Date: Fri, 29 May 2009 11:38:54 -0700 From: Steven Schlansker <scs@EECS.Berkeley.EDU> To: freebsd-questions@freebsd.org Subject: Re: pfsync in GENERIC? Message-ID: <C113D42F-C628-4E91-8AFE-BD2556502AC7@EECS.Berkeley.EDU> In-Reply-To: <200905292001.02072.mel.flynn%2Bfbsd.questions@mailing.thruhere.net> References: <89C182FE-81B9-474E-84EA-FBB6F68C4E75@eecs.berkeley.edu> <200905292001.02072.mel.flynn%2Bfbsd.questions@mailing.thruhere.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On May 29, 2009, at 11:01 AM, Mel Flynn wrote: > On Friday 29 May 2009 18:19:52 Steven Schlansker wrote: > >> [steven@gateway2:~]% sudo /etc/rc.d/pfsync start >> /etc/rc.d/pfsync: WARNING: pfsync(4) must be statically compiled in >> the kernel. > >> Is pfsync not in GENERIC? I checked the amd64 config file and indeed >> it does not show up, however pf and pflog are not there either but >> are >> usable in the base system, so I am not positive that pfsync being >> missing is therefore conclusive. >> >> I would like to if at all possible use GENERIC so that I can take >> advantage of freebsd-update etc. Is there some way to get this all >> running without recompiling the kernel? > > No, the error message is clear. pfsync cannot currently be loaded as > kernel > module and it's not in GENERIC. The same goes for altq. See sys/conf/ > NOTES for > details. Ah, now I get it. I'm used to the Linux way of configuring modules where if a device is a module, it still appears in the configuration file. So I was interpreting the missing "pf" and "pflog" entries not as "built as a module" but as "missing, why can I still use them?" And not to be argumentative, but sys/conf/NOTES does not really provide any information. The only comment explains what the device does, not why it wouldn't be enabled in GENERIC. Is there any reason it could not be? (For those of us who want to use freebsd-update, for example) By digging around on the internet it seems that the problem arises from the use of multicast protocols (ref: http://lists.freebsd.org/pipermail/freebsd-pf/2005-October/001521.html) . pfsync allows the use of unicast as well - would it be feasible to have a modular version that only supports unicast (via syncpeer) perhaps? There's not been much of a discussion about this since 2005, it seems. I'm curious as to that the prevailing opinion is. > > FYI: On -current it's still not possible to load as a module.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?C113D42F-C628-4E91-8AFE-BD2556502AC7>