Date: Wed, 04 Jan 2012 04:06:11 +0900 (JST) From: Hiroki Sato <hrs@FreeBSD.org> To: dougb@FreeBSD.org Cc: ndenev@gmail.com, emaste@FreeBSD.org, borjam@sarenet.es, freebsd-net@FreeBSD.org Subject: Re: openbgpds not talking each other since 8.2-STABLE upgrade Message-ID: <20120104.040611.1847309275485655567.hrs@allbsd.org> In-Reply-To: <20DC0C8A-DD9E-408E-9ACA-82532DB31871@lists.zabbadoz.net> <4F027BC0.1080101@FreeBSD.org> References: <20120103152909.GA83706@sandvine.com> <6FE9FF15-487F-4A31-AEE0-A0AD92F5DC72@sarenet.es> <20DC0C8A-DD9E-408E-9ACA-82532DB31871@lists.zabbadoz.net>
next in thread | previous in thread | raw e-mail | index | archive | help
----Security_Multipart(Wed_Jan__4_04_06_11_2012_717)-- Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Doug Barton <dougb@freebsd.org> wrote in <4F027BC0.1080101@FreeBSD.org>: do> We have a pair of physical FreeBSD systems configured as routers do> designed to operate in an active/standby CARP configuration. Everything do> used to work fine, but since an upgrade to 8.2-STABLE on December 29th do> the two routers don't speak BGP to each other anymore. They both do> function fine individually, and failover works. It is only the openbgpd do> communication between them that's not flowing. Doug, does your kernel have TCP_SIGNATURE option? The patch[*] for net/openbgpd can be used as a workaround if it was due to TCP_MD5SIG option on the listening sockets. [*] http://people.allbsd.org/~hrs/FreeBSD/openbgpd.20120104-1.diff While this is an ugly hack and I will investigate more reasonable solution for that, I want to narrow down the cause first. Can anyone who are using a 8-STABLE kenrel with TCP_SIGNATURE let me know if this works or not? -- Hiroki ----Security_Multipart(Wed_Jan__4_04_06_11_2012_717)-- Content-Type: application/pgp-signature Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (FreeBSD) iEYEABECAAYFAk8DUaMACgkQTyzT2CeTzy0giACfSkwnqscci6nP71yC7Jwi+QHa BVYAoKl5IiyjZW96saGtXe2OM2RFuUKm =P7eV -----END PGP SIGNATURE----- ----Security_Multipart(Wed_Jan__4_04_06_11_2012_717)----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120104.040611.1847309275485655567.hrs>