Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Feb 2013 06:34:17 -0800 (PST)
From:      =?iso-8859-1?Q?D=E1nielisz_L=E1szl=F3?= <laszlo_danielisz@yahoo.com>
To:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: packages listing
Message-ID:  <1360506857.11551.YahooMailNeo@web160505.mail.bf1.yahoo.com>
In-Reply-To: <5117A5E3.6010503@gmx.com>
References:  <1360479157.43293.YahooMailNeo@web160504.mail.bf1.yahoo.com> <20130210075713.e95310af.freebsd@edvax.de>, <511790C4.4070605@gmx.com> <13CA24D6AB415D428143D44749F57D7201EA6BC8@ltcfiswmsgmb21> <5117A5E3.6010503@gmx.com>

next in thread | previous in thread | raw e-mail | index | archive | help
=0A=0AUhh, I got a couple of answers :)=0AThx everybody!=0A=0A=0A__________=
______________________=0A From: Nikos Vassiliadis <nvass@gmx.com>=0ATo: "Te=
ske, Devin" <Devin.Teske@fisglobal.com> =0ACc: D=E1nielisz L=E1szl=F3 <lasz=
lo_danielisz@yahoo.com>; Polytropon <freebsd@edvax.de>; "freebsd-questions@=
freebsd.org" <freebsd-questions@freebsd.org> =0ASent: Sunday, February 10, =
2013 2:51 PM=0ASubject: Re: packages listing=0A =0AOn 2/10/2013 3:09 PM, Te=
ske, Devin wrote:=0A> Just curious, why not use "pkg_info -Ra" instead of "=
pkg_info -R '*'" ?=0A=0ABecause I didnt know -a;)=0A=0A=0A_________________=
______________________________=0Afreebsd-questions@freebsd.org mailing list=
=0Ahttp://lists.freebsd.org/mailman/listinfo/freebsd-questions=0ATo unsubsc=
ribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
From owner-freebsd-questions@FreeBSD.ORG  Sun Feb 10 14:34:44 2013
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: questions@freebsd.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 8F5F7DA2
 for <questions@freebsd.org>; Sun, 10 Feb 2013 14:34:44 +0000 (UTC)
 (envelope-from Devin.Teske@fisglobal.com)
Received: from mx1.fisglobal.com (mx1.fisglobal.com [199.200.24.190])
 by mx1.freebsd.org (Postfix) with ESMTP id 5FFF8DF
 for <questions@freebsd.org>; Sun, 10 Feb 2013 14:34:44 +0000 (UTC)
Received: from smtp.fisglobal.com ([10.132.206.16])
 by ltcfislmsgpa07.fnfis.com (8.14.5/8.14.5) with ESMTP id r1AEYh8M010607
 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT);
 Sun, 10 Feb 2013 08:34:43 -0600
Received: from LTCFISWMSGMB21.FNFIS.com ([10.132.99.23]) by
 LTCFISWMSGHT05.FNFIS.com ([10.132.206.16]) with mapi id 14.02.0309.002; Sun,
 10 Feb 2013 08:34:42 -0600
From: "Teske, Devin" <Devin.Teske@fisglobal.com>
To: Nikos Vassiliadis <nvass@gmx.com>
Subject: RE: vnet without epair
Thread-Topic: vnet without epair
Thread-Index: AQHOBt464Fa8DUsL5kqOlKb89O3Sd5hyJMWAgAAqfgD//8hg54ABPouA//+wx9GAAHqXAP//m/lBAAz9hAD//5vVRw==
Date: Sun, 10 Feb 2013 14:34:42 +0000
Message-ID: <13CA24D6AB415D428143D44749F57D7201EA6C63@ltcfiswmsgmb21>
References: <511671FA.3050801@a1poweruser.com> <511680AD.1040209@gmx.com>,
 <5116A452.6030104@a1poweruser.com>
 <13CA24D6AB415D428143D44749F57D7201EA6A3F@ltcfiswmsgmb21>,
 <511780DF.6010600@gmx.com>
 <13CA24D6AB415D428143D44749F57D7201EA6BAB@ltcfiswmsgmb21>,
 <5117A540.1060702@gmx.com>
 <13CA24D6AB415D428143D44749F57D7201EA6C2D@ltcfiswmsgmb21>,
 <5117A884.8020709@gmx.com>
In-Reply-To: <5117A884.8020709@gmx.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.132.253.120]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.9.8327, 1.0.431,
 0.0.0000
 definitions=2013-02-10_04:2013-02-08,2013-02-10,1970-01-01 signatures=0
Cc: Fbsd8 <fbsd8@a1poweruser.com>, FreeBSD questions <questions@freebsd.org>
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>;
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 10 Feb 2013 14:34:44 -0000

On Sun, 10 Feb 2013, Nikos Vassiliadis wrote:

> On 2/10/2013 3:56 PM, Teske, Devin wrote:
> >
> > Excellent! This is precisely what I was after when I wrote the vimage p=
ackage and its contents. I'm familiar with IMUNES and netgraph fits the bil=
l well (especially with "ngctl dot" being useful in providing visual confir=
mation when you've achieved the desired network layout -- when "ngctl dot |=
 dot -Tsvg -o netgraph.svg" starts to look like your IMUNES graph, then you=
 know you're making progress toward having the right configuration).
>=20
> You'll be soon hearing from me then!
>=20

Here's some examples of "ngctl dot | dot -Tsvg -o<file>" run on various ser=
vers running my vimage package:

http://druidbsd.sourceforge.net/download/warden0.jbsd.svg

A server with two network interfaces (igb0 and igb1). igb0 is bridged to 5 =
vimages (named "kps0a_dev", "kps64a_dev", "kws411a_dev", "kws411b_dev", and=
 "kws82a_dev"). Each vimage has a single bridge to the same igb0 interface =
and are talking on a single subnet (see next example for more complex layou=
t). Meanwhile, igb1 is used exclusively for the host machine (netgraph disp=
lays this in a "disconnected" cluster because it's not in-use by the netgra=
ph system). The "ngctl99755" element off to the right is the "ngctl" progra=
m's connection to the netgraph system to dump the dot(1) output for the cre=
ation of the SVG image itself.

http://druidbsd.sourceforge.net/download/folsom.svg

A server with 5 network interfaces (em0, em1, em2, igb0, igb1). igb0 is bri=
dged between the host machine, a vimage named "stats" and a vimage named "b=
eefcake". igb1 is bridged between the host machine, a vimage named "bafug1"=
, and 6 other vimages. Of the 6 other vimages, the special one is "cfg0_vlb=
xrich" which has 2 bridges to the same interface (the host machine's rc.con=
f has vimage_cfg0_vlbxrich_bridges=3D"igb0 igb0") but is speaking different=
 subnets on each of the bridged interfaces within the jail (saying ifconfig=
 in that vimage produces two interfaces -- beside lo0 -- named ng0_cfg0_vlb=
xri, and ng1_cfg0_vlbxri; these are configured to 2 different subnets in th=
e jails's /etc/rc.conf). There are more vimages that can't be seen as netgr=
aph does not show vimages that are using whole interfaces (a single PHY on =
a quad-port NIC for example; or a tap/tun pair); however you can see the in=
terfaces em0, em1, and em2. What's cute is that those vimages are often pur=
posed as "high security" vimages and as-such we view it as a value-add that=
 they don't appear in the netgraph layout. (but to be honest, this is an ol=
der output and I can't remember what those interfaces were used for -- our =
vimage servers have grown and changed since then).

http://druidbsd.sourceforge.net/download/bastion.svg

A high security server (that was decommissioned last Friday) where each vim=
age gets an entire PHY (read: netgraph is not used, whole interfaces are mo=
ved into the vimages -- see /etc/rc.conf.d/vimage specifically vimage_examp=
le_vnets). So naturally, this graph appears to be rather boring (all the in=
terfaces are in the "disconnect" cluster) because netgraph isn't using the =
interfaces.

--=20
Devin

_____________
The information contained in this message is proprietary and/or confidentia=
l. If you are not the intended recipient, please: (i) delete the message an=
d all copies; (ii) do not disclose, distribute or use the message in any ma=
nner; and (iii) notify the sender immediately. In addition, please be aware=
 that any message addressed to our domain is subject to archiving and revie=
w by persons other than the intended recipient. Thank you.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1360506857.11551.YahooMailNeo>