Date: Tue, 23 Jul 2019 08:50:13 +0000 From: <Stefan.Erl@dlr.de> To: <freebsd-net@freebsd.org> Subject: Dummynet, pipes and VNET jails Message-ID: <B24A086E5029304E81DE2631F7F67DB18322D6B1@DLDEFFMIMP04EXC.intra.dlr.de>
next in thread | raw e-mail | index | archive | help
Hi all, I have a problem with ipfw/dummynet, pipes and VNET jails using FreeBSD 12.= 0 release. Packets are lost in the pipe when any impairments are configured. I set up several VNET jails and connected them via epairs, in order to=20 do tests with different network and routing configurations. On some jails, = I want to run dummynet with pipes to add delay to the packets. Whenever I configure a pipe with zero delay, everything works. As soon as I add any = delay (or loss, bw limit), the packets enter the pipe, but never exit it, and nev= er appear on the target Jail. A simple test setup I've set up is the following: (JailB is configured for IP forwarding) --------- --------- --------- | JailA |-----| JailB |-----| JailC | --------- --------- --------- JailA: ping JailC JailB:=20 ipfw flush ifpw add 10000 pipe 1 ip from JailA to any ipfw config pipe 1 delay 0ms =09 This works fine, packets arrive at JailC. "ipfw show" shows increasing counters for rules 10000 and 65535 (allow ip from any to any) =09 Then, if I add some delay: =09 ipfw config pipe 1 delay 10ms =09 Packets are lost in JailB, don't arrive at JailC. "ipfw show" shows increasing counters only for rule 10000, but not for 65535. =09 IPFW and dummynet are compiled into the kernel, with kern.hz=3D1000 and=20 IPFW_DEFAULT_TO_ACCEPT option. Dummynet pipes on the Jail ethernet interfac= e outside a jail seem to work fine. I've found some threads from 2010 saying that there are some problems with dummynet and VNET jails. Are these still existing, is something else wrong,= or am I missing something? Regards, Stefan
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B24A086E5029304E81DE2631F7F67DB18322D6B1>