From nobody Sun Aug 24 01:15:48 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c8bbH5dffz64mSN for ; Sun, 24 Aug 2025 01:15:55 +0000 (UTC) (envelope-from rtyler@brokenco.de) Received: from mail-10625.protonmail.ch (mail-10625.protonmail.ch [79.135.106.25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "protonmail.com", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c8bbH04cTz3J9C for ; Sun, 24 Aug 2025 01:15:55 +0000 (UTC) (envelope-from rtyler@brokenco.de) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=brokenco.de header.s=protonmail header.b="lCHv1b/R"; dmarc=pass (policy=none) header.from=brokenco.de; spf=pass (mx1.freebsd.org: domain of rtyler@brokenco.de designates 79.135.106.25 as permitted sender) smtp.mailfrom=rtyler@brokenco.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brokenco.de; s=protonmail; t=1755998152; x=1756257352; bh=SSkTpfJmsEXYhKlO4ha51s3N2SNFmZ/UY50wo57mnjQ=; h=Date:To:From:Subject:Message-ID:Feedback-ID:From:To:Cc:Date: Subject:Reply-To:Feedback-ID:Message-ID:BIMI-Selector; b=lCHv1b/Ra16K3rkXRgY2tnSsH4oL7t9sfiPAMBRRC7d41EsNOgMzgUsKs/Z3HzNZR 9/xaIRQHf2CXkCAy5zsUvCnq1uX8AJnIX2TOfFVroaHfLct/FPJpGrO9A+wEO6mg54 tMjvRuokj3PwD9guezjWjMPHvst2ke2yQBxQP3Uo= Date: Sun, 24 Aug 2025 01:15:48 +0000 To: "freebsd-net@freebsd.org" From: R Tyler Croy Subject: Intermittent failure of routing/gateway with ix(4) (x86_64) Message-ID: <6HcKz3OxJSnjZdoCr4I0mksk9RemKJflHVgnkYI8-FydM4mDDldzTm8qthQ0iJCftaETOVeQFde4fz5i1703B8Gd2ZBvPmBwF_MMnhuJ8VM=@brokenco.de> Feedback-ID: 10207728:user:proton X-Pm-Message-ID: 55d3c1f0691a5d37d2afae1490c2cb4725603802 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha512; boundary="------dbf05e601922b82fd8bb7a7b980a4b32d82ab8836ac09b4c77ac71a70562da50"; charset=utf-8 X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.08 / 15.00]; SIGNED_PGP(-2.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-0.99)[-0.994]; NEURAL_HAM_SHORT(-0.59)[-0.586]; DMARC_POLICY_ALLOW(-0.50)[brokenco.de,none]; RWL_MAILSPIKE_EXCELLENT(-0.40)[79.135.106.25:from]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain]; R_SPF_ALLOW(-0.20)[+ip4:79.135.106.0/24:c]; R_DKIM_ALLOW(-0.20)[brokenco.de:s=protonmail]; ARC_NA(0.00)[]; ASN(0.00)[asn:62371, ipnet:79.135.106.0/24, country:CH]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~]; MISSING_XM_UA(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; HAS_ATTACHMENT(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[79.135.106.25:from]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_COUNT_ZERO(0.00)[0]; TO_DN_EQ_ADDR_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; DKIM_TRACE(0.00)[brokenco.de:+] X-Rspamd-Queue-Id: 4c8bbH04cTz3J9C This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------dbf05e601922b82fd8bb7a7b980a4b32d82ab8836ac09b4c77ac71a70562da50 Content-Type: multipart/mixed;boundary=---------------------0fd6363661b49d6f800f3474cb41b2cf -----------------------0fd6363661b49d6f800f3474cb41b2cf Content-Transfer-Encoding: quoted-printable Content-Type: text/plain;charset=utf-8 Howdy! I am hoping y'all could help me add more debugging to a FreeBSD 14.= x based router/gateway. The device has two ix(4) NICs for the WAN/LAN. Per= iodically the device stops routing traffic entirely, but the machine is st= ill online and interactive. What is particularly interesting is when I console into the machine I can = still send traffic out from the device over the WAN interface, but anythin= g that relies on the gateway seems to fail. I.e. routing to any host on th= e LAN interface (ix1) no longer works. `service routing restart` does nothing, `service netif restart` also does = nothing. Downing the ix1 interface and bringing it back up does nothing. A reboot however does puts it back into working order. = On one instance the console had a lot of arpresolve "cannot allocate llinf= o" errors, chasing that rabbit led nowhere. Because this freezing behavior is intermittent but _does_ seem to correlat= e with higher network utilization, I'm wondering if there are debugging lo= gs I can enable, or a way to inspect driver specific counters that could b= e overflowing, etc? I'm open to any recommendations that prevent me from setting up a cron eve= ry minute to validate connectivity or reboot the box! :) Cheers -----------------------0fd6363661b49d6f800f3474cb41b2cf-- --------dbf05e601922b82fd8bb7a7b980a4b32d82ab8836ac09b4c77ac71a70562da50 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: ProtonMail wsG5BAEBCgBtBYJoqme0CZDqliUJ0zoEdUUUAAAAAAAcACBzYWx0QG5vdGF0 aW9ucy5vcGVucGdwanMub3JngYHR6mVexth8YJ4KH0UeZdCIlEEG8MpBTwwY O2HQGIsWIQR7rUKRWE2z4+Kwj8/qliUJ0zoEdQAATuAQAJr9PvPP7EkBvC/c fXTkN6GcrDcLREKX/2CnHNgOFB45vl28aSws5CT07dN9tjR7gpdy1EbkGfW/ cBUb7qOZIes9RDAPQbVjs0ig6xZ8Xyd6JEtycVa6d1Toj1cGs3x4rQu2bpfB IC1q+Ft7aW0yBnA2B+VS7u2K5PK6gl9f6XlfyG20rPS9Lzj5o6ecoAhGQmER pNMYyqmT7VxsoETqCklaLd2AI75v0W4r9knzhXEhev9AJESw+bnZTEMkGP8J MZM8cIJN5QJvBoiXgAFgyQKeqkz3NRsqdk5uI3EsiiqrHlOmUebPaL0F7H6V 8rMugi4HFPYGp5tmYmealTvRT+Z3vxXCR6hkNPmFLTSvv4VddI6qQ22OzOm+ heR5kBYP7RN2tY2UUTiC6YvM/BCG2Bw0wPSlrOzHb7dAl2AvlZRzJy+xffuA Df2jPIGKLXlxc72TSTaDD9ohI9iB7hffJkZrmPCKib4u6bcI63gu+fL9/gWA SRZ0oaXLsuO9zmBt+atJ9NxflVSyBo9mTgUys3trfFy+11ad/oji5KITKo2m xx1D+f7u3BdOOQ6MSZCfMWhkTGgBz+BCUYXtna5Ff+qHXNdD/NkDb+JamwMV QGRxYaObYOI9WRAt7/6PhK1wvRCY6AJth0Ag38kswrzjoDLRVT6z+u0C4njI +aMq5VEN =4yCy -----END PGP SIGNATURE----- --------dbf05e601922b82fd8bb7a7b980a4b32d82ab8836ac09b4c77ac71a70562da50--