllZCBk aGNwY2QgaW4gbXkgDQo+IG5ldHdvcmsgbGFzdCBmZXcgbW9udGhzIGFuZCBJIGVuY291bnRl cmVkIHRoYXQgaXQ6DQo+DQo+IC0gcnVucyBmaW5lIGluIGEgMTQuWCBqYWlsIG9uIGEgMTQu WCBtYWNoaW5lIChSUEkzQikgZm9yIGJvdGggSVA0IGFuZCANCj4gSVA2IPCfkY0NCj4gLSBp dCBkb2VzIG5vdCB3b3JrIHdlbGwgb24gYSAxNC5YIGphaWwgb24gYSAxNS54IG1hY2hpbmVz LiAoUlBJNCkNCj4NCj4gVGhlIHN5bXB0b21zIGxvb2sgYSBsb3QgbGlrZSB3aGF0IHlvdSBk ZXNjcmliZS4gU29tZXRpbWVzIGl0IGdvdCBhbiANCj4gYWRkcmVzcyBhbmQgYSBkYXkgbGF0 ZXIgaXQgd2FzIGdvbmUgYWdhaW4uIFJlc3RhcnRpbmcgc29tZXRpbWVzIA0KPiBoZWxwZWQs IG9mdGVuIGRpZG4ndCBjaGFuZ2UgYW55dGhpbmcuDQo+IFVwIHRvIHRoZSBwb2ludCB0aGF0 IEkgc3RhcnRlZCByZWFkaW5nIHRvIGNvZGUgb2YgZGhjcGNkIGFuZCANCj4gZW5jb3VudGVy ZWQgdGhhdCBpdCB3cml0ZXMgYSBsaW5lIGluIHRoZSBsb2cgYWJvdXQgZ2V0dGluZyBhIGxl YXNlIGFuZCANCj4gdGhlIG5leHQgc3RhdGVtZW50IHdhcyBzZW5kaW5nIGEgcGFja2V0IG91 dCBvbiB0aGUgbmV0d29yayBhbmQgSSBuZXZlciANCj4gc2VlIHRoYXQgcGFja2V0IGluIHRj cGR1bXAuDQo+DQo+IEFueXdheSBvbiB0aGUgUlBJMyBJIHN0aWxsIHVzZSBpdC4gT24gdGhl IFJQSTQgSSB3ZW50IGJhY2sgdG8gZGhjbGllbnQgDQo+ICsgU0xBQUMgYWZ0ZXIgSSBwdXQg YSBsb3Qgb2YgdGltZSBpbiB0Y3BkdW1waW5nIGFuZCB0ZXN0aW5nLiBNYXliZSBpdCANCj4g aXMganVzdCB0aGF0IDE0IHVzZXJsYW5kIGRvZXNuJ3QgbWF0Y2ggZW5vdWdoIHdpdGggMTUg a2VybmVsIHRvIGRvIA0KPiBCUEYvZGhjcC4gQnV0IHRoYW4gYWdhaW4uLi4uIHdpdGggZGhj bGllbnQgaXQgd29ya3MgZmluZS4NCj4NCj4gSSBkaWRuJ3QgcnVuIGRoY3BjZCB5ZXQgb24g dGhlIGhvc3QgT1MgeWV0IGFzIEkgd2FzIGZpcnN0IHRlc3RpbmcgaXQgDQo+IGluIHRoZSBW TkVUIGphaWxzLg0KPg0KPiBKdXN0IG15IDIgY2VudHMuDQo+DQo+IFJlZ2FyZHMsDQo+IFJv bmFsZC4NCj4NCk5vdyB0aGF0J3MgdmVyeSBjdXJpb3VzLg0KDQpDb3VsZCB5b3UgKHdoZXJl IHlvdSBjYW4gY29udHJvbCB3aGF0J3MgZ29pbmcgb24gd2l0aCB0aGUgb3RoZXIgZW5kLCAN CndoaWNoIEkgY2FuJ3QpIHRyeSBhZ2FpbiB3aXRoICJub2lwNGxsIiBhbmQgIm5vYXJwIiBh bmQgc2VlIGlmIHlvdSBzdGlsbCANCmdldCB0aGUgb2RkbmVzcz8NCg0KSSBoYXZlIGEgc3Vz cGljaW9uIHRoaXMgaXMgdGhlIGNhdXNlIChmcm9tIHRoZSBkb2NzICJub2FycCIgc2hvdWxk IGJlIA0KZW5vdWdoIHRvIGRpc2FibGUgYm90aCwgYnV0IG5ldmVyIGh1cnRzIHRvIHN0aWNr ICdlbSBib3RoIGluIHRoZXJlKSAtLSANCmFuZCBpZiBzbyB0aGVuIHBlcmhhcHMgZGVmYXVs dCBiZWhhdmlvciBzaG91bGQgYmUgY2hhbmdlZC4NCg0KLS0gDQpLYXJsIERlbm5pbmdlcg0K a2FybEBkZW5uaW5nZXIubmV0DQovVGhlIE1hcmtldCBUaWNrZXIvDQovW1MvTUlNRSBlbmNy eXB0ZWQgZW1haWwgcHJlZmVycmVkXS8NCg== --------------5AaCHjXlqI3INRyz044jDCix Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On 6/19/2025 04:21, Ronald Klop wrote:=
Hi,

I don't know the details about your setup, but I tried dhcpcd in my network last few months and I encountered that it:

- runs fine in a 14.X jail on a 14.X machine (RPI3B) for both IP4 and IP6 =F0=9F=91=8D
- it does not work well on a 14.X jail on a 15.x machines. (RPI4)
The symptoms look a lot like what you describe. Sometimes it got an address and a day later it was gone again. Restarting sometimes helped, often didn't change anything.
Up to the point that I started reading to code of dhcpcd and encountered that it writes a line in the log about getting a lease and the next statement was sending a packet out on the network and I never see that packet in tcpdump.

Anyway on the RPI3 I still use it. On the RPI4 I went back to dhclient + SLAAC after I put a lot of time in tcpdumping and testing. Maybe it is just that 14 userland doesn't match enough with 15 kernel to do BPF/dhcp. But than again.... with dhclient it works fine.

I didn't run dhcpcd yet on the host OS yet as I was first testing it in the VNET jails.

Just my 2 cents.

Regards,
Ronald.

Now that's very curious.

Could you (where you can control what's going on with the other end, which I can't) try again with "noip4ll" and "noarp" and see if you still get the oddness?

I have a suspicion this is the cause (from the docs "noarp" should be enough to disable both, but never hurts to stick 'em both in there) -- and if so then perhaps default behavior should be changed.

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------5AaCHjXlqI3INRyz044jDCix-- --------------ms020407020206010002090201 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwNjIwMTMyNDQyWjBPBgkqhkiG9w0BCQQxQgRAWKOhau5+LFr+ SL8mmsUppn/4KSbYtKJ1J1EjcZo5ryX9rUVZG18DsqYaofyWsOARu9o8kaWSGRIfKuP3YcSR /DCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICABZHix/tl0K1LuFL oEv+K7UcaQLXxZpD9mxOkeQmADqbxs3sfZ2qzd9x+AViD3Ak85PHhYYY+Nc0pTsXqZpi5WTW Lymb3xMqslPmeNjgdNW9OwY4/YosqkCSQZO2A2Fph28GKZLIY2wIex7p1B44H29Z/zI6lN7h h4czHDVwXJDEEVbEoBI5NPuqnLHGgJeBtHTm1mCzC8KEXv28XoiPQm7roQcQT+jJJMS3sUen 8PMb04wlD9Ovzwmt9FjVcUg3YM2FGGMJdWsXOiEw4LLf33rpB9HHA1D+acHpXfVeRYogfBva q6ya0DBYD9y5UMkBacuxl9Z+pkexPNYJHJbHYQQIfcRYQ2oq2/3aJazG4/WC7EQIagPvZrHY CpCz2H4uvMbZs+XUD42uL4dpskdke08xMpY6boHWKXJL9WyFiS10RDNrvUh6N/pzedHLvgnr R9pmiwzvVsrgTDPVE9tWT/MukYl7BFu6mblyFZP3UWbwrxUFYQWWSVGWwZTXAmgVG8I0qlIw rp4h8t3hqPTbypG+FReSJM5M0U0oXcQmArjKPgDkoRMEu444rZP+XGMEFl6E6bf9EamaNbD/ tU689s75f5qwwamtYlzIkot5QZutAHLjVAGtmw9FXxn33Q+AMEEX3uCEOby0CrurWWkO0f12 /eJmNdWZ6pFiNmG8hQ4cAAAAAAAA --------------ms020407020206010002090201-- From nobody Fri Jun 20 13:43:51 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNzGM0sQFz602kr for ; Fri, 20 Jun 2025 13:43:55 +0000 (UTC) (envelope-from SRS0=UZb3=ZD=klop.ws=ronald-lists@realworks.nl) Received: from smtp-relay-int-backup.realworks.nl (smtp-relay-int-backup.realworks.nl [87.255.56.188]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNzGL5btbz3V9H for ; Fri, 20 Jun 2025 13:43:54 +0000 (UTC) (envelope-from SRS0=UZb3=ZD=klop.ws=ronald-lists@realworks.nl) Authentication-Results: mx1.freebsd.org; none Received: from smtp-relay-int-backup.realworks.nl (crmpreview2.colo2.realworks.nl [10.2.52.32]) by mailrelayint2.colo2.realworks.nl (Postfix) with ESMTP id 4bNzGH4vjsz6g; Fri, 20 Jun 2025 15:43:51 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=klop.ws; s=rw2; t=1750427031; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=sQsUHKcQ+bkbf0q8c0xxKUNjOHpJgi+jelgxf6efnHw=; b=LURlGY8jZZejZsdZMUDqJeGVziNfDfHcHDW3/jttFE6q8JJb8IqqfW85eTTuFQqge5BLrT LuwHugPimj2FDr4s7OCtt6E+g0KsmtTS0oaTMHq1PnYBBmsOKbE8b8j1Iu83ZrQI2JD1se Rrwsk0/r/TVte50jJ8TtRaElAqEbk+wdy5A6pnQmH8qS3zogsF8xACrdsLQad+RBDttcV4 vmDi6ziM4qPE9u98AKCxSvUrIilriR2j3NniRHgHNED93e3SVD8FKHxiFuuraTAoPa1AEg CY7A5Hj3ruUdRAtRXi9QmJ8Vf4jT/Go/oHZlvhViM7gpyukgkJ5KiNJcmYL7xw== Received: from crmpreview2.colo2.realworks.nl (localhost [127.0.0.1]) by crmpreview2.colo2.realworks.nl (Postfix) with ESMTP id 501D22611D0; Fri, 20 Jun 2025 15:43:51 +0200 (CEST) Date: Fri, 20 Jun 2025 15:43:51 +0200 (CEST) From: Ronald Klop To: Karl Denninger Cc: freebsd-net@freebsd.org Message-ID: <549425506.8980.1750427031217@localhost> In-Reply-To: <5f4fe904-dda8-42d8-8325-dd3bb0403df8@denninger.net> References: <18ff2d4772a.129dde187836962.5411001908566459400@marples.name> <1188806329.62817.1750321263908@localhost> <5f4fe904-dda8-42d8-8325-dd3bb0403df8@denninger.net> Subject: Re: dhcpcd(8) into FreeBSD base List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_8979_847187254.1750427031055" X-Mailer: Realworks (753.38) X-Originating-Host: from (83-81-212-149.cable.dynamic.v4.ziggo.nl [83.81.212.149]) by crmpreview2.colo2.realworks.nl [10.2.52.32] with HTTP; Fri, 20 Jun 2025 15:43:51 +0200 Importance: Normal X-Priority: 3 (Normal) X-Originating-User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:139.0) Gecko/20100101 Firefox/139.0 X-Rspamd-Queue-Id: 4bNzGL5btbz3V9H X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:38930, ipnet:87.255.32.0/19, country:NL] ------=_Part_8979_847187254.1750427031055 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit I have tried the "noip4ll" and "noarp" option. Didn't change anything. My issue ended up that dhcpcd said in the logs it would sent a dhcp packet (the port 67/68 thing), but nothing appeared on the network. And so the lease timed out after a long time and it removed the IP address from the interface. Ronald. Van: Karl Denninger Datum:vrijdag, 20 juni 2025 15:24 Aan:freebsd-net@freebsd.org Onderwerp:Re: dhcpcd(8) into FreeBSD base > > On 6/19/2025 04:21, Ronald Klop wrote: >> Hi, >> >> I don't know the details about your setup, but I tried dhcpcd in my network last few months and I encountered that it: >> >> - runs fine in a 14.X jail on a 14.X machine (RPI3B) for both IP4 and IP6 >> - it does not work well on a 14.X jail on a 15.x machines. (RPI4) >> >> The symptoms look a lot like what you describe. Sometimes it got an address and a day later it was gone again. Restarting sometimes helped, often didn't change anything. >> Up to the point that I started reading to code of dhcpcd and encountered that it writes a line in the log about getting a lease and the next statement was sending a packet out on the network and I never see that packet in tcpdump. >> >> Anyway on the RPI3 I still use it. On the RPI4 I went back to dhclient + SLAAC after I put a lot of time in tcpdumping and testing. Maybe it is just that 14 userland doesn't match enough with 15 kernel to do BPF/dhcp. But than again.... with dhclient it works fine. >> >> I didn't run dhcpcd yet on the host OS yet as I was first testing it in the VNET jails. >> >> Just my 2 cents. >> >> Regards, >> Ronald. >> > > Now that's very curious. > > Could you (where you can control what's going on with the other end, which I can't) try again with "noip4ll" and "noarp" and see if you still get the oddness? > > I have a suspicion this is the cause (from the docs "noarp" should be enough to disable both, but never hurts to stick 'em both in there) -- and if so then perhaps default behavior should be changed. > > -- > Karl Denninger > karl@denninger.net > The Market Ticker > [S/MIME encrypted email preferred] > ------=_Part_8979_847187254.1750427031055 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit
I have tried the "noip4ll" and "noarp" option. Didn't change anything.

My issue ended up that dhcpcd said in the logs it would sent a dhcp packet (the port 67/68 thing), but nothing appeared on the network. And so the lease timed out after a long time and it removed the IP address from the interface.

Ronald.

 

Van: Karl Denninger <karl@denninger.net>
Datum:vrijdag, 20 juni 2025 15:24
Aan:freebsd-net@freebsd.org
Onderwerp:Re: dhcpcd(8) into FreeBSD base

On 6/19/2025 04:21, Ronald Klop wrote:
Hi,

I don't know the details about your setup, but I tried dhcpcd in my network last few months and I encountered that it:

- runs fine in a 14.X jail on a 14.X machine (RPI3B) for both IP4 and IP6
- it does not work well on a 14.X jail on a 15.x machines. (RPI4)

The symptoms look a lot like what you describe. Sometimes it got an address and a day later it was gone again. Restarting sometimes helped, often didn't change anything.
Up to the point that I started reading to code of dhcpcd and encountered that it writes a line in the log about getting a lease and the next statement was sending a packet out on the network and I never see that packet in tcpdump.

Anyway on the RPI3 I still use it. On the RPI4 I went back to dhclient + SLAAC after I put a lot of time in tcpdumping and testing. Maybe it is just that 14 userland doesn't match enough with 15 kernel to do BPF/dhcp. But than again.... with dhclient it works fine.

I didn't run dhcpcd yet on the host OS yet as I was first testing it in the VNET jails.

Just my 2 cents.

Regards,
Ronald.
 

Now that's very curious.

Could you (where you can control what's going on with the other end, which I can't) try again with "noip4ll" and "noarp" and see if you still get the oddness?

I have a suspicion this is the cause (from the docs "noarp" should be enough to disable both, but never hurts to stick 'em both in there) -- and if so then perhaps default behavior should be changed.

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]
 

  ------=_Part_8979_847187254.1750427031055-- From nobody Fri Jun 20 13:54:03 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bNzV41JQbz5y42j for ; Fri, 20 Jun 2025 13:54:04 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bNzV36wW5z3cDV for ; Fri, 20 Jun 2025 13:54:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750427644; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=utdybb+NQLEKoCZ9S0PTX3yNfsqvneuToK5GQYIIsQI=; b=Jhznilbszy4Ejh19QPkl2q/sGjmarS1aNjfxjnQQnIsW+U+P7eot4z07MMQY8jwcR9i+Jg 1Moit4FcGc/IEJj/W32sbJCcKAk+CBZLubjnfkAM4E2tIQPtyZboY6ZcHbDg0JMgEX3zsI v1odhNpW+/6pnAhh2TrPitT0oR0QVarWLhNmlis1IahrXglARiD2AYVvCGaZCYVhyUsTHz M5h6TxLw/E1v8yM7k3cO8FEV1cfsEijanCepjQHbmD5c5CoE7YLRP8C46ZvfW0LCHJeVPd dPR5mUivuFctBoxf6LGfY4NppmDFbRImNtE8atnS5t5eTu1rQBlhJEXphyPh8A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750427644; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=utdybb+NQLEKoCZ9S0PTX3yNfsqvneuToK5GQYIIsQI=; b=AO/yfKYFzQA8Vmpe/7/wY/977357hcT2iorGajCV2+HzokufQUno5HAXcmUajKnEPREIIB JAa6/o+7HQZs0dD+M/hiwdZjrikC4kK7HhtfQUsu84ZFrzFeMFHD+Uw3/rg95/zZ/cgJiD xGWIn20g2hkIPoQysp4e/p7VglIl5XvERQur1fr2RUvzGKBErMhlkhjriTy9KwRlDBo/kc e1FD6lnKtvZtBGqtoCb/g8hpPbuJpw6RyztobJ/MOPzMrZNpn+nap76FPyRRnqjA5QnjlG nSfLGGOR56J5baGnmRPPU+ezh3r3jLmausX+wpz+KCaL96+rfV4pe54d02yGJQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750427644; a=rsa-sha256; cv=none; b=Ea6JAV6pd/nyQJWOKH9MDEt6Fd0NucODD4jSIZfucjpUN831jHWvKcI5FILrCLtz/9WkUh edT3nR01RkVj7Wtx/TBZGj9tjz2kxVoJg5vZGx2UVBFwhuJ/870+iLj10SauzwXxlwkFAp krIemnk2XP9aGjkqPQUgXlbOXTNrGkh9Y15VsPpoHBGgxi/B3TPTCoG37noq4gCJajrLbA z3KPDQYS7jwSjncY6Z9ohKT1vgxHyGyiG6Z6L45j3zDbcigo8GBDEWYq7U2b5kIzkm6S1l RGu91lRdBjJyLXMiBiJzxvvNI9ZcIj/DnWrnDea89Deg7T7fWfV1bqWHMyLVdA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bNzV36GTmzp7D for ; Fri, 20 Jun 2025 13:54:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KDs3oP011822 for ; Fri, 20 Jun 2025 13:54:03 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KDs3d5011821 for net@FreeBSD.org; Fri, 20 Jun 2025 13:54:03 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 13:54:03 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: lucas.aubard@irisa.fr X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #30 from Lucas Aubard --- (In reply to Michael Tuexen from comment #29) I guess the different output is because Timo tested only a subset of the te= st cases (844) while I tested the complete set (10,362).=20 It may also come from the parallelization level (?). Here are the outputs of the commands after 1 run. ip: 42463 total packets received 0 bad header checksums 0 with size smaller than minimum 0 with data size < data length 0 with ip length > max ip packet size 0 with header length < data size 0 with data length < header length 0 with bad options 0 with incorrect version number 41663 fragments received 9076 fragments dropped (dup or out of space) 12270 fragments dropped after timeout 6513 packets reassembled ok 7312 packets for this host 0 packets for unknown/unsupported protocol 0 packets forwarded (0 packets fast forwarded) 1 packet not forwardable 0 packets received for unknown multicast group 0 redirects sent 7153 packets sent from this host 0 packets sent with fabricated ip header 0 output packets dropped due to no bufs, etc. 0 output packets discarded due to no route 0 output datagrams fragmented 0 fragments created 0 datagrams that can't be fragmented 0 tunneling packets that can't find gif 0 datagrams with bad address in header icmp: 0 calls to icmp_error 0 errors not generated in response to an icmp message Output histogram: echo reply: 6805 0 messages with bad code fields 0 messages less than the minimum length 0 messages with bad checksum 0 messages with bad length 0 multicast echo requests ignored 0 multicast timestamp requests ignored Input histogram: echo: 6805 6805 message responses generated 0 invalid return addresses 0 no return routes ICMP address mask responses are disabled --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Fri Jun 20 15:29:51 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bP1cb4YBnz5y9wP for ; Fri, 20 Jun 2025 15:29:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bP1cb3QQqz4NCt for ; Fri, 20 Jun 2025 15:29:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750433391; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=l9fOGhp4KU8WmEadmtxWRlMZqZRThdcjJkjpIM0VKfE=; b=G3XOfkp5KsHlvFVIlWPyXRazzmVkcqtCrZ+ykedF0v5VSFcF/Rk1r1Z6UxwiC5ftuDovrF +iQCWPaMIqsnodBjD6a6qqsSx0krQcF4/03ze7tp6CKs5bMQe/EllWhrVo4/hulyWHyNp1 OQE0Rx1ez3kAO6FZw1XoCqEUCi8dcCE6nCYqXRPnndLPiELOo4mTfqMQx5asMoHkg89O8C bpFL1+9Rixh/SJBcA0288FYIA1JD6SXOFOMVuQM/pk9PsFwB5B8rUvzAQUMPmzT6a4P23M 0cM6ixWZlcducQVqMdJmfA2qA3ZMbJeGsR1xcZt5DmD57bYUHlYQr4PXicO4+w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750433391; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=l9fOGhp4KU8WmEadmtxWRlMZqZRThdcjJkjpIM0VKfE=; b=B+3KFNAPT7YO5kd2FeQcOimpcBq4Lo+28IOBfrhT9TI6pPTyGeOZkpfzI9FHu+ucTX1H8W QzFqAL5f/GbLwewpV/yhH9yc10P4C9THcmXHl+kfH1z60JxndxQFo+9J4If5iv2C03S6hF YPdYg4PB/VDSFX5dN8K9J6Ap9pR4YaKxiR4OXV5lQJMKbXyAXQnSLmpw/2tT5INeHr79CO B48Bn4f9SvmEFlWYSARhfm2DF19uh02zcdIAH3ceNhsg7FodiaDMS9orQERr5pahX3lAMQ +G7mfCd8eWUm6pSeWOCvn2eu20W9jDEzyL/+/OIOiA7svYT3VWW1MoKBMZMLuw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750433391; a=rsa-sha256; cv=none; b=Irv0+QpeI/Ef3MONE+LF6+KhXQQq+BZPFc/zUmHMMv/T4OCR72+Off/UfPfjWGvDtD5qUJ pGJmUvltRH/NTsOHs1WpFNUM3jacNeMCsttNe6fSZn8yeW1vO5WAXrx6ch5gO1RTVLO6go KwmDKGg6MKL94T9ak1HkIlv6xDVkiAUbZKg1RL5cY6XGF2ITsvXngbyu78lzx8vVddxL6D yXhVWEOkYMxYrcgFU71OEP6wQTtdhQLvd8W9zL6e55b+2LR9UxfpiXPjdN8uqQX0MBGis7 +AClfGItYN8SHp/lk9FyTygl6ifCGWpauRExz6fiyum/FxTSG2uoRRMOqPHmPQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bP1cb2Sc0zrHq for ; Fri, 20 Jun 2025 15:29:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KFTpDj021205 for ; Fri, 20 Jun 2025 15:29:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KFTpoX021204 for net@FreeBSD.org; Fri, 20 Jun 2025 15:29:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287445] [qlnxe] QLogic/Marvell/Dell 41164 ping loss Date: Fri, 20 Jun 2025 15:29:51 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: misc X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: adamesslinger@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287445 --- Comment #19 from Adam Esslinger --- Is there anymore testing you need me to do on this bug? --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Fri Jun 20 16:17:49 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bP2gz1Jwqz5yF21 for ; Fri, 20 Jun 2025 16:17:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bP2gy6llnz3V9K for ; Fri, 20 Jun 2025 16:17:50 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750436270; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=YDxQwoiWSPZQf4jk/oZde1r5pm2aVkMaUWUoPKTy+uU=; b=kMoEsCHGXwc2FVflshLQtTfmDKoSovaIiO2YcFhZixRhzFDpt4hO4ejBhTUdKJQujOaaGJ CHW1WLKQuaxNzG9GNW2fUwamqNvwaL0K8J0Nm2GJpGymoNImZ5VMZQf4D6XYtVRzXU5iUR 8Z1JLhgIPFVZpmCAS7osFWYbulwpP3rA3n8CyO5uHrvKZveCFEI5xnpA8v4EcL5t+uMElb lbKnoJjVL+gustBdUkfERG5UQd3Sed1uWiBTOgy5yxW7VmY3YW5EMw9ltG+mk6xfjLyRTp T6aPf7OeAOfj5ILbFjGV1eU47yfqXbXc0uztqGKPM+NQcfmiXQjtOYfrHiEB3Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750436270; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=YDxQwoiWSPZQf4jk/oZde1r5pm2aVkMaUWUoPKTy+uU=; b=S/p/WQJEmDptpEtaNXaeRYaOaB2dENCq3Rd/RlBEcqcPxmyEbIQNPHFU6SznH5UYJQkKam fOEfixEubnz1d5MoJk4aXOizKiCq3dBXx67qBlYj5/KdMtEHp1Gm0nU1+ogMwDVgSKHO1j a0SfdEg+VcNzNqUZ/HUvq5mzSwveIR+qpGECCYho608DF26QGsZHi3oI+Yxnq2CgHtLM1P FsqQ+4Gvfah3ZRtkdLq01UvD47zmLw+wrXBB7pGyp+rtem2z1dTfEk7YrnfmuMIeiLDHov lxCf7IMlscFoRRy0tiUPr0rckw9AjACHlvDzlYY2dqT/+7OQXnNYyClJZRkyoA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750436270; a=rsa-sha256; cv=none; b=oafJRfu+/3Axv8OHAmE2Nt7d9UDdmuPpUyLfHTg12xN6nYj6xND5Fx2dS6fZKloX1y2c6g M6MZkC21c4iJ7yvoS+HcuNm+RZxA+29ma6UTe4JQ8DbDrMk6QL5Qbs0/8I3y5/Sjs+XzFK tdybjvO98L5kfT4mv7v/pXtvf/jeMQ+9NqIX8ee44YJvD7oDD0Q8HujCzU1Jiq3otoM/d5 l/NVPZOTr4LHSInUJphqezlS5n+oc7KIs8R0/m0mlxFgmuIb5vSRuFKjABnwnHbV6/XhYW 3/sJZ81XzgptMmqUXlCZ6MHKryOzlALeg0Bwt/I24DQXPdU7h6uXdoXTHcSHag== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bP2gy65sKzsgD for ; Fri, 20 Jun 2025 16:17:50 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KGHocT036683 for ; Fri, 20 Jun 2025 16:17:50 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KGHoaJ036681 for net@FreeBSD.org; Fri, 20 Jun 2025 16:17:50 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 245103] IPv6: update v6 temporary address lifetime according to rfc4941bis Date: Fri, 20 Jun 2025 16:17:49 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: ipv6, needs-qa, standards X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D245103 --- Comment #23 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3D41399ce61bcc56711cba3fed1ab5b4e72= c937576 commit 41399ce61bcc56711cba3fed1ab5b4e72c937576 Author: Marek Zarychta AuthorDate: 2025-05-17 06:56:20 +0000 Commit: Dag-Erling Sm=C3=B8rgrav CommitDate: 2025-06-20 16:16:21 +0000 inet6: RFC 8981 SLAAC Temporary Address Extensions Deprecate the use of MD5 as the algorithm for generating temporary interface identifiers (IIDs) for IPv6 addresses, improving cryptographic robustness. Introduce per-address randomized IIDs, ensuring that each temporary address uses a distinct interface identifier to enhance privacy and avoid correlation across addresses. Update the IID generation logic to respect the Reserved IPv6 Interface Identifiers list. Enhance sysctl_ip6_temppltime() so that ip6_temp_max_desync_factor is dynamically recalculated whenever ip6_temp_preferred_lifetime is updated via sysctl. This ensures that MAX_DESYNC_FACTOR remains approximately 1/32 of the preferred lifetime plus 10 minutes. DESYNC_FACTOR is also regenerated after each update. Timers related to temporary address regeneration were updated to match the design recommendations in RFC 8981. A new read-only sysctl variable net.inet6.ip6.temp_max_desync_factor is introduced to expose the computed value of MAX_DESYNC_FACTOR to userland for observability and debugging. Input validation to reject temppltime values too small or too large is included. This all brings the temporary address lifetime handling closer to the intended design in RFC 8981 and improves robustness against misconfiguration. PR: 245103 MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D50108 sys/netinet6/in6_proto.c | 8 ++++++-- sys/netinet6/ip6_input.c | 10 +++++++++- sys/netinet6/nd6.h | 4 +++- sys/netinet6/nd6_rtr.c | 3 ++- 4 files changed, 20 insertions(+), 5 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Fri Jun 20 16:17:52 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bP2h147Bdz5yDsl for ; Fri, 20 Jun 2025 16:17:53 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bP2h06rh6z3V9Q for ; Fri, 20 Jun 2025 16:17:52 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750436273; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=yPddknqv6FHlXPT/q/RKYgrWDeHBBEQA6Jd4j8hYCgg=; b=d9nhdt3yFPwwHrghWufinfVLx6eCgjzx1LM0SNaSaNNl2ztXQK4VmDoyOF3+3ClewDKUrW 3Tmwl3MgZnhmj+rBhyfw/m9qfyLPLdcetN/J/4cXaEyJ/G7EMSqprXRloBTcIbU+uxr+yo +w+HtTJN9Tar59MDcueXLCCdB8yxTarOZ6gSLrbx7jbpoB3FIOfq/IFRNwt1/6t+P/Bhv0 MAaVwLkzWtGcuDiloSppWjJupzM+8UWLs7u9pc5eNsSX37eVFQj85DzjX1S4SI+/DKhcYW 0GpngIHBNdfmDUPaRDbVzEv7jS3K1srku+vPDqQyWF7lYHM0JHI3tsUmbmmT6Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750436273; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=yPddknqv6FHlXPT/q/RKYgrWDeHBBEQA6Jd4j8hYCgg=; b=ZI+P/VEvoxl1bQSv924FH3c1LESvesEeSkpBLHkPDWBzPGQ3//IipTE5FxHCu+536CTifm zGst0FKb3QXae8V1/m2Ag8MJpg/Hd5huiLtQk6yoNKq1/5Wg2HZo1h/fvIhgWdvFGuZwUy /H5xEZD/6KMCljH2Ep5RtovcQUL21zT4sZBrsC0Y8UNlv98zEIuM/s9g69Hf9CtULkz+xo VuB4TqHEA0ed6siuDstmxm3dyOD632AgxDzv7fMKBWdYcUiHvIjtQ8VbO3ySNK/hfxQZAO n0TiEYzxLBGENhOUb0a8bPK+agA2PQxyk9n0PL7CO9N4wt7v0+EP/xAH5v2NDw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750436273; a=rsa-sha256; cv=none; b=GUqiIPODv4PdZEvOpj7wdpTdEFG0PC9VujFVXdSNrwhVcsOmeoZkPyMAKevzD9csh7hOVE DVC36NvuzZYV3fxFg3ydiQQ34PeUrRORzA9r0hQ5sGOh/+Y48YHzYzyDR21Q/zDIg7JLe3 Ole+gIXxJm44EEAXGJDC2Azh5BxxqtH3j2HJICoSjP7AP4L9yXm3pMlNRslDNPR9gfXIi3 03lSMqs6oyqCzmlCZm8/15ctpJ6/hi0YNNmepWq922QFuWEqNX52U2TtRj2u41vrBzHEa8 vLOCbBd4wES/t0IUYylrjDRI/y4PazIcCLIQhtx14k6bN9iGO54tm6OtVtg6zw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bP2h06FpJzs8T for ; Fri, 20 Jun 2025 16:17:52 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KGHqYf036759 for ; Fri, 20 Jun 2025 16:17:52 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KGHq9P036757 for net@FreeBSD.org; Fri, 20 Jun 2025 16:17:52 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 245103] IPv6: update v6 temporary address lifetime according to rfc4941bis Date: Fri, 20 Jun 2025 16:17:52 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: ipv6, needs-qa, standards X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D245103 --- Comment #24 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3D0daa334c56334661ec68a514a95fa1d92= c483e8e commit 0daa334c56334661ec68a514a95fa1d92c483e8e Author: Fernando Gont AuthorDate: 2020-04-03 01:56:17 +0000 Commit: Dag-Erling Sm=C3=B8rgrav CommitDate: 2025-06-20 16:16:14 +0000 inet6: RFC 8981 SLAAC Temporary Address Extensions Initial implementation of SLAAC temporary address extensions back when they were still draft-ietf-6man-rfc4941bis. PR: 245103 MFC after: 1 month sys/netinet6/in6_ifattach.c | 124 ----------------------------------------= ---- sys/netinet6/in6_ifattach.h | 1 - sys/netinet6/nd6.h | 2 +- sys/netinet6/nd6_rtr.c | 58 ++++++++++++++++++--- 4 files changed, 52 insertions(+), 133 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Fri Jun 20 16:23:56 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bP2q1129dz5yFDD for ; Fri, 20 Jun 2025 16:23:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bP2q06rSxz3Y7l for ; Fri, 20 Jun 2025 16:23:56 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750436637; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Wd2dB7MJlCIf7w/yr79CKW2nnixzMj647d8xbu2RL74=; b=iNzTC3dRWfFv+FZrscnk0UhhKDsFvd2hpr168RddMj3QOSJzv9EkEbekQPW3knMAyB+EYS TQdjBbK6uprzYWX9O0vvTlVR+qpAR8MiZMzRR+Af9JBiQw8wWwlU+S5NpsGwjvSdo9wbfP ZmPerJ019GQ0R+7XFFNQjfn4CSlQ/YdGP+LDOsWzp60Pvspvuz/zRvGya50MBauwgQC+oi IU455Frw+WjlfF4uS3jV1yTeVNpWPRISx+nTIm4WYa5VjA3tO4/35AwScQbkbGogbzpfH6 bWSQxlWHBxfSXn5xZaz7QArYpi0NwzW41dCAC83Locm8dOopyb+ZkdMCRNpSmA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750436637; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Wd2dB7MJlCIf7w/yr79CKW2nnixzMj647d8xbu2RL74=; b=wbkqG51N/G9FlZ6K3YwCNL7dRT8M7beJ/O/F8/kiQmSJnMSfQe+ifiEghLnn/0fyuLT4d3 ix8BRThyOg6CtXOiaJTypr0QBLn8LUYbxYjuSQnncZqdoOcAsL1qOM3knpqf8Nc+IYWCpf JnqSdXTrXM6GdVuO03viGay3cszEAZvdKnbM2H0n/+69/IhWnu/NL/WUPLkNFtsowXrY6b DhMCZBv6xeE27zvBlfINuOAaNaPvZnilpWuooDdW75V8Etr9r92vPdZl5g9WZG5UX/znOT x0MDNfR/gOvocBZgRZPrxCUHpYjIyijV7phSJb4OUrETinU9P6guB7gSuW7Ycw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750436637; a=rsa-sha256; cv=none; b=wPxi7XrfbBxtao9iHwMDxCKJfmK9sgpzGYKtiDul/47vVcqai0liOYIk+DT4lxAgZvfhnC HIw6DXgWXOLh+BqXwviwx1S03G2JrVj3Z4rSQUTmFs4y8yz66qINhjFIpcMejOrNaOvB2l SxGNl1p9f4HRMt1YADCAofbWMflWFq8A9kcHUPv0whtWZ2rW8JyQc2kgIkRuJz3t0ISChm LrFUBV2SHoFBNFdCs/CdzDiiZnlJNJ+Ol3QZX0u4ri3fA3QMOqD3DYUj2oC+VsnF0pYjsx 1rmzlSWlXLr2wOW8NBA18lJp5Kl/H8VFO/KsVIXrDQdThBvdNm6d9Nqyz7IGQg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bP2q06Rwpzsk1 for ; Fri, 20 Jun 2025 16:23:56 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KGNufH053807 for ; Fri, 20 Jun 2025 16:23:56 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KGNun7053806 for net@FreeBSD.org; Fri, 20 Jun 2025 16:23:56 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 245103] IPv6: update v6 temporary address lifetime according to rfc4941bis Date: Fri, 20 Jun 2025 16:23:56 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: ipv6, needs-qa, standards X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: des@FreeBSD.org X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status cc resolution Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D245103 Dag-Erling Sm=C3=B8rgrav changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Open |Closed CC| |des@FreeBSD.org Resolution|--- |FIXED --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Fri Jun 20 17:11:44 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bP3t95Qwdz5yJBV for ; Fri, 20 Jun 2025 17:11:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bP3t91KK1z3tGD for ; Fri, 20 Jun 2025 17:11:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750439505; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=YapgxjtpugQJtglgyaA/gpnier2Y7KXn+N+ie2rdaXM=; b=q4E3nGhFa+3od7oOq+0SCfE4vZzmt14WXqw8yJ/685UpWuS1TbIY9ech8MPCZonWasxc5b xBz1qSL/Nj/dPpVJRH8WBU36cqx3jDA35t1GS9B7V55rwnPSRWrLe5ZruFdSDtZ0Y8bYWH Ad4FcP3jgUixn0C8DdedEiNg9PmyXI6ASproGy/QXiYflOdxn0xbaXR2p/ggbQ9d67KCbT FqeeCdBt7QFml8OsS4mKvl783zfmdanEsvg0scZrTjgqmFW4+X5VLsCx2m0+FSLkCR6aBT MjKLyPLGSHz+jELz2VZbFtQAlbp148CNBdfIkB4D1olEKrp4V6kTTh3kX1lPUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750439505; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=YapgxjtpugQJtglgyaA/gpnier2Y7KXn+N+ie2rdaXM=; b=WOVg1jcflegDktbJFPtk8WGAzxCWkyvREcrodVhGE+4hfrA2kLntBjoaMpNH6l95jIOjVb wRyuBfHskl3gXBTHPaZi14brnrVnYeNmt2aQbQIXcUfxy8fOwyY0ndxpPgXbX2KUXo+Vc0 gRHeoi4qB0+eeyq79Ebk4bRQUbYPqKNbBlD/jBD75wky320SxIN4B0BwsS24vzCG4rY16H WRUwv8S/5jH296Ds4WGT8exDa0F/JSniTUW+qLTtTWh/Meu0q/tiLmDiESESNHItzjedM5 Mwz0Lfa1z5DEXTPoYM69S0C8PtgXE3ahlNVhnbEGRL74Dna/JHWE5c7ABpX1ZA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750439505; a=rsa-sha256; cv=none; b=lENgnc9dcgH3FDDON2KVnwOkcAwp3MNWUX7Biva8Y+D3USygY7zSU2uryjnrO6OzjGnuNh ZFCKWd/dpn9OLh+jANUjjinMunoqIMH+W71D2D4C11NXIHYMCHrkdLpiFEQoRjMLbqGLr8 MxMyI9yvku02QtWc0a1fHbWwBu51NlZps04RBEHVMkHmpYBf0KLhzornqEb7bLCLlJckb9 GmBRiHUAaH0dVCjfpXpG05UV6zGg/r8nee1oRUVj9ZVFS9QtbM4xgMpJuTBPWV9V3X6Bnq cyQWtopXtfXovSlcbuFgtjoc/f4KTpn4I5hjvknxchoOot7n00GC8xRGucZxvg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bP3t90fpbzvHs for ; Fri, 20 Jun 2025 17:11:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55KHBi7B053428 for ; Fri, 20 Jun 2025 17:11:44 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55KHBieB053427 for net@FreeBSD.org; Fri, 20 Jun 2025 17:11:44 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Fri, 20 Jun 2025 17:11:44 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: glebius@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #31 from Gleb Smirnoff --- On Fri Jun 20 10:03:19 2025 UTC, lucas.aubard@irisa.fr wrote: > We are currently working on Network Intrusion Detection Systems (NIDS) ev= asion > with overlapping IP fragments or TCP segments. > Some NIDSes (Suricata, Snort) propose configuring their IP and TCP reasse= mblies > based on the supervised host OSes as an evasion countermeasure to > overlapping-based attacks. In that context, we test OSes (and other stack= s) to > obtain and describe their reassembly policies so NIDSes can implement and > propose them. > From a NIDS perspective, OS reassembly consistency is thus quite importan= t. Security wise, the coin has two sides. If an attacker can predict what exa= ct fragments would be freed once a system runs out of reassembly queue limits, then they can instrument attacks that would target specific connections. In FreeBSD we salt the hash with a random seed: V_ipq_hashseed =3D arc4random(); This makes distribution of fragment reassemble queue across the hash slots = not predictable by the attacker. For your experiments, you can disable that. = But for the general use of the system, we consider that not a bug, but a featur= e. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Sat Jun 21 08:55:37 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPSqF3Zzpz60FKm for ; Sat, 21 Jun 2025 08:55:37 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPSqF2X1lz44Bn for ; Sat, 21 Jun 2025 08:55:37 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750496137; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vglsS2PNOnxqOD2v1fLmUtRJtt+5ce8gD1ILPs9DgKE=; b=U6fe/+haoCAh0rqa7Wp2+qmRCSk7RrBagoAm2rl4BF2QCSQ9T5mfUJ6MPmbPTrRfncJVSh rdem8BzUjpIlfwojWHDn8fkY77kLLGbUtPKpzrCzAzSpPbgYwizE8188/X2dfD2ZAl+4qD 5rWiRa+EnhOv4tHDpwwwGUzg2CcOZyH/MdOgfB+2ahXst/X8F3pkyDBTJVed4ltiRQ/ZMC a05b3Dx2U9ecEQEwp3nTWIAEwHqaQlSk8XBYH9D54P1Ry8ITFi2keUB4sNfi4VkDRL5PQ1 D3sG3LqlLKf2VWfY18fCiWgRmmS/n88vQ2mJdCekgQKoq84b8O/G4r9RkrfaWQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750496137; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vglsS2PNOnxqOD2v1fLmUtRJtt+5ce8gD1ILPs9DgKE=; b=sehHTDa8RS6rzJMFNtTNslBLCYFPaLR429efPjSv3zIDy5sqOztg66m5nEg+JUcTtI4SGZ +hCUou1SlrEK0c3tI/MqmBD9dKh+y/3755yq0H6FYfm+mvuTHHj8IexeU2zbNGyNyTADXd KFXTPiVvrX9EV1lIMzX8uLEUB3g/DXNoF+FVzICpNbI5q99+yQjNci7q11PJXopATi4QSR kESfDU64PSAT8kBMwYqAzRJM05zuGvr4ksKdYzssejZXwK1R6gxdYVXZd9cn/P+l4oXpjE BAVy4QNM5BSkJKbefnHqlwi/4VTjdcOmsZIq/KDMgxQW1U1MRnMvpPiwQT2HUQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750496137; a=rsa-sha256; cv=none; b=ya9TDh9v+ECJsipvTQmXX0xIiZUKortsa7t0QqBUy8v8ppF374A66mMyEnENT9tWbSYiZB oUrF3kXVq47lZVSTBcpRv1bXmKFcu2viFJjk3VVR9x0FCwjBMYdgZGZWqgtjEik8snOXhY uHNJ3MpUnwebQPWNPm50XVtRIe+sbYfjSRmNP7lcHAxNpPfXq3fn/fx5OVlQYspmtj/74j A1tFNBlW0vcFbMw8Ed0dxZxzAn/S4qTEO6EOKFFhx7V9aB9vHy3YNNAcD9G8YwhneeT8Tk H7FZOiqpDFHzJP70nbPPClM/FQ+YjHdh1/QqRbKO7TPc1AxLkgNFPdyq8OOG2Q== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPSqF1Xrgz8hV for ; Sat, 21 Jun 2025 08:55:37 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55L8tbb4087487 for ; Sat, 21 Jun 2025 08:55:37 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55L8tbNK087485 for net@FreeBSD.org; Sat, 21 Jun 2025 08:55:37 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Sat, 21 Jun 2025 08:55:37 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: lucas.aubard@irisa.fr X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #32 from Lucas Aubard --- (In reply to Gleb Smirnoff from comment #31) How can I disable this feature to test if it indeed provokes the observed reassembly inconsistencies ? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Sat Jun 21 11:43:28 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPXXw5CLMz5yQd0 for ; Sat, 21 Jun 2025 11:43:28 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPXXw3G5zz3CCG for ; Sat, 21 Jun 2025 11:43:28 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750506208; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=C11emm8PFX4Gz4ipEg52ShBlZTzw4ePqeZ3Yn2KcoD8=; b=SHvrQwyD9PtKccMmM5Fn06BzxNp5gisPreFSHh3JzPxA2lF+5AuASv2T2iEjrLtsbic4sg jX9hTxanCA9r5TM58+y+n15Z3ZRwUDT7hmrPlgmmQKueFHAFPSa94FOP2lA/HY+G9eTK09 hI/TjZ8JqUjDfTFuhlShnFS2CFi6EVRCzGIMhEOoTOaF6+cpEpmHRjtqZ5ABOMlPaZI2so p66KYNKvbg9d9sN6Mbha/q+r/Ot6jvC+3B9AYRo1H6ndH5yjHsveW7StlzreJZElHEFBXn dEM6L5WYeMLSRfaLTz7fz+v4ngGN93ZEQTSYSheky56/PeMlNUabnmgKDhZPiw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750506208; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=C11emm8PFX4Gz4ipEg52ShBlZTzw4ePqeZ3Yn2KcoD8=; b=XlezDoukirzsrWdvGR1e5fAx9JoJ6KHdzV6gEBe4NBp9pzvRSHdpIizYLZN6jqr9VRUeJf Ty34A36JtKdo81DPqzkydQkKoBTQmUlqBHEPBcLnwVDLnydy1Tv7XEkbMYFImygGK7Rrii HViXtLI/yX/I13ybnBq3j2hUyKozSrDCcUFGSnCXi2j9NlwCoWc6HibDJSVKEWyJfWvJsX H65Pa2fnKThgKN0GQQ78CfZKVMuAyD9onmehv5OK3n+tP5l45AYGeLW0fLCojWYvTl3cjE y6b+UvYrOwZ883FvlSXLHPQuQ2uGibFhPqisk8NNn7gyCdTwpE254n9K3MAE7A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750506208; a=rsa-sha256; cv=none; b=B5E186N3UQLE1lGnBTg68IDd3L1wVu6T6YPdFnZihScytyyS+NCqo8Dwe2BsznGi9RW2wW vSaSqlWid/FArbhYWd3FVsPykANE0aS6FnGJVZNq6BB+2uyNradZJIEQpeAfl3HKXjOid+ l5Z8272fqV9SFe/TqMxllPwKSfgvpiYfVD67tSZOuMHtNkuIXJfOpNUcyRJwYiBQaIvwly ySuP7NB9ifZheQ0pkojnTsMIGpOQuHCcrrposZCp9tLNNAaUc3UokkjXNAF10i6T0/IF6M /cl0F7YY8zrzNDTtAT4B+08Im5c+Mjjc2RwezDdgFdrvlj2LxO3EJXy+W/k2sA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPXXw2sw4zTwX for ; Sat, 21 Jun 2025 11:43:28 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55LBhSPc011883 for ; Sat, 21 Jun 2025 11:43:28 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55LBhSt7011882 for net@FreeBSD.org; Sat, 21 Jun 2025 11:43:28 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287653] if_ovpn can't be pre-configured with ifconfig; can't be assigned to fib Date: Sat, 21 Jun 2025 11:43:28 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: zarychtam@plan-b.pwste.edu.pl X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287653 Marek Zarychta changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zarychtam@plan-b.pwste.edu. | |pl --- Comment #1 from Marek Zarychta --- Is it working with DCO disabled? In my experience, OpenVPN wasn't multi-FIB aware in the past. To verify whether it's functioning properly without DCO, please add "disable-dco" to the configuration file. Refer to bug 273664 for additional context. --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Sat Jun 21 13:27:22 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPZrr0g7kz5yXT1 for ; Sat, 21 Jun 2025 13:27:24 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPZrq6w0sz40Hh for ; Sat, 21 Jun 2025 13:27:23 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750512444; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=T55DUPHI8HwhAP2hmNKoN/aCNml9dRxjrpcuiIHrMI4=; b=IEbqG0yYuL0uCPbHu9dwQ/s4Ebkp+TaoVz+MKyXp5XGTKUvNkWnwNovHa4wqb+TdYyqNIj wB1IzfqFCPAPPGbG23EyGMj5S0xFDAyiXRUtdFLNfmDsQoHbIpoTnpu1skdBE8Q1ptYYyI VKhnGFZxs+dSM9n3zqeUAdXBbzli/ajLAaXMqg7qStQ5Yi+aLghXHzpT4BsbjNXcUAy9HZ yxkF3pWUyHDb+lMNCdhSw7wQjLWrcY6RvNNfp+U1S5JodyjWcxcYQ+RiAh2I+/u90H0XjA khGga6/s4EpQ0JFVosc8itx4ZkyspsTLbPgnRF1xc4uPvLdKhZLfuFM5yBHT/A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750512444; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=T55DUPHI8HwhAP2hmNKoN/aCNml9dRxjrpcuiIHrMI4=; b=H9vFL9sNb5yUrlB+kLtcJl0XL16Ux3nH1Y2GpJy/Tp+O7v7qRzs8Iw5OzUcCb5iaOdDRht sP8X/N4gtR12A8AXzBPh6wQtANt9CubzjLnfyDgmrXiZKMfObeynyNYFHFnxuP/rndxYLt 5hVx4rpqJeZhJ3Evo2B59DwoPETkTSnM3ysheJlssGddRkJOsbfwUY3NSLj+ER7oq+BpxT Y//d5vM5LEJG8NPVxDSwHqEZVjtI7e6l0Q8Q54+QHz1yjG+YzrHtfzmY3oCYJ/EgA1SJu+ EZ0Wdb2nbcX5OlUAtBTnpE/jro79NKHMsAq22ZoTZyjdOIaSdTWzGWoFavD+5w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750512444; a=rsa-sha256; cv=none; b=rW+7GSJIIz+pkcZa+3gxbanA8CHTsdUDlYWOrDrnkRwoL8lLLa+ETikzMslwmK5egDKr7k YZPgvcrzUEAXnXsan0Mc7oYkYrcTKf2KmdtkzqG7364nOxOcOOoLfmitI2YzvF9mc1BRWT s8p/5dKJuyMYJqtfqTONDdBFsByVgNV7EYtqhxolgizy8DCalZA7yuYVauwnM3zn2sWXj6 MEhbit5aSvikpwr4awc/qAdh7BmlurHt8fxynByXjl6sRYpymnp9CJuJmTv4EEVtucJxuq nCnxBV4Rw0l6JtKwAuoHDPZPgrhG84dLEp+dtOv3hy1hn/5vkGnfOMMFScA3uQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPZrq6PGLzYnB for ; Sat, 21 Jun 2025 13:27:23 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55LDRNAx011393 for ; Sat, 21 Jun 2025 13:27:23 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55LDRNt3011392 for net@FreeBSD.org; Sat, 21 Jun 2025 13:27:23 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Sat, 21 Jun 2025 13:27:22 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #33 from Michael Tuexen --- (In reply to Lucas Aubard from comment #32) FreeBSD reassembly is consistent in the following sense: The same sequence of fragments results in the same sequence as long as not limit is hit. But if the same set of sequence is received, the results might depend on the sequence in which the fragments arrive. Regarding the limits: * we need a limit if the bucket queues to mitigate CPU attacks * We need an overall limit to mitigate memory attacks. This can only be avo= ided if the memory limit is equal to or larger than the product of the number = of bucket queues and the bucket queue limit. No matter how we choose the limits, an attacker can send packets such that = the enforcing the limits results in dropping fragments. Isn't this good enough for NIDS? --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Sat Jun 21 13:28:49 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPZtW5ScWz5yXXD for ; Sat, 21 Jun 2025 13:28:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPZtW4hhlz41n8 for ; Sat, 21 Jun 2025 13:28:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750512531; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=TSFHPYs+jyhOVwrN/kCOfOY9JUMud9E7wMPDTADcppM=; b=slCEaF2OLBNSzMk0Zc2vYNZnIpY09C61eJ0vtjV0bDFs8yWHPB4R3GBF8ftN7lJmpmKMZI EsPF+jk4Cw9avXHFXhFFaTtnF//x/SNndB5YPEcac5faHXBpbI1BZNDsPuuzsnoDoyV4id LmiauT55LaslEbvW2o9a8RnPxWwdMFPsBFZ3RtDZtnnPt2sSz7FHqJYN1DVkZ5AvrHHM5Z fTrUD+XQk3YXNqynatcD55WbxzKeaSM001GPBSOLlPCSoOU8lo0xIkpjHV7G54KCjvKSDs /rNj5ABpW5UDDqSvzaao9UkrqOFW7OFzU9atKLqrWR4732IMJ4waQkMu7ouGbg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750512531; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=TSFHPYs+jyhOVwrN/kCOfOY9JUMud9E7wMPDTADcppM=; b=ha9jF7qVC5b5pOAS/732X3Y+Lphp61oyqOOmtcmktSyBj3SH6ZRvQ5uEy3aeyaP0Xw69+7 eAOFE7stJx+9SDNmRF232kqKHKEGXPYIgC0/M68uLgY3ztD20ty0xjX+jnFbBphtEvR92d mUUXq99gFYoULprUVu2w30uruFOacLE/boB/zgJdhhsyUhpu6mMTtUM2EhArXIsfxuuCNH LO4aBirYXFNbPubTYgYddxVNlMhKvIfEp+bhHw4+QlLW1PELm5a0akUlc8dFfisZF5vsSD gC3uqszQ9K1x0tYU2MEqPXgAcdv4bRNtVEWu/nEtqZk+hRGqymPmko2hHNPPBQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750512531; a=rsa-sha256; cv=none; b=DuLG4UuUYy62TJtnTrkZPUAxD2VMF7ksbELE/d9UIhsDfAjgealNaUcfqMyiPN7yvRJzsH 6j1QbA9+XKMPeGOF3LQSxxdb8yShgziN5nyghVNJErgBQO4XdVUvP10gigGI04I1l/UeVW DubqcCahihc9YhqTUldTunDQZiyuSL7JWmwtFwNf+Q9FgMke2jDxfCgC3/m6//HUp3aBT9 hYjPrntbPkpBHysIm5kRAVFGXbFDjNMmF5493Hz1Qe0U7O3Rk2skH8968dXsI1Wkisz6ud s54aa4OL0Qm/JxAQBYCDxHgCFk9vyM0/iEvFCMwaSPxdPYbqvF1VaHTtP0N9yg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPZtW4BQJzZMp for ; Sat, 21 Jun 2025 13:28:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55LDSpxD012929 for ; Sat, 21 Jun 2025 13:28:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55LDSpgG012927 for net@FreeBSD.org; Sat, 21 Jun 2025 13:28:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Sat, 21 Jun 2025 13:28:49 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: tuexen@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #34 from Michael Tuexen --- (In reply to Michael Tuexen from comment #33) I meant: The same sequence of fragments results in the same packet as long as no limit is hit. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Sat Jun 21 17:22:13 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPh3q2Y3Xz5ymTL for ; Sat, 21 Jun 2025 17:22:15 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPh3p72F9z4G6y for ; Sat, 21 Jun 2025 17:22:14 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750526535; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8KTf53BPpar1X0PqAI0kz/Hz4887mqc+wf8FK1EdpKQ=; b=hb8ISroh3pPDVr9EqSDwMJeLgFIeJlzhR+1Xj1aw4yPMjMiGvY4EVIW+xvxQ22JEmAPPB1 fcz0N3i/KPwG7oD22oa74cGJKH/8zOLc8KibmDMiE+B3TNwf/FFcwhf4maRwpinEDW/2aG J7slgu7M2DSRoj2be3O52cyPi9CwC35M7AGMq5rrXGY47zBfbOGcQdUm8H4ULsrVtMtOXP ncjaL7tV48jgiPcJDwPWNT9MBd2EzltBeL2sT8LvZTBfx8Ic6iW9WHz6TDWFT2PZ2I1HaZ /Fxsf8jXQ/zNI20pS4wVMKMr5FQ3L/Avytz7XRiLIN7ttp7yobWD0lyKyy1llA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750526535; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8KTf53BPpar1X0PqAI0kz/Hz4887mqc+wf8FK1EdpKQ=; b=l2uYmPcDfFq9jGXD6HZ6hV7ifuZFqwSpIdYBhhOh6tRWUZO8sTf5PspTFiiIJgcifopN/d cUMBLuDJHOCdA5JoQqZmoMDFQ/xwCpdFP0IHoLvKz0J7wsjPTLsXDiI1bXnZFgpp5H3WIV 3Af+b89TigOYxGMKkAFrdRAY3vuN+ZjJI/9GRAzvhOIXonYaaJbIbItIKdDzJl6gsauYsz U3qk7yZyOhs+FuGPmJid1rcmQKGzIKMX8Bv2rop11peg7Y4t+qdi63WLnrtcumxTQaWdZK 7OA31e5gLvENYfM9IU6CI4BVRdgOr/h3nOzsrsyjYufeDueS7qmB7nh6gitlaw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750526535; a=rsa-sha256; cv=none; b=mPR3guDg5GbsR3vhq9lazvgpf6bU0b0lN9PGFi5CCbaNKT+3WAVbBcPgEv+0VYtsCL8WRn FTB9uXggaIbD+zUPDUz1lQ/+NIK5DoFhgVWuNMe8MLPEWlphm84Vq8/NVBwCQtQroi6R4M N3quavqxWLXAkTKOW9HJYr0WlxW8fgcuvvDVcmVmQLt2dt5tdzGjJjO2ymUgl8Z75tTGV3 kqFLrt6RMetAIayLa0UrtEVrmzRhXrM01nTeipW3C7XofZJs0ITxVLJUyM9/HayjD/HB7h UmlOdJGpfS/IBgvPOIB91C6LaN6aU5Vp7s189oqxYyLkDTqDYT4uv7UHOiyzfw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPh3p6GKlzhSb for ; Sat, 21 Jun 2025 17:22:14 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55LHMEE4078124 for ; Sat, 21 Jun 2025 17:22:14 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55LHME4w078123 for net@FreeBSD.org; Sat, 21 Jun 2025 17:22:14 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Sat, 21 Jun 2025 17:22:13 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: glebius@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #35 from Gleb Smirnoff --- On Sat Jun 21 13:28:49 2025 UTC, tuexen@freebsd.org wrote: > (In reply to Michael Tuexen from comment #33) > I meant: >=20 > The same sequence of fragments results in the same packet as > long as no limit is hit. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Sat Jun 21 17:33:40 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPhK02yKPz5ynHM for ; Sat, 21 Jun 2025 17:33:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPhK01s3Mz4Nk7 for ; Sat, 21 Jun 2025 17:33:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750527220; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=w48NR2S9DbJ7Xka8l4R6uiDELkIRqZ1RehkuhrJVSoE=; b=RkMhVUIYjH1+MWZGJFXWmrKauuwFmtR6iaNWu2GuXQUEpPo5rArxaCJ9xdm2omVccKTc+8 6FS1Dktil35hww4GK/jq38m1YPZ/FOOkK4uAkKl5DrQNtbtzzGMNGRmxqXlj8zPMhwVa6r xxJ+rcVfCaXYZk4ZV6RdnZRM45BU3llPvIZUVQ8xTMQiHM4TH4hZNc9Z+VaTaHBbujL6cC fKz6KUtNCC0Lf6w6y8AXWwsdZsIDNhBwfzotXpqVIazwObJg2dZ17YTiOt4i4kJT8Quig8 Zhj1TKMhaNrvJWchwCJP6I5YLHmZCLQeNxeZlW7/gn3svQyp4jNU0Qe76F9WVA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750527220; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=w48NR2S9DbJ7Xka8l4R6uiDELkIRqZ1RehkuhrJVSoE=; b=kJ2GmP0w4qzLh7D56IplNlJwl+/QUuNZklWGSZ0qWBLmXLWLlkiqjBm/WvdBjPfE0ahHRK xAPZqTZPhOM7mAbWUPYhRT+BhHv4n0o9TWfCIRzHfEUjoeMQmJgwDK5MLHlSKGCVcbDgJo T6ME2Var1p9UD57rpXaLka0MbUr28yYNdobSSqtJ92dsJbmdsXa31W2BsdyIqjUazyNxXR HTTcAUMJFjMHv6WXFAyXNu8czE+6tbvd++4WulSCHg6r2DSDBTHATfdqZo0iLJxK20tB88 EehpRijUgh/tQfxGFJeSWVGLVLxSAtf2lxTOqYvvmEjPAVl3PgJDKZ+Q+ddHNA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750527220; a=rsa-sha256; cv=none; b=KsAlHlvLnYXSAhAFSs6Jgh3Bk6umq8Xbcf0bvC7jHbcS/lMECuVshpzTMqWNi8A+I2oJre +Ua7mpR9P0O5VAQNyvaC2HZ5hZssRufZL2qamOT2bxSCJllXSXfc9vxzECFmn0cDTmT5Ey 3o5TL+J+1r9aXmgu5ElNNWsobHX3LhAoOfeWzbpaGabYfW5UA1x7U/PwrKPFVd0dHNNv7B QSBzqLVmIoaX3pSXYcl44Qlhz5UzueOf2BPyKaHsUGd8ubtH+yo9kF125NjZXcEIXuf0Fa aoynV9HEKbz/KB04TvUiCm+wtfUnYq+m5GCu9OBLuwoqHnF4hXO1T+YIql8V7Q== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPhK01GCvzh61 for ; Sat, 21 Jun 2025 17:33:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55LHXeog003010 for ; Sat, 21 Jun 2025 17:33:40 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55LHXeDd003009 for net@FreeBSD.org; Sat, 21 Jun 2025 17:33:40 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Sat, 21 Jun 2025 17:33:40 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: glebius@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 --- Comment #36 from Gleb Smirnoff --- On Sat Jun 21 08:55:37 2025 UTC, lucas.aubard@irisa.fr wrote: > How can I disable this feature to test if it indeed provokes the observed > reassembly inconsistencies ? Option #1: you can recompile kernel with patched sys/netinet/ip_reass.c. Change the line V_ipq_hashseed =3D arc4random(); to something non-random, e.g.: V_ipq_hashseed =3D 0; Option #2: at runtime, before running any of your experiments run kernel debugger in the write mode: # kgdb -w Now it depends if your kernel is compiled with VIMAGE or without. If compiled without VIMAGE, then it is easy: (kgbd) set ipq_hashseed =3D 0 If compiled without VIMAGE, then more complicated: (kgdb) set *(uint32_t *)(vnet0->vnet_data_base + (uintptr_t)&vnet_entry_ipq_hashseed) =3D 0 --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Sat Jun 21 19:48:56 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPlK7290vz5yw3T for ; Sat, 21 Jun 2025 19:48:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPlK71Vztz3V4N for ; Sat, 21 Jun 2025 19:48:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750535339; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=k4IaUXXkjyaXW5tQkf6h2Wwi8yqRcGP+OehKP61gyB4=; b=rB/YZ3cTMHgwNxL99Wn2k360O1j2LONBxSKQQIxq9vPsxJcLUCcy6WAGkFiR8EY3WGGmNK 78cqSzEvOmcJvFVW5HxHFClELgMXKfciqzYlSSSF9/3bEpTloGeEZpzc5znqCY9cuFcFyP uysVLND+zdOCTy4KtgNHhTkD+woEm2qNfHXclPmKqVSlv4lPw0IAsKKI2PNgdzmTp0vtVt C7pjFaoSa1IOWvXjXPu2D7wqLK+W4nOJPV/eR3Rwe1sUXAz8lYKVi9xp5FvCwkReFZ0qq6 l5CIRg9uJk8mWWgGvrmwZXBNvVV2ojB8jdHdyR/3rmL6amHGdiEDK7gGEj7K9g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750535339; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=k4IaUXXkjyaXW5tQkf6h2Wwi8yqRcGP+OehKP61gyB4=; b=OPN4VhHNb2hLSJgjlyxXrtoVtpLomxUAtGAB6QdkPYAPJui0SjiIM1dqCnxfOYfJ9rayKX Snsv4a32AgeCew5WiaBzu6pJ2Z/kBQcsRbFLtQTJISv5sgjQPI2+zPu01lYoC3HLXQ84/E ECUxRrQEKFuTppgtvaN207fJnT9gmRZznM22BymPJLbEb8Rofmzwrvcc5WDgd6M2H8G7gu T+VCIngdd/vMDezZtKrbAogCBzAldVtPnipKpZVL+U6hnc0RGCgFYb6oHNeBpG0OMMiWLx S4/vQWoRt7iKJXfzTDBeB5IQKjQaoiHPE4vMzCfiGedx0VajhgvqcqjQXEVHEw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750535339; a=rsa-sha256; cv=none; b=ZsTzURUF8CVPsCAPhZfVSlt6oGE5t5SFxlsDEWfqyx6bJUjyT4qHFMV8Q55EG+W0eOerK0 ye8d5kiR014y/va9R/wOvB3aUBudPpk7sqmeUR7+1dmbJSBzIuekvl48+5PSC2/QujAS35 O5Seuu3ccj5OEfrUD5UdrjgrFapXxw+reAXrP8g0JPCrEfDOnSNRK6pme4DqnazOTGxaFs tcREm1kJSkwtxwt8vGUF/ztziiPWj1V7yxlpE2uSyqcQo5LWt2IatMzVTPougVJ0Gmo9KB OyvFaBItpJfjoi6Ezxg6xki5ejrPE0dWedcaLL02qslRdCDZ4a8Ul5EYNtl+4g== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPlK70qvMzlwY for ; Sat, 21 Jun 2025 19:48:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55LJmxoa062066 for ; Sat, 21 Jun 2025 19:48:59 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55LJmxnY062064 for net@FreeBSD.org; Sat, 21 Jun 2025 19:48:59 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287492] Unable to detect NIC cards on few PCIe Gen5 slots on Dell R770 servers where x2APIC mode is enabled Date: Sat, 21 Jun 2025 19:48:56 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: vendor X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: jhb@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287492 John Baldwin changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kib@FreeBSD.org --- Comment #3 from John Baldwin --- The issue is that for this system we need to support it's I/O MMU that is u= sed to remap APIC IDs used in I/O APIC and MSI interrupts so that the interrupt message uses an APIC ID < 255, but it after it is remapped by the I/O MMU it ends up using a "real" APIC ID that can be larger. There are separate I/O MMU drivers for Intel systems (DMAR) vs AMD. 14.2 should have support for DMAR, but I believe only 15.0 has support for AMD's= I/O MMU (and I'm not fully certain if interrupt remapping is enabled by default= for AMD in 15.0). Can you confirm which CPU vendor you are using? --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Sat Jun 21 19:49:57 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bPlLJ2tPGz5yw3m for ; Sat, 21 Jun 2025 19:50:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bPlLJ21MKz3Vpb for ; Sat, 21 Jun 2025 19:50:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750535400; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ntvtApF6ftT5H0JUci+r/vjlVTUyiatKzt5jSj2EwQg=; b=YOfjFiY6KgMhiEtPDH+dMpmo0cd5DkfvVYxONkmIsXYIBXQONJ8wdCjWFMtZ0alZwpEDN4 MGAiiwSkF/9XyedDqAodKdcP0NeY7bwAtU4PjzWOV7RQZFEWjYgJ2ht9qjjuU9acfbM9p6 RXZsso4nrleOX0sz38qavVTwu6+f7i83/0SfLyGxRUKV7d1P+fgTCRYRpwHcFlSrR2ogq/ zrwoCYtDtpTdMbjMXRE43b2r1477Hwsr8RS+u03UUzaEqrGaJJuAbcBqM7xMrtoMYcLbd8 MmJvX59RymrnuvmlHTseiiXxbUBC+/kk9p3LAY/7DaMY5MAZ0ynpkX81U3KjyQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750535400; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ntvtApF6ftT5H0JUci+r/vjlVTUyiatKzt5jSj2EwQg=; b=FPX7T+87PZaULT3OzBZ8S7n2ZwKojZGIXa1MzJxic1HiT/WLKYxhhW5a5G4qNtykpuM8Uz WorBsvnGGsEl6BsL/9ROhpeaN0qKC6AbXb0VOTPiynXiqwi6HTcEBNsJ3XubBrTsKHHEtv 7vS4A27LTlC9pNYddke974sn2KWE4tjAl5MwrEJnn4+5ibM7VMeo87KbmlCfJVtbFCGHXG E3tM29DlvN/tZZN1Lw526BnhvKOKEpRrY21jMkxmByCI1djrVyAHV/RtFI+MPr5RGDDlEx LYRLjk+qfTKjRJMbYhMofx+VeKdKN+S5Np6UWzhpoNGMWzKBnezoj97vwvjWyQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750535400; a=rsa-sha256; cv=none; b=PQy8YzYVn0qRw9rnSZ1MLBb0Utyt0LhVv00G4sWckr3yUweU+c6ppfQnnRA/6W1Cz9LU9K lbSnI2CpaBmx+73MIxiuz67HDF//SMccXpYneDSYVF7LiPz7hHT3HeV9kp/0ZIxqLxy2F6 GsInQG/cH+RIqPptI/pGDJ1upQ/WRn9kEc2PxICxEYJffD7DVTtXxNC6sk7HAK/dMDgrjQ 2s32fi1VFwT2/oQsaYqMfQ3AYWs1sFTphIrlMGANU019O5hKnPwHRH5go/YkFXKJFU2svJ CjKWIcC3DcH55+iz70VEs1zzHP4hP4B+HMs0QrgC7039JYISNZV52RTjwkZeiA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bPlLJ0hxzzm5r for ; Sat, 21 Jun 2025 19:50:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55LJnxS5063296 for ; Sat, 21 Jun 2025 19:49:59 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55LJnxEZ063295 for net@FreeBSD.org; Sat, 21 Jun 2025 19:49:59 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287492] Unable to detect NIC cards on few PCIe Gen5 slots on Dell R770 servers where x2APIC mode is enabled Date: Sat, 21 Jun 2025 19:49:57 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: vendor X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: jhb@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287492 John Baldwin changed: What |Removed |Added ---------------------------------------------------------------------------- Status|New |Open --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Sun Jun 22 21:00:03 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bQNrg2H2hz60FlR for ; Sun, 22 Jun 2025 21:00:03 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bQNrg1WHvz3p17 for ; Sun, 22 Jun 2025 21:00:03 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750626003; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=2N43MA7ZrCLDwptZtSBg9tQznBEzPtdPuYvbi8zGIdk=; b=U4ZrNcGj4h4xD5S+OCwSWsMAUIDx5PlxoOjTlB6uYF//HuxakzEigRNEl7GvNyc8SYne0b EMpeyzaiAXtsVod7/AYrtFdyqAX/2hPoU4jmsPau065tf7wK25YiOEUy0ZlRZpCFgoOjWd 4BcHPW1Eksf6PN56tHkhddLH44FmSa9nb1/VDt2tR1L8rtal2onfNwfiGmczpkL8ZB8CvW odpydudt3RvpV9OecH2DEsImoilA7/5cBwS4NYFogPYm7qtq5oIlYFgVjmmq8aDq5SU8+k jPK2ZdlS4FkHeGzuG9dsoizWnUCD+MQ4y4zSpBZqgtZCafLvNoiP2msbIhmQCQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750626003; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=2N43MA7ZrCLDwptZtSBg9tQznBEzPtdPuYvbi8zGIdk=; b=d/jnp8FL006PzGp82d/yLwPo6mhfAZkJ8iS28DSLR4moimJTKitljl1lCSVz5QoBjp9w0V b1+7ptHRKr81kcKAdNmblVGl+g43v+pXpTA1s5Bd/UlLcOCj26G5XBnSB030MJCXQDhgl3 RjQNZGdIeTSqGKmvhn7/4fZx9KHV8+QT1NBkU+vOArors5fAAjkVSaXR+b8c7S86EZJzbK MHKyvVVnzqg8/NDLTr7YjpysYl3wa4GsKvT7tx3qm+XYVLo4fjQRsYafh4ENBNtKcsIpyu Kkgrl1smL7wC+bKwqoyzXIvg81y+WmxojGxXAGdK4YhP4h8Wv27RD9TF4LnSzQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750626003; a=rsa-sha256; cv=none; b=kONko14ki1apYCZbqSduBRRziUaqykjUu5PU6366NEZLpbuVBVz6XbzwUIHsC4lMoXTFoQ X+ZV7ZDbSum5MXpcHIbk0inK8MA8eCvGjwrv3uuPj/2kSLwU/hhP5kz/AWXbxd+EJ8UwTQ QebDP4b20vjk56os9gMbTV+BZ3y/cwwzj8yJUJ8dCS2qCDm3cVoMHyVDMZvoo90st7Mmb2 +ctznE64huR19fxLWpd8nBs+/cJLDdnX9YIa3UV2Kb2N002ysDI0wnz9P7J6EeO9PVeagi F+zmSBGfG3P7fFAKPLY+TpTWV13nxLZSiG5eTCqC3GWrtXVyq+JAab8SPtrNRQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bQNrg15V3zZ40 for ; Sun, 22 Jun 2025 21:00:03 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55ML03of013965 for ; Sun, 22 Jun 2025 21:00:03 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55ML03s9013962 for net@FreeBSD.org; Sun, 22 Jun 2025 21:00:03 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Message-Id: <202506222100.55ML03s9013962@kenobi.freebsd.org> X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@FreeBSD.org using -f From: bugzilla-noreply@FreeBSD.org To: net@FreeBSD.org Subject: Problem reports for net@FreeBSD.org that need special attention Date: Sun, 22 Jun 2025 21:00:03 +0000 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="17506260030.42Cc5.13193" Content-Transfer-Encoding: 7bit --17506260030.42Cc5.13193 Date: Sun, 22 Jun 2025 21:00:03 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" To view an individual PR, use: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=(Bug Id). The following is a listing of current problems submitted by FreeBSD users, which need special attention. These represent problem reports covering all versions including experimental development code and obsolete releases. Status | Bug Id | Description ------------+-----------+--------------------------------------------------- In Progress | 118111 | rc: network.subr Add MAC address based interface 1 problems total for which you should take action. --17506260030.42Cc5.13193 Date: Sun, 22 Jun 2025 21:00:03 +0000 MIME-Version: 1.0 Content-Type: text/html; charset="UTF-8" 
The following is a listing of current problems submitted by FreeBSD users,
which need special attention. These represent problem reports covering
all versions including experimental development code and obsolete releases.

Status      |    Bug Id | Description
------------+-----------+---------------------------------------------------
In Progress |    118111 | rc: network.subr Add MAC address based interface 

1 problems total for which you should take action.
--17506260030.42Cc5.13193--