[PATCH] PF+dummynet

Ermal Luçi eri at freebsd.org
Wed Jun 29 08:50:08 UTC 2011


On Wed, Jun 29, 2011 at 6:42 AM, Peter Jeremy
<peter.jeremy at alcatel-lucent.com> wrote:
> Following up on some very old mail...
>
> On 2008-Nov-04 16:53:52 +0100, Ermal Luçi <ermal.luci at gmail.com> wrote:
>>actually this is the latest against RELENG_7 which is confirmed to
>>work with full features of pf(4) like route-to/reply-to etc...
>>http://cvs.pfsense.org/cgi-bin/cvsweb.cgi/tools/patches/RELENG_7/dummynet.RELENG_7.diff?rev=1.5
>>
>>The problem that is that i have yet to find time to post it here but
>>since you have interes here it is.
>>Its problem is that from the whole patches here
>>http://cvs.pfsense.org/cgi-bin/cvsweb.cgi/tools/patches/RELENG_7/
>
> I'm looking at upgrading my PF+dummynet boxes from 7.x to 8.x and
> notice that there have been significant change along the way.  I
> had a look at cvs.pfsense.org and it doesn't look like those patches
> were ever updated.
>
> Has anyone adapted the PF+dummynet patches for 8.x or 9.x?
>

Well the patch is this
https://github.com/bsdperimeter/pfsense-tools/blob/master/patches/RELENG_8_1/dummynet.RELENG_8.diff
It should apply to 8.x without problems.
Some manual work for any rejection might be needed because of other
patches present in pfSense.

But it has been widely tested and works better than previously and
takes into consideration the fast_io of dummynet either.

Just as a note that if you want to use pf together with ipfw enabled
at layer2(net.link.ether.ipfw=1) there are some other tweaks to do.
You can find them as well in those patches folder.


> --
> Peter Jeremy
>



-- 
Ermal


More information about the freebsd-pf mailing list