Re: wg(4): 'Address already in use' when wgrtable is changed

2022-07-21 Thread YASUOKA Masahiko
Hello, Let me ask "ok", The diff fixes the problem as follows: Configure wg0 without wgrtable # ifconfig wg0 create wgport 7111 wgkey `openssl rand -base64 32` up # ifconfig wg0 wg0: flags=80c3 mtu 1420 index 6 priority 0 llprio 3

Re: pf.conf(5): document new anchors limit

2022-07-21 Thread Jason McIntyre
On Thu, Jul 21, 2022 at 07:07:57PM +0200, Martin Vahlensieck wrote: > Hi > > This is a diff to document the new anchors limit in pf.conf(5). I > inserted it as second-to-last item, as the following paragraph talks > about NMBCLUSTERS. While here: Is the double entry for table-entries > intention

libagentx: honour searchrange end

2022-07-21 Thread Martijn van Duren
When doing a getnext/getbulk request, agentx diverges from snmp that it sends a searchrange, instead of a simple next. The end oid is currently not correctly handled by both snmpd(8) and libagentx. If a backend has two ranges with one or more other backends having a region claimed in between snmpd(

Re: wg: zap unused global

2022-07-21 Thread Alexander Bluhm
On Thu, Jul 21, 2022 at 11:18:23AM +, Klemens Nanni wrote: > Part of an old diff I still have in my tree. > > There since (second, proper) import in r1.3. > > OK? OK bluhm@ > Index: if_wg.c > === > RCS file: /cvs/src/sys/net/if

pf.conf(5): document new anchors limit

2022-07-21 Thread Martin Vahlensieck
Hi This is a diff to document the new anchors limit in pf.conf(5). I inserted it as second-to-last item, as the following paragraph talks about NMBCLUSTERS. While here: Is the double entry for table-entries intentional? Best, Martin Index: pf.conf.5 ===

ypconnect(2): mention correct return value

2022-07-21 Thread Martin Vahlensieck
Hi While looking at the recent YP changes I noticed that the RETURN VALUES section of the man page is incorrect. Here is an update (I just copied the text from socket(2) and adjusted the function name). Best, Martin Index: ypconnect.2 ===

Re: bgpd, relax setting rde evaluate all and add-path send

2022-07-21 Thread Theo Buehler
On Thu, Jul 21, 2022 at 01:00:19PM +0200, Claudio Jeker wrote: > rde evaluate all and add-path send do not really work together. > add-path will evaluate extra paths (if plus is used) and so it implies a > mode of `rde evaluate all`. I added the exclusion mainly to make it clear > that the two don'

Re: pf: DIOCXCOMMIT and copyin

2022-07-21 Thread Alexandr Nedvedicky
Hello, On Thu, Jul 21, 2022 at 11:13:28AM +0200, Moritz Buhl wrote: > Hi tech, > > for the other two DIOCX ioctls syzkaller showed that it is possible > to grab netlock while doing copyin. > > The same problem should exist for DIOCXCOMMIT but syzkaller didn't > find it yet. > > In case anybody

wg: zap unused global

2022-07-21 Thread Klemens Nanni
Part of an old diff I still have in my tree. There since (second, proper) import in r1.3. OK? Index: if_wg.c === RCS file: /cvs/src/sys/net/if_wg.c,v retrieving revision 1.25 diff -u -p -r1.25 if_wg.c --- if_wg.c 6 Jun 2022 14:4

bgpd, relax setting rde evaluate all and add-path send

2022-07-21 Thread Claudio Jeker
rde evaluate all and add-path send do not really work together. add-path will evaluate extra paths (if plus is used) and so it implies a mode of `rde evaluate all`. I added the exclusion mainly to make it clear that the two don't really mix. After a request from Pier Carlo Chiodi on OpenBGPD-porta

Re: bgpd, refactor kroute_insert

2022-07-21 Thread Claudio Jeker
On Thu, Jul 21, 2022 at 12:03:27PM +0200, Theo Buehler wrote: > On Thu, Jul 21, 2022 at 11:10:41AM +0200, Claudio Jeker wrote: > > On Wed, Jul 20, 2022 at 12:28:25PM +0200, Claudio Jeker wrote: > > > On Wed, Jul 20, 2022 at 10:56:29AM +0200, Claudio Jeker wrote: > > > > This diff moves kroute_inser

Re: bgpd, refactor kroute_insert

2022-07-21 Thread Theo Buehler
On Thu, Jul 21, 2022 at 11:10:41AM +0200, Claudio Jeker wrote: > On Wed, Jul 20, 2022 at 12:28:25PM +0200, Claudio Jeker wrote: > > On Wed, Jul 20, 2022 at 10:56:29AM +0200, Claudio Jeker wrote: > > > This diff moves kroute_insert to use struct kroute_full and do the > > > allocation for struct kro

pf: DIOCXCOMMIT and copyin

2022-07-21 Thread Moritz Buhl
Hi tech, for the other two DIOCX ioctls syzkaller showed that it is possible to grab netlock while doing copyin. The same problem should exist for DIOCXCOMMIT but syzkaller didn't find it yet. In case anybody can reproduce the witness lock order reversals the syzkaller can produce, the diff belo

Re: bgpd, refactor kroute_insert

2022-07-21 Thread Claudio Jeker
On Wed, Jul 20, 2022 at 12:28:25PM +0200, Claudio Jeker wrote: > On Wed, Jul 20, 2022 at 10:56:29AM +0200, Claudio Jeker wrote: > > This diff moves kroute_insert to use struct kroute_full and do the > > allocation for struct kroute / kroute6 inside kroute_insert. This removes > > a lot of similar c

Re: vsw.4: mention veb next to bridge

2022-07-21 Thread Claudio Jeker
On Wed, Jul 20, 2022 at 05:27:51PM -0700, Chris Cappuccio wrote: > Klemens Nanni [k...@openbsd.org] wrote: > > veb(4) works just fine in this setup, so don't give the impression only > > bridge(4) would work. > > > > In related items, is it time to tedu bridge(4) and vether(4) ? Is there > anythi