Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Sep 2004 04:03:13 -0000
From:      Max Laier <max@love2party.net>
To:        pf4freebsd@freelists.org
Cc:        net@freebsd.org
Subject:   [pf4freebsd] pf 3.5 + ALTQ import / Looking for beta testers and altq drivers
Message-ID:  <200405190216.16204.max@love2party.net>

next in thread | raw e-mail | index | archive | help
Hello,

http://people.freebsd.org/~mlaier/ has an import of the OpenBSD 3.5 pf so=
urces=20
(OPENBSD_3_5_BASE, stable imports will follow later). To build this you n=
eed=20
a recent -current source tree. Just apply the patch and copy over the oth=
er=20
files. After this you should be ready for a build{world, kernel}. If you =
do=20
not want to do a full buildworld, make sure to update (at least) pfctl(8)=
 and=20
authpf(8). You might also want to update ifconfig(8) and kdump(1).

This comes bundled with latest ALTQ sources from KAME, providing "pf_mode=
"=20
only (i.e. no support of /dev/altq). This makes the locking really easy a=
nd=20
keeps the impact of ALTQ to the tree very small (i.e. no classifier hooks=
=20
etc).

The ALTQ-enabled driver set is very limited at the moment as I'd like to=20
import only well-tested drivers to this patchset anticipating a possible=20
import into the tree.

The pf import is a bit different in respect to the interface handling. As=
=20
FreeBSD allows network interfaces to be renamed at runtime I had to intro=
duce=20
a special group for interfaces that have not yet been seen. Just to expla=
in=20
what this "notyet" group is all about and what "(placeholder)" means. Oth=
er=20
than this, there should be no noticable difference between Open- and Free=
BSD.

Please test this stuff if you have time/resources at hand and possibly=20
feedback drivers after a reasonable time of testing. It should be able to=
=20
apply the driver patch from the rofug.ro patchset in most cases, if you r=
un=20
into troubles - let me know.

Note that this is really a BETA patch. It works great for me on two route=
rs,=20
my desktop and laptop, but that does not mean anything. It is also missin=
g=20
some glue in regards to pfsync(4) (which is kinda pointless w/o carp[1]=20
anyways) and other minor tweaks that make up a proper import. If you run =
into=20
anything let me know! (w/ or w/o patches to fix it).

Okay ... this is a bit of a disordered mess, but I think you get the poin=
t. I=20
am in Canada at the moment and will not be very available until monday, b=
ut I=20
just had to send this out ... finally.

[1] There is an old patchset available to import this. Pick up from there=
 or=20
fund me to finish it ;)

P.S.: There is also this "jailed.patch". If you have an application for i=
t,=20
please give it a try (discription is on the site) and let me know what yo=
u=20
think about it.

--=20
Best regards,				| mlaier@freebsd.org
Max Laier				| ICQ #67774661
http://pf4freebsd.love2party.net/	| mlaier@EFnet




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200405190216.16204.max>