From owner-freebsd-net@freebsd.org Tue Feb 14 14:15:19 2017 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8EB78CDE2CE for ; Tue, 14 Feb 2017 14:15:19 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from forward1j.cmail.yandex.net (forward1j.cmail.yandex.net [IPv6:2a02:6b8:0:1630::14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 12161177D; Tue, 14 Feb 2017 14:15:18 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from smtp2h.mail.yandex.net (smtp2h.mail.yandex.net [IPv6:2a02:6b8:0:f05::116]) by forward1j.cmail.yandex.net (Yandex) with ESMTP id 057052100F; Tue, 14 Feb 2017 17:15:16 +0300 (MSK) Received: from smtp2h.mail.yandex.net (localhost.localdomain [127.0.0.1]) by smtp2h.mail.yandex.net (Yandex) with ESMTP id 06D3D78191B; Tue, 14 Feb 2017 17:15:12 +0300 (MSK) Received: by smtp2h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id E6pkxlnpN1-FBcuYQdT; Tue, 14 Feb 2017 17:15:12 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1487081712; bh=g414Nj6fCW/qjNl3g2pR2RXfcke/CMfh/CAl3BXkoQ8=; h=Subject:To:References:From:Cc:Message-ID:Date:In-Reply-To; b=i95zkOsPQ4nZvWA9jblNeiq5dhICbIKIvXItJZDLK28OolS8aIx4rzGdl1ZCgiLpx nYpXs0/BgyImyUASsZX/mRWQBK451ELTQYP8x5Fm4bVGjpxgSnO7sCzh9K9Z2QrxGR GvS6IWqz+gg0GwMPtRc7ZuO4/sfRtZ0tmv1qmgm0= Authentication-Results: smtp2h.mail.yandex.net; dkim=pass header.i=@yandex.ru X-Yandex-Suid-Status: 1 0,1 0,1 0 Subject: Re: How to enable ECMP flow based forwarding ? To: =?UTF-8?Q?Olivier_Cochard-Labb=c3=a9?= , "freebsd-net@freebsd.org" References: From: "Andrey V. Elsukov" Openpgp: id=E6591E1B41DA1516F0C9BC0001C5EA0410C8A17A Cc: "Alexander V. Chernikov" Message-ID: <6162c934-3f22-889e-f45f-6f988342f4b3@yandex.ru> Date: Tue, 14 Feb 2017 17:13:28 +0300 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="HsDrqcbRquf8C74wEMIbfRiT2IwHShtG4" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Feb 2017 14:15:19 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --HsDrqcbRquf8C74wEMIbfRiT2IwHShtG4 Content-Type: multipart/mixed; boundary="GggHtXHKt1Rjur6usL4BvtqH5hTm16LEF"; protected-headers="v1" From: "Andrey V. Elsukov" To: =?UTF-8?Q?Olivier_Cochard-Labb=c3=a9?= , "freebsd-net@freebsd.org" Cc: "Alexander V. Chernikov" Message-ID: <6162c934-3f22-889e-f45f-6f988342f4b3@yandex.ru> Subject: Re: How to enable ECMP flow based forwarding ? References: In-Reply-To: --GggHtXHKt1Rjur6usL4BvtqH5hTm16LEF Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 14.02.2017 03:23, Olivier Cochard-Labb=C3=A9 wrote: > Hi, >=20 > I'm testing FreeBSD ECMP behavior by adding "options RADIX_MPATH" to my= > kernel configuration (11-stable). > Now I can configure two identical routes toward 2 different next-hop: F= irst > step achieved :-) > But it uses only the first entry and never uses the second one. >=20 > I've tried to shutdown the first next-hop router (then no more arp-repl= y > from this next-hop): But the ECMP FreeBSD router sticks to its first ro= ute > entry and never try the second entry :-( >=20 > Is there something else to enable (like RSS?) for having a real ECMP fl= ow > based router ? I think you need to implement some code first. The fastfwd has not supported MPATH and tryforward also doesn't support it. For IPv4 you can try to add some IPsec security policy to disable ip_tryforward. In this case ip_forward() will be used, and it uses rtalloc_mpath_fib(), so, probably, it will work. --=20 WBR, Andrey V. Elsukov --GggHtXHKt1Rjur6usL4BvtqH5hTm16LEF-- --HsDrqcbRquf8C74wEMIbfRiT2IwHShtG4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAlijEIgACgkQAcXqBBDI oXqJ6AgAwGnkBI7u4vT1khccY8u1r6d2ST15rEcOmaUs9YN2rMzClDaSqHNqoF+Y ZU1g1gmWRgsPsa77f0AZObzsm+LTXsx9XwU1HWxx0IOcmqO6KTiWGbRUhxVTCNw5 vIyElxvvAbzO+egKkEdid6ELtkbTztEHBx7CNs0gT21aOPTGLqAa8SoMX2N+z7Wg ATr1sfQSrzpAmeNres/CZNTsK99VccedHtaPPySQHucXR2KZcNaKrTh+EyZ0OvPF 0JlYGkAb3zdhdUM7IOSwW37D64LG/dFl0m3R28/3wXf/U1Gn3SEcYzVRRTq5Qj0u qvUXDlZ0Ztks1Cun+rXekDCcVY57xw== =JCZb -----END PGP SIGNATURE----- --HsDrqcbRquf8C74wEMIbfRiT2IwHShtG4--