Date: Sun, 13 Mar 2022 14:32:50 +0100 From: Johan Hendriks <joh.hendriks@gmail.com> To: "Patrick M. Hausen" <hausen@punkt.de> Cc: Kristof Provost <kp@FreeBSD.org>, Michael Gmelin <grembo@freebsd.org>, freeBSD-net <freebsd-net@freebsd.org> Subject: Re: epair and vnet jail loose connection. Message-ID: <728d2993-7813-cf67-0184-8af56044c114@gmail.com> In-Reply-To: <7DD42D89-7706-47C2-B8B6-82A29DE9D351@punkt.de> References: <94B8885D-F63F-40C3-9E7E-158CC252FF9A@FreeBSD.org> <95793CDF-6E72-4FAB-8BF5-F2E67D3F69CD@freebsd.org> <CAOaKuAXze%2BCWy5MDmDSLZ-2Nt_Bfvww9MmWfuPTJT4HB7PSjdw@mail.gmail.com> <F5BF30A3-8060-44FA-9205-5F9901F74E2A@FreeBSD.org> <810820a6-e319-fa78-72a3-3d1cb43f3af3@gmail.com> <7DD42D89-7706-47C2-B8B6-82A29DE9D351@punkt.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On 13/03/2022 14:06, Patrick M. Hausen wrote: > Hi all, > > i was a bit puzzled by Michael using bhyve trying to reproduce. > Up until now I thought bhyve uses tap and not epair? > > Anyway ... > >> Am 13.03.2022 um 14:01 schrieb Johan Hendriks <joh.hendriks@gmail.com>: >> I have no idea why it does not work on my setup, which is nothing out of the ordinary i think, basic full jails connected to a bridge interface and one of them exposed to the world wide web using pf binat. > What we do is full exposed VNET jails connected to the bridge > on the external interface of the host. ipfw kernel module loaded > but not used in this case, i.e. only the "default to accept" rule active > in the jails. > > I will probably downgrade the production host from 13.1-PRERELEASE > to 13.0-pX tomorrow and see if that changes anything. > > Kind regards, > Patrick Downgrading to 13.0-p7 worked for me, it even works on 13.0-STABLE till this commit 18 days ago. https://freshbsd.org/freebsd/src/commit/2e0bee4c7f8176e0f8396c9389275745bac1e263 After that commit my setup stops working. regards Johan Hendriks
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?728d2993-7813-cf67-0184-8af56044c114>