Re: IKEv2 tunnel crash when sec(4) pushed with large data

2023-08-14 Thread Jason Tubnor
On Mon, Aug 14, 2023 at 02:07:12AM +, Jason Tubnor wrote: >> Hi, > Not sure how this can happen. Have you destroyed and recreated the interface > in between? Can you easily reproduce this? No I didn't it just seem to drop. It happened twice yesterday but I have, even und

IKEv2 tunnel crash when sec(4) pushed with large data

2023-08-13 Thread Jason Tubnor
Hi, Testing sec(4) between 2 end points with iperf3, iked has lost the associated iface for the sec(4) point to point link. Specifically: pfkey_sa: unsupported interface Here is the surround log for the event: Aug 14 11:30:54 terminator iked[93171]: spi=0x635987a83a22a13e: recv CREATE_CHILD_S

nvme_pci.c patch for MSI-X

2019-03-24 Thread Jason Tubnor
Hi, Below is a patch that fixes an issue where NVMe storage is presented only via MSI-X. This issue came about as the NVMe implementation in bhyve only uses MSI-X. Thanks to Chuck Tuffli for the initial patch. It was adjusted to deal with with both cases. Thank, Jason Tubnor Index: sys/dev

Patch to www/faq/pf/options.html

2019-02-20 Thread Jason Tubnor
Hi, In July 2018, henning@ updated src/sys/net/pfvar.h to lift the default state table limit to 10: https://cvsweb.openbsd.org/src/sys/net/pfvar.h?rev=1.480&content-type=text/x-cvsweb-markup The patch below brings the pf options page inline with this change. Cheers, Jason. Index: faq/pf/o

Doc. modification advise not to use softdep with KARL

2018-02-17 Thread Jason Tubnor
Hi, In some instances, we have found that where softdep has been placed on file systems that are used as part of the KARL process, incomplete writes have occurred (not committed to storage correctly) prior to reboot. Files affected have been /bsd, /usr/share/compile/GENERIC/relink.log and /v

Update to www/faq/faq14.html for FDE on UEFI

2017-02-15 Thread Jason Tubnor
Hi, I have added the fdisk(8) flags required for full disk encryption setups on UEFI hosts to www/faq/faq14.html Thanks! Index: faq14.html === RCS file: /cvs/www/faq/faq14.html,v retrieving revision 1.340 diff -u -p -r1.340 faq14.ht

Suggested patch for etherip(4) man page

2017-02-12 Thread Jason Tubnor
then drop the packets. I couldn't see any reference to ipsec(4) traffic in being allowed to pass. Below is a patch to the etherip(4) man page to clarify that net.inet.etherip.allow must be set to 1 and remove the reference to ipsec(4) if traffic needs to pass on the etherip interfa