♟ ae

How would you merge it without breaking the ifnet KBI? We've got 3rd party network interfaces in ports, etc...

I think such method can be useful. Do you plan to merge it?

Add ability to request listing and deleting only for dynamic states.

Reimplement how net.inet.ip.fw.dyn_keep_states works.

Add assertion to check that named object has correct type.

I'm inclined to agree. For tunneling interfaces I used global per-driver sx lock, to prevent concurrent ioctl invocation. I think these drivers are not affected by this problem.

Looking at your description here, it seems if_bridge can be affected by this issue.

Can you provide an example, what another driver needs such method? Maybe it is enough to fix the problem locally in if_lagg for first time?

Adapt the fix in r341008 to correctly work with EBR.

Do not limit the mbuf queue length for keepalive packets.

Fix possible panic during ifnet detach in rtsock.

Added IFNET_RLOCK_NOSLEEP_ASSERT(). Removed whitespace changes.

Make multiline APPLY_MASK() macro to be function-like.

Hi, Andrew, do you plan to merge this into stable/11? It would be nice to have these macros to be able make MFC.

Revert r340541. It requires VNET_DEFINE_STATIC() macro that is not yet

Allow configuration of several ipsec interfaces with the same tunnel

added verbose mode for listing dynamic states
added ability to delete only dynamic states

Add ability to use dynamic external prefix in ipfw_nptv6 module.

In D17898#382455, @bz wrote:

To me this change seems wrong. The only caller for this function is exactly for the situation when the link-local address is missing.
If we are in the progress of "configuring" the interface and someone is already de-configuring it to me that sounds like a concurrency problem elsewhere.
This entire function seems to be based on the idea that there's a lock held around it and it's the only actor (which might very well still be coming from &Giant days of FreeBSD 4).
Rather than changing the behaviour, why don't we fix the problem and hold the appropriate lock (if possible) or make sure (otherwise) that the concurrency problem is solved?

In D17843#381487, @np wrote:

Does the tcpdump put the card in promiscuous mode or are you using -p? Anything seen by tcpdump should show up in a netstat that's running at the same time.

Do not print "ip6" keyword in print_icmp6types() for O_ICMP6TYPE opcode.

Hi, I have a report, that cxgbe driver doesn't take into account packets, that are received from mirrored port. So, when you run netstat -hw 1 -I cxl0 you will see no packets, but tcpdump will show them. It seems a bit confusing. I didn't checked this, so I might be wrong.

Do not use bzero() for the O_ICMP6TYPE opcode.

MFC r339532 (by glebius):

Use correct format specificator to print setdscp action.

Add the check that current VNET is ready and access to srchash is allowed.

Add the check that current VNET is ready and access to srchash is

Remove softc from idhash when interface is destroyed.

Hi, Harti, it is good time to commit the IPv6 support into head/ :)

Include <sys/eventhandler.h> to fix the build.

Follow the fix in r339532 (by glebius):

Rework if_ipsec(4) to use epoch(9) instead of rmlock.

Add handling for appearing/disappearing of ingress addresses to if_me(4).

Add handling for appearing/disappearing of ingress addresses to if_gre(4).

Add handling for appearing/disappearing of ingress addresses to if_gif(4).

Add KPI that can be used by tunneling interfaces to handle IP addresses

Do not decrement RST life time if keep_alive is not turned on.

Call inet_ntop() only when its result is needed.

Retire IPFIREWALL_NAT64_DIRECT_OUTPUT kernel option. And add ability

Add IPFW_RULE_JUSTOPTS flag, that is used by ipfw(8) to mark rule,

Add ifaddr_event_ext event. It is similar to ifaddr_event, but the

Do not allow use `create` keyword as hostname when ifconfig(8) is invoked

Committed in r339533.

Add sadb_x_sa2 extension to SADB_ACQUIRE requests.

Add extra parentheses to fix "versrcreach" opcode, (oif != NULL) should

Correct the size of allocated buffer to keep bitmask

Looking at the how IP_FORWARDING flag is used, I think gif/gre/me interfaces should not use this flag. What you think?

ae (Andrey V. Elsukov)
User

Projects

User Details

Recent Activity
View All

Fri, Dec 7

Thu, Dec 6

Tue, Dec 4

Fri, Nov 30

Tue, Nov 27

Mon, Nov 26

Tue, Nov 20

Mon, Nov 19

Sun, Nov 18

Sat, Nov 17

Fri, Nov 16

Tue, Nov 13

Mon, Nov 12

Nov 10 2018

Nov 9 2018

Nov 6 2018

Nov 5 2018

Nov 3 2018

Oct 30 2018

Oct 28 2018

Oct 26 2018

Oct 25 2018

Oct 24 2018

Oct 23 2018

Oct 22 2018

Oct 21 2018

Oct 15 2018

Oct 12 2018

Oct 8 2018

Oct 7 2018

Oct 4 2018

Oct 3 2018

Oct 1 2018

ae (Andrey V. Elsukov)User