Re: DUMMYNET broken on 4.11 (was: dummynet and vr(4)/egress broken in 4.11 ?)

From: Jeremie Le Hen (jeremie_at_le-hen.org)
Date: 02/01/05

  • Next message: Chris Cowen: "Re: racoon behaviour when SA expires" 
    Date: Tue, 1 Feb 2005 02:33:10 +0100
To: freebsd-net@freebsd.org

    On Tue, Feb 01, 2005 at 02:05:12AM +0100, Jeremie Le Hen wrote:
    > On Tue, Feb 01, 2005 at 01:20:34AM +0100, Jeremie Le Hen wrote:
    > > > I'll give a try to a 4.10 kernel ASAP.
    > >
    > > I compiled the lastest kernel from RELENG_4_10 CVS branch and DUMMYNET
    > > pipes works well. I am able to use one pipe on my external interface
    > > egress without breaking TCP streams.
    > >
    > > I'm now recompiling the lastest kernel from the RELENG_4 branch to test
    > > the same configuration but I'm pretty sure it won't work.
    > >
    > > Any ideas of what could break this ?
    >
    > I run the lastest 4.11 kernel and using exactly the same configuration
    > breaks my TCP streams coming from my internal network.

    As I said, I took the lastest kernel from RELENG_4. DUMMYNET pipes
    will break any TCP stream coming from my internal network (which are
    thus NATed by IPFilter), but not the ones originated from the router
    itself.

    I checked the differences between RELENG_4_10 and RELENG_4 :

            o netinet/ nothing relevant
            o net/ nothing relevant
            o contrib/ipfilter/ could be the point given that IPFilter
                                    was updated from 3.4.31 to 3.4.35 and
                                    problems occur only when packets are
                                    NATed

    So I did:
    %%%
      # cd /sys/contrib/ipfilter
      # cvs up -r RELENG_4_10 -dP
      # config; make depend; make; make install ...
    %%%

    And it works !

    So changes in IPFilter between 4.10 and 4.11 obviously broke DUMMYNET
    pipes (see my^H^Hthe entire thread for more details).

    Good night.

    Best regards, 

    -- 
Jeremie Le Hen
jeremie@le-hen.org
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Chris Cowen: "Re: racoon behaviour when SA expires"