From nobody Thu Sep 4 12:16:20 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cHdkM1VvLz65tpx for ; Thu, 04 Sep 2025 12:16:27 +0000 (UTC) (envelope-from ronald-lists@klop.ws) Received: from csmtpq4-prd-nl1-vfz.edge.unified.services (csmtpq4-prd-nl1-vfz.edge.unified.services [84.116.50.10]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4cHdkM0zZLz4Mmj for ; Thu, 04 Sep 2025 12:16:27 +0000 (UTC) (envelope-from ronald-lists@klop.ws) Authentication-Results: mx1.freebsd.org; none Received: from csmtp2-prd-nl1-vfz.nl1.unified.services ([100.107.80.176] helo=csmtp2-prd-nl1-vfz.edge.unified.services) by csmtpq4-prd-nl1-vfz.edge.unified.services with esmtp (Exim 4.95) (envelope-from ) id 1uu8t3-003zK7-1q for net@freebsd.org; Thu, 04 Sep 2025 14:16:21 +0200 Received: from [192.168.11.193] ([83.81.212.149]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits) (Client did not present a certificate) by csmtp2-prd-nl1-vfz.edge.unified.services with ESMTPSA id u8t2unfPaPjxnu8t2uKT00; Thu, 04 Sep 2025 14:16:20 +0200 X-Env-Mailfrom: ronald-lists@klop.ws X-Env-Rcptto: net@freebsd.org X-SourceIP: 83.81.212.149 X-CNFS-Analysis: v=2.4 cv=YM1lyQGx c=1 sm=1 tr=0 ts=68b98315 cx=a_exe a=Nc53Z2ow9H1LzmqsIe95fw==:117 a=Nc53Z2ow9H1LzmqsIe95fw==:17 a=IkcTkHD0fZMA:10 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10 a=6I5d2MoRAAAA:8 a=6LlJ5QVcJJ9EnNHaRJ8A:9 a=QEXdDO2ut3YA:10 a=0EyHQldr3sK6dN3ijPvV:22 X-Authenticated-Sender: emnvandam@casema.nl Message-ID: Date: Thu, 4 Sep 2025 14:16:20 +0200 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: bridge new vlan and iftagged "none" To: net@freebsd.org References: <481902534.1074.1756977663370@localhost> <1a91faca-69ef-410d-95ad-2d371c84f759@klop.ws> Content-Language: en-US From: Ronald Klop Cc: Lexi Winter In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4xfGTO3XCeElf3vfwyvEq9MQuxWDZWBmAROIKK46CObW+0DzrPs4SHHDlpdjkg5iXeDyNRK9DF7y3UN6kQAeJAD4eiucttWEEdDcH/XPRPTO3H2PIGund3 dhGpwwOm+UQeRekiDya1hWneNSODh9w6d36gmeeltsisF0UCeRKW08UlE3bmJXDLy8A1oOElqcp1bE9QmJdVPjc4/rKrg702hP0= X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:6830, ipnet:84.116.0.0/16, country:NL] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Rspamd-Queue-Id: 4cHdkM0zZLz4Mmj Op 04-09-2025 om 14:03 schreef Lexi Winter: > Lexi Winter: >> Ronald Klop: >>> With the story above is the patch still needed? I will test anyway to >>> see what happens. It is a RPI4, so compiling is a bit slow. >> >> i was able to reproduce the problem here so it's not too important to >> test that if it's a hassle. > > there's a better patch at [0]. if you are going to test this, i'd > appreciate it if you'd test that rather than the patch i originally > sent. sorry, i realise compiling on that hardware does take a while :-) > > [0] https://reviews.freebsd.org/D52380 Thanks, I will test in the near future. NB: I don't know if my setup fits your setup in relation to where "host" traffic originates. My bridge does not have an IP address itself. I prefer to add an epair for local traffic. genet0 <--> bridge0 <--> epair0a <--> epair0b And in rc.conf: ifconfig_epair0b="SYNCDHCP" ifconfig_epair0b_ipv6="inet6 accept_rtadv" This makes that epair0b is the interface of the host. I like this setup as IMHO it mimics more how a host is connected to a switch. In this way my host is next to the jails in the bridge. Things like tcpdump-ing epair0b vs bridge0 are more predictable to me. Regards, Ronald.