Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Sep 2020 17:36:15 -0400
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Kristof Provost <kp@FreeBSD.org>
Cc:        Alexander Leidinger <Alexander@leidinger.net>, FreeBSD Current <freebsd-current@freebsd.org>
Subject:   Re: iflib/bridge kernel panic
Message-ID:  <20200929213615.5gpupobj2ylgv2yr@mutt-hbsd>
In-Reply-To: <6A5EFCFA-C0DC-4DEF-834B-2F9E4FCC8812@FreeBSD.org>
References:  <CAExMvskTkVprZsfXHBUv9stpiCo1QBAzoOg1VrWd4kRbz0NyJg@mail.gmail.com> <58CADEBB-64FD-414E-AB19-E4F8D3CABCA5@FreeBSD.org> <20200921121627.3dovpumnl6xub3kn@mutt-hbsd> <7FE1F106-2CEE-4692-95D0-14C5229ED768@FreeBSD.org> <20200928124531.Horde.0EjsBzIG5ktLzby_tFcoPPS@webmail.leidinger.net> <33903BFF-4158-4CD9-AD79-360BCD81F1C9@FreeBSD.org> <20200928164410.Horde.mYBkuEeD_Q6xgnKnwNomv7P@webmail.leidinger.net> <6A5EFCFA-C0DC-4DEF-834B-2F9E4FCC8812@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--z6mdqzawej7d7qnq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Sep 29, 2020 at 11:20:44PM +0200, Kristof Provost wrote:
>=20
>=20
> On 28 Sep 2020, at 16:44, Alexander Leidinger wrote:
>=20
> > Quoting Kristof Provost <kp@freebsd.org> (from Mon, 28 Sep 2020 13:53:16
> > +0200):
> >=20
> > > On 28 Sep 2020, at 12:45, Alexander Leidinger wrote:
> > > > Quoting Kristof Provost <kp@freebsd.org> (from Sun, 27 Sep 2020
> > > > 17:51:32 +0200):
> > > > > Here???s an early version of a task queue based approach: http://=
people.freebsd.org/~kp/0001-bridge-Cope-with-if_ioctl-s-that-sleep.patch
> > > > >=20
> > > > > That still needs to be cleaned up, but this should resolve
> > > > > the sleep issue and the LOR.
> > > >=20
> > > > There are some issues... seems like inside a jail I can't ping
> > > > systems outside of the hardware.
> > > >=20
> > > > Bridge setup:
> > > >    - member jail A
> > > >    - member jail B
> > > >    - member external_if of host
> > > >=20
> > > > If I ping the router from the host, it works. If I ping from one
> > > > jail to another, it works. If I ping from the jail to the IP of
> > > > the external_if, it works. If I ping from a jail to the router,
> > > > I do not get a response.
> > > >=20
> > > Can you check for 'failed ifpromisc' error messages in dmesg? And
> > > verify that all bridge member interfaces are in promiscuous mode?
> >=20
> > I have a panic for you...:
> >  - startup still in progress =3D 22 jails in startup, somewhere after a
> > few jails started the panic happened
> >  - tcpdump was running on the external interface
> >  - a ping to a jail IP from another system was running, the first ping
> > went through, then it paniced
> >=20
> > First regarding your questions about promisc mode: no error, but the
> > promisc mode is directly disabled again on all interfaces.
> >=20
> I think I see why you had issues with the promiscuous setting. I???ve
> updated the patch to be even more horrific than it was before.
>=20
> I can???t explain the panic, and the backtrace also doesn???t appear to be
> directly related to this patch. Not sure what???s going on with that.

I should have time to test the new patch this weekend. ${LIFE} is
keeping me busy the past few weeks. I'm gonna add an event in my
calendar to remind me to test the patch. heh.

Thanks,

--=20
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

GPG Key ID:          0xFF2E67A277F8E1FA
GPG Key Fingerprint: D206 BB45 15E0 9C49 0CF9  3633 C85B 0AF8 AB23 0FB2
https://git-01.md.hardenedbsd.org/HardenedBSD/pubkeys/src/branch/master/Sha=
wn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

--z6mdqzawej7d7qnq
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=iXps
-----END PGP SIGNATURE-----

--z6mdqzawej7d7qnq--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20200929213615.5gpupobj2ylgv2yr>