From nobody Sun Mar 19 13:42:52 2023
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PffFc3692z40FPs
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Sun, 19 Mar 2023 13:43:00 +0000 (UTC)
	(envelope-from tuexen@freebsd.org)
Received: from drew.franken.de (drew.ipv6.franken.de [IPv6:2001:638:a02:a001:20e:cff:fe4a:feaa])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "*.franken.de", Issuer "Sectigo RSA Domain Validation Secure Server CA" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4PffFc10w4z4FQT
	for <freebsd-net@freebsd.org>; Sun, 19 Mar 2023 13:43:00 +0000 (UTC)
	(envelope-from tuexen@freebsd.org)
Authentication-Results: mx1.freebsd.org;
	none
Received: from smtpclient.apple (unknown [IPv6:2a02:8109:1140:c3d:f82b:3d0e:59d9:3576])
	(Authenticated sender: micmac)
	by mail-n.franken.de (Postfix) with ESMTPSA id F280372826400;
	Sun, 19 Mar 2023 14:42:53 +0100 (CET)
Content-Type: text/plain;
	charset=us-ascii
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@freebsd.org
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\))
Subject: Re: assigning different TCP stacks to the jails
From: tuexen@freebsd.org
In-Reply-To: <18985515-e3bf-1575-4abb-30e511a45ae7@plan-b.pwste.edu.pl>
Date: Sun, 19 Mar 2023 14:42:52 +0100
Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <7BBAF016-3D98-40F2-9215-30E572B5857E@freebsd.org>
References: <18985515-e3bf-1575-4abb-30e511a45ae7@plan-b.pwste.edu.pl>
To: Marek Zarychta <zarychtam@plan-b.pwste.edu.pl>
X-Mailer: Apple Mail (2.3731.400.51.1.1)
X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00
	autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mail-n.franken.de
X-Rspamd-Queue-Id: 4PffFc10w4z4FQT
X-Spamd-Bar: ----
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:680, ipnet:2001:638::/32, country:DE]
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-ThisMailContainsUnwantedMimeParts: N

> On 19. Mar 2023, at 14:12, Marek Zarychta =
<zarychtam@plan-b.pwste.edu.pl> wrote:
>=20
> Dear subscribers of the list,
>=20
> TCP algo modules can be loaded/unloaded/changed on the fly. In FreeBSD =
14-CURRENT one can even change it on an active socket with tcpsso(8) =
utility, but there is no way to run jail with different TCP stack. =
Neither normal nor VNET jail support switching sysctl =
net.inet.tcp.functions_default.
>=20
> Is there any way to set TCP algo inherited through fork+exec in a =
similar way setfib(1) assigns fib or perhaps assign TCP algo per VNET =
instance?
Hi Marek,

so you are asking for the sysctl variable net.inet.tcp.functions_default =
to be vnet specific?

Best regards
Michael
>=20
> I am asking, since the almost perfect tcp_rack(4) applied on the host =
is missing TCP-MD5 singing feature which is required in one of the =
jails.
>=20
> Cheers
> --=20
> Marek Zarychta