Date: Wed, 20 Dec 2023 20:55:30 +0000 From: DtxdF <DtxdF@disroot.org> To: freebsd-net@freebsd.org, "Patrick M. Hausen" <hausen@punkt.de>, FreeBSD Net <freebsd-net@freebsd.org> Subject: Re: Display of bridge member interfaces cut short - bug or intention? Message-ID: <30AEAEFC-F46F-452F-BFE6-760A21811793@disroot.org> In-Reply-To: <E7DE9D4C-A3E5-4BBE-83D3-D003E4DF9CF2@punkt.de> References: <E7DE9D4C-A3E5-4BBE-83D3-D003E4DF9CF2@punkt.de>
next in thread | previous in thread | raw e-mail | index | archive | help
------BH82CI3GV8E16QOSXQ5BCOFHPL9J36 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Patrick, I have opened a bug in BugZilla [1] some time ago, it seems to be related= =2E Truncating the output can be a problem with automation tools that rely on = the output of ifconfig(8) to perform some tasks=2E [1] https://bugs=2Efreebsd=2Eorg/bugzilla/show_bug=2Ecgi?id=3D275491 El 20 de diciembre de 2023 5:04:36 p=2E m=2E UTC, "Patrick M=2E Hausen" <h= ausen@punkt=2Ede> escribi=C3=B3: >Hi all, > >as some probably know we provide web hosting services and we use jails fo= r that=2E > >On some particular host we have 255 vnet jails all of which are connected= to the >external interface of the host - renamed to "inet0" in our environment - = via >if_bridge(4) and all managed with iocage=2E > >root@ph003:~ # grep inet0 /iocage/jails/vpro*/config=2Ejson|wc -l > 255 > >Of these 251 also have a second epair interface connected to a private br= idge >named "priv1"=2E These are used for connections to the central database s= erver >which should not be exposed to the Internet=2E > >root@ph003:~ # grep priv1 /iocage/jails/vpro*/config=2Ejson | wc -l > 251 > >While looking for a different problem to my great suprise I found today t= hat >ifconfig truncates the list of member interfaces for both bridge instance= s=2E >And both to the same value of 102, although the member numbers are (albei= t slightly) >different: > >root@ph003:~ # ifconfig inet0|grep member:|wc -l > 102 >root@ph003:~ # ifconfig priv1 | grep member: | wc -l > 102 > >All 255 jails are connected to the external network and perfectly reachab= le from >the Internet=2E That's why I conclude that the display is wrong, not the = bridge >configuration=2E > >What's happening here? Is this intentional or shall I file a bug report? > >More importantly: either way is this only cosmetic or will we hit another= unexpected >limit of the number of interfaces that can be members of a bridge any tim= e soon? > >Kind regards, >Patrick >--=20 >punkt=2Ede GmbH >Patrick M=2E Hausen >infrastructure > >Sophienstr=2E 187 >76185 Karlsruhe > >Tel=2E +49 721 9109500 > >https://infrastructure=2Epunkt=2Ede >info@punkt=2Ede > >AG Mannheim 108285 >Gesch=C3=A4ftsf=C3=BChrer: Daniel Lienert, Fabian Stein > > ------BH82CI3GV8E16QOSXQ5BCOFHPL9J36 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head></head><body><div dir=3D"auto">Hi Patrick,<br><br>I have opened= a bug in BugZilla [1] some time ago, it seems to be related=2E<br><br>Trun= cating the output can be a problem with automation tools that rely on the o= utput of ifconfig(8) to perform some tasks=2E<br><br>[1] <a href=3D"https:/= /bugs=2Efreebsd=2Eorg/bugzilla/show_bug=2Ecgi?id=3D275491">https://bugs=2Ef= reebsd=2Eorg/bugzilla/show_bug=2Ecgi?id=3D275491</a></div><br><br><div clas= s=3D"gmail_quote"><div dir=3D"auto">El 20 de diciembre de 2023 5:04:36 p=2E= m=2E UTC, "Patrick M=2E Hausen" <hausen@punkt=2Ede> escribi=C3=B3:</= div><blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0=2E8ex;= border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> <pre class=3D"k9mail"><div dir=3D"auto">Hi all,<br><br>as some probably kn= ow we provide web hosting services and we use jails for that=2E<br><br>On s= ome particular host we have 255 vnet jails all of which are connected to th= e<br>external interface of the host - renamed to "inet0" in our environment= - via<br>if_bridge(4) and all managed with iocage=2E<br><br>root@ph003:~ #= grep inet0 /iocage/jails/vpro*/config=2Ejson|wc -l<br> 255<br><br>Of t= hese 251 also have a second epair interface connected to a private bridge<b= r>named "priv1"=2E These are used for connections to the central database s= erver<br>which should not be exposed to the Internet=2E<br><br>root@ph003:~= # grep priv1 /iocage/jails/vpro*/config=2Ejson | wc -l<br> 251<br><br>= While looking for a different problem to my great suprise I found today tha= t<br>ifconfig truncates the list of member interfaces for both bridge insta= nces=2E<br>And both to the same value of 102, although the member numbers a= re (albeit slightly)<br>different:<br><br>root@ph003:~ # ifconfig inet0|gre= p member:|wc -l<br> 102<br>root@ph003:~ # ifconfig priv1 | grep member:= | wc -l<br> 102<br><br>All 255 jails are connected to the external net= work and perfectly reachable from<br>the Internet=2E That's why I conclude = that the display is wrong, not the bridge<br>configuration=2E<br><br>What's= happening here? Is this intentional or shall I file a bug report?<br><br>M= ore importantly: either way is this only cosmetic or will we hit another un= expected<br>limit of the number of interfaces that can be members of a brid= ge any time soon?<br><br>Kind regards,<br>Patrick<br></div></pre></blockquo= te></div></body></html> ------BH82CI3GV8E16QOSXQ5BCOFHPL9J36--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?30AEAEFC-F46F-452F-BFE6-760A21811793>