Page MenuHomeFreeBSD
Feed Advanced Search

May 3 2024

kp added a comment to D44774: carp: support VRRPv3.
In D44774#1027778, @bz wrote:

I'll reply here rather than the email--one well two major concerns (and I didn't mean legal) with the "can of worms" are:
(1) You are adding VRRP version 3... someone will come next and ask "and what about VRRP version 2"?

Right now the answer is "We don't have v2, and we have no plans to support v2 either.".
If someone does ever want to add VRRPv2 support they get to deal with the fallout. I'm not inclined to copy/paste chunks of code on the off chance that maybe it'll be slightly helpful in the future.
We're not making choices that'll make that impossible to do in the future.

May 3 2024, 11:38 AM
kp committed rGbf8988187f0d: pf tests: fix REQUIRED_MODULES typo (authored by kp).
pf tests: fix REQUIRED_MODULES typo
May 3 2024, 7:53 AM

May 2 2024

kp added a comment to D45039: carp: isolate VRRP from CARP.

Is this whole stack of reviews a temporary reviews to get easier review for pfsense and network? I think better just squash all my submissions on top of your work and push that to FreeBSD/main as one change.

May 2 2024, 7:11 PM

May 1 2024

kp added a comment to D44774: carp: support VRRPv3.
In D44774#1026860, @kp wrote:

Split out Gleb's commits again.

It makes the individual changes easier to understand.

May 1 2024, 9:50 AM
kp updated the diff for D44774: carp: support VRRPv3.

Split out Gleb's commits again.

May 1 2024, 9:48 AM
kp updated the diff for D44776: carp: document the new VRRPv3 support.

Document that we cannot switch between carp and vrrp

May 1 2024, 9:46 AM
kp requested review of D45039: carp: isolate VRRP from CARP.
May 1 2024, 9:43 AM
kp requested review of D45038: carp: refactor packet tagging for ether_output().
May 1 2024, 9:43 AM
kp requested review of D45037: carp: assert that we are calling correct input function. We are..
May 1 2024, 9:43 AM
kp requested review of D45036: carp: don't chain call vrrp_send_ad via carp_send_ad.
May 1 2024, 9:43 AM

Apr 30 2024

kp updated the diff for D44774: carp: support VRRPv3.
  • remove stale comment
  • init sc_addr in the initializer
Apr 30 2024, 4:07 PM
kp updated the summary of D44774: carp: support VRRPv3.
Apr 30 2024, 3:23 PM
kp updated the diff for D44774: carp: support VRRPv3.

Add glebius' changes from https://github.com/freebsd/freebsd-src/compare/main...glebius:FreeBSD:carp-vrrp

Apr 30 2024, 3:23 PM
kp added inline comments to D44774: carp: support VRRPv3.
Apr 30 2024, 7:10 AM

Apr 29 2024

kp committed rG221d459fbc67: pflow: handle unattached states (authored by kp).
pflow: handle unattached states
Apr 29 2024, 4:16 PM
kp committed rG5824df8d991c: pf: convert DIOCGETSTATUS to netlink (authored by kp).
pf: convert DIOCGETSTATUS to netlink
Apr 29 2024, 2:37 PM
kp committed rGa3f7176523e8: libpfctl: fix incorrect pcounters array size (authored by kp).
libpfctl: fix incorrect pcounters array size
Apr 29 2024, 2:37 PM
kp committed rG044243fcc9b4: libpfctl: allow access to the fd (authored by kp).
libpfctl: allow access to the fd
Apr 29 2024, 2:37 PM

Apr 26 2024

kp added a comment to D44774: carp: support VRRPv3.

If it is possible to set VRRP values while interface is in CARP mode and vice versa, then it is already a bug and de-unionizing just hides it.

Apr 26 2024, 7:52 AM

Apr 25 2024

kp added a comment to D44774: carp: support VRRPv3.

The switching code should just use a local variable to convert between prio and adnskew.

We can't convert between them. They're not different representations of the same concept, they just represent different things.

Apr 25 2024, 8:03 AM

Apr 24 2024

kp added a comment to D44774: carp: support VRRPv3.
In D44774#1023611, @kp wrote:

Put carp/vrrp3 specific variables in their own structs.

This definitely is better, but I still can't figure out what prevents to unionize it? Do we have a code that switches certain address operation between CARP and VRRP?

Apr 24 2024, 8:06 PM

Apr 22 2024

kp added a comment to D44774: carp: support VRRPv3.
In D44774#1020944, @kp wrote:
In D44774#1020899, @bz wrote:

I will simply express that this will not only open a can of worms by mixing both but the original reasons not to include VRRPv2/3 and hence the "existence" of CARP is also ignored.

I'm assuming you're referring to the supposed patent issues?

There are multiple other open source VRRP implementations, e.g. https://github.com/FDio/vpp/tree/master/src/plugins/vrrp and https://www.keepalived.org
Also, the relevant patents have expired by now (by which I mean, in 2017 and 2012, so 7 and 12 years ago): https://en.wikipedia.org/wiki/Virtual_Router_Redundancy_Protocol#cite_note-6

Apr 22 2024, 11:41 AM
kp updated the diff for D44774: carp: support VRRPv3.

Put carp/vrrp3 specific variables in their own structs.

Apr 22 2024, 11:39 AM

Apr 19 2024

kp added inline comments to D44774: carp: support VRRPv3.
Apr 19 2024, 9:27 AM

Apr 18 2024

kp committed rG02ea70eff39c: tcpdump: fix build (authored by kp).
tcpdump: fix build
Apr 18 2024, 3:56 PM
kp committed rGbf0700716a2e: tcpdump: cope with incorrect packet lengths (authored by kp).
tcpdump: cope with incorrect packet lengths
Apr 18 2024, 1:37 PM
kp committed rGdc16f5fe1422: tcpdump: cope with incorrect packet lengths (authored by kp).
tcpdump: cope with incorrect packet lengths
Apr 18 2024, 1:37 PM

Apr 17 2024

kp added inline comments to D44774: carp: support VRRPv3.
Apr 17 2024, 9:57 AM

Apr 16 2024

kp updated the diff for D44774: carp: support VRRPv3.
  • review remarks
Apr 16 2024, 2:41 PM
kp added inline comments to D44774: carp: support VRRPv3.
Apr 16 2024, 2:41 PM

Apr 15 2024

kp committed rG3075939da41a: src.libnames.mk: fix LIBPFCTL definition (authored by lexi_le-fay.org).
src.libnames.mk: fix LIBPFCTL definition
Apr 15 2024, 9:29 PM
kp added a comment to D44774: carp: support VRRPv3.
In D44774#1020899, @bz wrote:

I will simply express that this will not only open a can of worms by mixing both but the original reasons not to include VRRPv2/3 and hence the "existence" of CARP is also ignored.

I'm assuming you're referring to the supposed patent issues?

Apr 15 2024, 7:20 AM

Apr 13 2024

kp added inline comments to D44488: pf: if a new RDR state connect be created, modulate src port.
Apr 13 2024, 10:41 AM
kp requested review of D44776: carp: document the new VRRPv3 support.
Apr 13 2024, 8:52 AM
kp requested review of D44775: netinet tests: basic VRRP tests.
Apr 13 2024, 8:52 AM
kp requested review of D44774: carp: support VRRPv3.
Apr 13 2024, 8:52 AM

Apr 8 2024

kp closed D43504: netinet: add a probe point for IP stats counters.
Apr 8 2024, 3:31 PM
kp committed rG60d8dbbef075: netinet: add a probe point for IP, IP6, ICMP, ICMP6, UDP and TCP stats counters (authored by kp).
netinet: add a probe point for IP, IP6, ICMP, ICMP6, UDP and TCP stats counters
Apr 8 2024, 3:31 PM

Apr 5 2024

kp updated the diff for D43504: netinet: add a probe point for IP stats counters.

Allow MIB SDT's to be disabled.

Apr 5 2024, 8:08 AM

Apr 4 2024

kp closed D44580: tcpdump: cope with incorrect packet lengths.
Apr 4 2024, 8:09 AM
kp committed rG4848eb3af2a9: tcpdump: cope with incorrect packet lengths (authored by kp).
tcpdump: cope with incorrect packet lengths
Apr 4 2024, 8:09 AM

Apr 3 2024

kp added a comment to D43504: netinet: add a probe point for IP stats counters.

In the meantime, could you have a compile option to avoid these probes? Maybe re-do your new macros to use IP_SDT_PROBE" which can be defined to a noop if "NO_EXTRA_IP_SDT_PROBES" or some better named kernel config option is present?

Apr 3 2024, 6:28 PM

Apr 1 2024

kp requested review of D44580: tcpdump: cope with incorrect packet lengths.
Apr 1 2024, 2:08 PM
kp committed rGab872ab0bf19: pfsync: cope with multiple pending plus messages (authored by kp).
pfsync: cope with multiple pending plus messages
Apr 1 2024, 7:36 AM
kp committed rGf5c0005567b4: pfsync: fix use of invalidated stack variable (authored by kp).
pfsync: fix use of invalidated stack variable
Apr 1 2024, 7:36 AM
kp committed rG2fed983ceb66: pf: fix use-after-free (authored by kp).
pf: fix use-after-free
Apr 1 2024, 7:35 AM
kp committed rGe0a58ef24a3b: pfsync: cope with multiple pending plus messages (authored by kp).
pfsync: cope with multiple pending plus messages
Apr 1 2024, 7:35 AM
kp committed rG0ade521bac78: pfsync: fix use of invalidated stack variable (authored by kp).
pfsync: fix use of invalidated stack variable
Apr 1 2024, 7:35 AM

Mar 30 2024

kp added a comment to D43504: netinet: add a probe point for IP stats counters.

I lost my benchmark box yesterday. It will take me a few days to wrangle another one into shape for testing. I'm sorry this is taking so long. If you want to go ahead and push this, I'd understand..

Mar 30 2024, 12:52 AM

Mar 28 2024

kp committed rGa983cea4e9a8: pf: fix reply-to after rdr and dummynet (authored by kp).
pf: fix reply-to after rdr and dummynet
Mar 28 2024, 4:08 PM

Mar 25 2024

kp committed rGcaccf6d3c008: pfsync: cope with multiple pending plus messages (authored by kp).
pfsync: cope with multiple pending plus messages
Mar 25 2024, 4:45 AM
kp committed rG81debbd60e57: pfsync: fix use of invalidated stack variable (authored by kp).
pfsync: fix use of invalidated stack variable
Mar 25 2024, 4:45 AM
kp committed rGa1ecbc570117: pf: fix use-after-free (authored by kp).
pf: fix use-after-free
Mar 25 2024, 4:45 AM

Mar 24 2024

kp added inline comments to D44488: pf: if a new RDR state connect be created, modulate src port.
Mar 24 2024, 7:46 AM
kp added inline comments to D44488: pf: if a new RDR state connect be created, modulate src port.
Mar 24 2024, 7:01 AM
kp added a comment to D44488: pf: if a new RDR state connect be created, modulate src port.

This also really needs a test case.

Mar 24 2024, 6:50 AM
kp added a comment to D43504: netinet: add a probe point for IP stats counters.

I think what I will test is:

  1. SDT probes compiled out entirely
  2. This (D43504) patch with our current SDT mechanism
  3. D43504 + D44483 together

Does that sound appropriate?

@olivier : Do you have the time to do the same sort of test on your low-end pps routing setup?

Mar 24 2024, 5:19 AM

Mar 23 2024

kp accepted D44476: icmp: hide icmp_bandlimit_uninit() under VIMAGE.
Mar 23 2024, 6:01 AM
kp added a comment to D44476: icmp: hide icmp_bandlimit_uninit() under VIMAGE.
In D44476#1014446, @kp wrote:

When we build without VIMAGE VNET_SYSUNINIT translates to SYSUNINIT, so this patch means we leak V_icmp_rates[i].cr_rate on shutdown.
That's not exactly a critical problem, but this is technically wrong.

I don't agree with that. We don't deallocate memory on shutdown in general case. We do not have a matching SYSUNINIT for every SYSINIT that mallocs. Keeping a function to deallocate memory on shutdown is the actual waste of memory - it grows kernel text, which is wired.

Mar 23 2024, 5:25 AM
kp added inline comments to D42350: kyua: add jail execution environment.
Mar 23 2024, 3:42 AM
kp accepted D44478: icmp: improve ICMP limit jitter.
Mar 23 2024, 3:38 AM
kp accepted D44477: icmp: when logging ICMP ratelimiting message use correct jitter value.
Mar 23 2024, 3:38 AM
kp added a comment to D44476: icmp: hide icmp_bandlimit_uninit() under VIMAGE.

When we build without VIMAGE VNET_SYSUNINIT translates to SYSUNINIT, so this patch means we leak V_icmp_rates[i].cr_rate on shutdown.

Mar 23 2024, 3:37 AM
kp accepted D44475: icmp: do not store per-VNET identical array of strings.
Mar 23 2024, 1:20 AM

Mar 22 2024

kp committed rG88f557a2a9c3: libpfctl: fix incorrect labels copy (authored by kp).
libpfctl: fix incorrect labels copy
Mar 22 2024, 8:38 AM
kp committed rGe08b44339b65: if_ovpn tests: test large packets in IPv6 tunnel (authored by kp).
if_ovpn tests: test large packets in IPv6 tunnel
Mar 22 2024, 8:38 AM
kp added a comment to D43504: netinet: add a probe point for IP stats counters.

To put it lightly, I'd really like to see this patch performance tested.

Mar 22 2024, 3:17 AM

Mar 21 2024

kp added a comment to D43504: netinet: add a probe point for IP stats counters.

I'd like to land this patch. Absent anyone raising objections I intend to do so in two weeks or so.

Mar 21 2024, 3:23 AM

Mar 19 2024

kp closed D44368: pf: convert DIOCSETSTATUSIF to netlink.
Mar 19 2024, 3:31 PM
kp committed rG470a2b334661: pf: convert DIOCSETSTATUSIF to netlink (authored by kp).
pf: convert DIOCSETSTATUSIF to netlink
Mar 19 2024, 3:31 PM
kp closed D44366: pf: fix dummynet + route-to.
Mar 19 2024, 3:31 PM
kp committed rGc6f111635790: pf: fix dummynet + route-to (authored by kp).
pf: fix dummynet + route-to
Mar 19 2024, 3:31 PM
kp closed D44365: pf: avoid passing through dummynet multiple times.
Mar 19 2024, 3:31 PM
kp committed rG0ea0c026557b: pf: avoid passing through dummynet multiple times (authored by kp).
pf: avoid passing through dummynet multiple times
Mar 19 2024, 3:30 PM

Mar 15 2024

kp requested review of D44368: pf: convert DIOCSETSTATUSIF to netlink.
Mar 15 2024, 6:23 AM
kp requested review of D44366: pf: fix dummynet + route-to.
Mar 15 2024, 2:12 AM
kp requested review of D44365: pf: avoid passing through dummynet multiple times.
Mar 15 2024, 2:12 AM

Mar 12 2024

kp accepted D44307: if_tuntap: simplify storage of per-vnet cloners.
Mar 12 2024, 10:04 PM
kp committed R11:57043127470c: net/libpfctl: update 13.2 library (authored by kp).
net/libpfctl: update 13.2 library
Mar 12 2024, 5:13 PM

Mar 8 2024

kp committed rG14bbf0943308: netlink: fix casts (authored by kp).
netlink: fix casts
Mar 8 2024, 9:12 AM

Mar 1 2024

kp committed rGfb995824b9df: pf tests: IPv6 versions of the route-to/reply-to if-bound tests (authored by kp).
pf tests: IPv6 versions of the route-to/reply-to if-bound tests
Mar 1 2024, 12:20 PM
kp committed rG6460322a0a51: pf: support if-bound with reply-to (authored by kp).
pf: support if-bound with reply-to
Mar 1 2024, 12:20 PM

Feb 28 2024

kp committed rG706d465dae6a: pf: convert kill/clear state to use netlink (authored by kp).
pf: convert kill/clear state to use netlink
Feb 28 2024, 10:28 PM
kp committed rGdfed87b5ce9c: netlink: add bool type support (authored by kp).
netlink: add bool type support
Feb 28 2024, 10:28 PM
kp committed rG48f33b55b014: netlink: fix casts (authored by kp).
netlink: fix casts
Feb 28 2024, 10:28 PM
kp closed D44090: pf: convert kill/clear state to use netlink.
Feb 28 2024, 10:28 PM
kp closed D44088: netlink: fix casts.
Feb 28 2024, 10:27 PM
kp closed D44089: netlink: add bool type support.
Feb 28 2024, 10:27 PM

Feb 27 2024

kp committed R11:0a5b676fc982: net/libpfctl: add 13.3 library (authored by kp).
net/libpfctl: add 13.3 library
Feb 27 2024, 6:40 PM
kp added a comment to D44088: netlink: fix casts.

Will this be MFCed to stable branches ? I see sys/netlink/route/nexthop.c is consuming the fixed function nlattr_get_uint8():

sys/netlink/route/nexthop.c:	{ .type = NHAF_FAMILY, .off = _OUT(nhaf_family), .cb = nlattr_get_uint8 },
Feb 27 2024, 4:08 PM
kp committed rG9566d9272600: pf: fix packet-to-big for route-to as well (authored by kp).
pf: fix packet-to-big for route-to as well
Feb 27 2024, 3:26 PM

Feb 26 2024

kp added a comment to D44089: netlink: add bool type support.

I’ a bit unsure about this one - as having pointer to bool may introduce

Feb 26 2024, 8:12 PM
kp requested review of D44090: pf: convert kill/clear state to use netlink.
Feb 26 2024, 6:46 PM
kp requested review of D44088: netlink: fix casts.
Feb 26 2024, 6:46 PM
kp requested review of D44089: netlink: add bool type support.
Feb 26 2024, 6:46 PM

Feb 24 2024

kp committed rGbe2c6fba9d83: pfsync: Fix offset calculation (authored by vegeta_tuxpowered.net).
pfsync: Fix offset calculation
Feb 24 2024, 6:49 PM

Feb 15 2024

kp committed rG50edc6307198: pfsync: Fix offset calculation (authored by vegeta_tuxpowered.net).
pfsync: Fix offset calculation
Feb 15 2024, 12:55 PM
kp closed D43862: pfsync: Fix offset calculation.
Feb 15 2024, 12:55 PM

Feb 13 2024

kp committed rG17167f757e0a: pf: uncomment counter asserts after mem leak fix (authored by igor.ostapenko_pm.me).
pf: uncomment counter asserts after mem leak fix
Feb 13 2024, 9:36 PM
kp committed rGd18b1958ade2: pf: uncomment counter asserts after mem leak fix (authored by igor.ostapenko_pm.me).
pf: uncomment counter asserts after mem leak fix
Feb 13 2024, 9:35 PM