Date: Sat, 25 Jun 2005 22:11:31 -0400 From: Scott Ullrich <sullrich@gmail.com> To: Sascha Luck <lists@c4inet.net> Cc: freebsd-pf@freebsd.org Subject: Re: pfsync / 6-CURRENT-amd64 Message-ID: <d5992baf0506251911521c172b@mail.gmail.com> In-Reply-To: <20050626020825.GA45376@saoirse.c4inet.net> References: <20050626020825.GA45376@saoirse.c4inet.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On 6/25/05, Sascha Luck <lists@c4inet.net> wrote: > Hi, >=20 > I've built a redundant firewall setup with pf / CARP / pfsync on > CURRENT. pf and CARP are working well, the traffic fails over > without problems. > pfsyc, however, seems not to work at all. There is no traffic on > the sync interface, the states are (obviously) not being synced. >=20 > The NICs are all Intel 1000MT dual-port cards (btw, I can confirm > that fail-over on VLAN interfaces on em NICs does work on CURRENT) >=20 > CURRENT kernel versions: > FreeBSD 6.0-CURRENT #0: Sun Jun 26 02:10:42 IST 2005 >=20 > pf, pflog and pfsync are built into the kernel. both pfsync > interfaces are up and connected to the syncif, they are connected > by xover cable: >=20 > cwi010# ifconfig pfsync0 > pfsync0: flags=3D41<UP,RUNNING> mtu 1348 > pfsync: syncdev: em5 maxupd: 128 >=20 > em5: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 > options=3D4b<RXCSUM,TXCSUM,VLAN_MTU,POLLING> > inet 10.10.255.2 netmask 0xffffff00 broadcast 10.10.255.255 > inet6 fe80::211:43ff:fee5:8377%em5 prefixlen 64 scopeid 0x6 > ether 00:11:43:e5:83:77 > media: Ethernet autoselect (1000baseTX <full-duplex>) > status: active >=20 > Has anyone seen similar effects? Is this connected to the network > interface changes as of Jun 9? For what it's worth we are also seeing this same problem on pfSense with from what I can tell is all NICS. Let me know if you need any more information. It seems to have broken around the 10th. Regards, Scott
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d5992baf0506251911521c172b>