New version of jng (9.0)

[dteske]

Summary

Changes for jng 2.0 -> 9.0 include:

+ Use ng_bridge(4) uplink hooks on ng_ether(4) lower so the host
  mapping table stays small (first hook is uplink; unknown unicast
  goes only to uplink)
+ Add `jng pin [-h] {-a | NAME ...}' to plant eiface MACs with
  NGM_BRIDGE_MOVE_HOST and raise maxStaleness so they do not expire
+ Remove experimental NG_TYPE=iface / ng_tcpmss(4); ng_iface(4)
  cannot work with ng_bridge(4)
+ Add -v
+ SPDX-License-Identifier: BSD-2-Clause; bump copyright to 2026

See D58902 for the ng_bridge(4) data-path MOVE_HOST fix.

MFC after:	1 week

[jlduran]

Nice!

share/examples/jails/jng

45

I had to add:

exec.prestop += "ifconfig ng0_${name} -vnet ${name}";

To avoid a race condition when tearing down the jail (bpf_vmove()).

[kfv]

It's brilliant. Cheers!

[dteske]

In D58903#1351861, @jlduran wrote:

Nice!

That's a really good catch! I went back and searched for bugs, and found PR 268397 (and assigned it to myself).

I will address that in a change to the example rc.conf/jail.conf setup.