From owner-freebsd-pf@freebsd.org  Fri Oct  9 08:12:44 2015
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1BA149D0090;
 Fri,  9 Oct 2015 08:12:44 +0000 (UTC)
 (envelope-from kp@vega.codepro.be)
Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256
 bits))
 (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id DA09D186B;
 Fri,  9 Oct 2015 08:12:43 +0000 (UTC)
 (envelope-from kp@vega.codepro.be)
Received: from vega.codepro.be (unknown [172.16.1.3])
 by venus.codepro.be (Postfix) with ESMTP id 442ED14682;
 Fri,  9 Oct 2015 10:12:39 +0200 (CEST)
Received: by vega.codepro.be (Postfix, from userid 1001)
 id 3D547717E; Fri,  9 Oct 2015 10:12:39 +0200 (CEST)
Date: Fri, 9 Oct 2015 10:12:39 +0200
From: Kristof Provost <kp@FreeBSD.org>
To: freebsd-pf@freebsd.org, freebsd-net@freebsd.org
Cc: mark@rootbsd.net
Subject: Re: pf+TSO patch
Message-ID: <20151009081238.GA2441@vega.codepro.be>
References: <20151002100805.GL3433@vega.codepro.be>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <20151002100805.GL3433@vega.codepro.be>
X-Checked-By-NSA: Probably
User-Agent: Mutt/1.5.24 (2015-08-30)
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Oct 2015 08:12:44 -0000

A quick update:
Sean Bruno tested the patch and found a problem with rdr rules.
I've managed to reproduce and fix that. The current version on
https://reviews.freebsd.org/D3779 has the fix.

I believe that version to be working correctly (to the point that I
trust it with my own e-mail), but I'd appreciate further testing and/or
review.

Regards,
Kristof

On 2015-10-02 12:08:05 (+0200), Kristof Provost <kp@FreeBSD.org> wrote:
> Hi,
> 
> I've found a little time to look at the pf TSO issue (which made pf
> unusable on Xen VMs, like Amazon EC2).
> 
> I've posted the patch here:
> https://reviews.freebsd.org/D3779
> 
> It still needs a bit more testing, but so far it looks good.
> 
> I'd be very grateful for any brave souls who want to give this a try.
> 
> This work was very kindly sponsored by RootBSD (rootbsd.net).
> 
> Regards,
> Kristof