From owner-freebsd-pf@FreeBSD.ORG Sun Feb 21 17:13:29 2010 Return-Path: Delivered-To: pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E758C106566B; Sun, 21 Feb 2010 17:13:29 +0000 (UTC) (envelope-from julian@elischer.org) Received: from out-0.mx.aerioconnect.net (outt.internet-mail-service.net [216.240.47.243]) by mx1.freebsd.org (Postfix) with ESMTP id C53588FC12; Sun, 21 Feb 2010 17:13:29 +0000 (UTC) Received: from idiom.com (postfix@mx0.idiom.com [216.240.32.160]) by out-0.mx.aerioconnect.net (8.13.8/8.13.8) with ESMTP id o1LHDROk002788; Sun, 21 Feb 2010 09:13:27 -0800 X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e Received: from julian-mac.elischer.org (h-67-100-89-137.snfccasy.static.covad.net [67.100.89.137]) by idiom.com (Postfix) with ESMTP id 553872D6013; Sun, 21 Feb 2010 09:13:27 -0800 (PST) Message-ID: <4B8169EB.4030100@elischer.org> Date: Sun, 21 Feb 2010 09:14:19 -0800 From: Julian Elischer User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: "Bjoern A. Zeeb" References: <1266739527.25137.519.camel@localhost> <4B80F076.5020109@elischer.org> <20100221084118.W27327@maildrop.int.zabbadoz.net> In-Reply-To: <20100221084118.W27327@maildrop.int.zabbadoz.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.67 on 216.240.47.51 Cc: pf@freebsd.org, FreeBSD virtualization mailing list , Jim Sifferle Subject: Re: Network simulation using jails & vimage X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Feb 2010 17:13:30 -0000 Bjoern A. Zeeb wrote: > On Sun, 21 Feb 2010, Julian Elischer wrote: > > Hi, > >> Jim Sifferle wrote: >>> Hi, >>> >>> I've used ipfw and Dummynet as well as ipfw + DSCP recognition patch and >>> pf/altq to simulate Internet and MPLS WAN environments for several >>> years. All of my setups have run under VMWare, which for many reasons >>> isn't ideal. I would like to collapse all of these VMs into one FreeBSD >>> box using jails and vimages. >>> >>> Does any FreeBSD branch / vimage release combination support separate pf >>> AND ipfw configurations per jail? I need ipfw+pf/altq for HFSC queuing >>> to simulate the queueing effects of MPLS provider edge and core >>> routers. >> >> -current (9) should be close, with patches for pf supplied by ceri. > > s,ceri,eri, (Ermal Luçi) err yeah.. it'd be nice if itcould get committed Ermal, is it ready? > > >> 8 can do separate ipfw but pf is not changed. >> 9 has bugs fixed. but I'm not sure if the changes for pf went in.. >> they do exis tif they are not in already. > > No, pf hasn't gone in yet; it lives in user/eri/pf45/ in svn and I am > not sure what the plans are. > > Apart from the latest changes 8 and 9 should be pretty much in sync > wrt to VIMAGE I think. > > >>> I'm hoping the latest 7.2-STABLE-201001 snapshot will work. The DSCP >>> recognition patch for ipfw that I rely on doesn't seem to work with >>> 8.0. If 7.2 won't work for my needs, but 8 or 9-CURRENT will, is >>> anyone aware >>> of an updated ipfw DSCP patch? I haven't seen anything on Google or the >>> freebsd-ipfw mailing list. >> >> what is DSCP? > > I guess Differentiated Services CodePoint (if talking MPLS). > > > /bz >