Subject: Re: Current - pf+altq kernel compilation problem.
To: None <>
From: Miles Nordin <carton@Ivy.NET>
List: current-users
Date: 10/10/2005 16:18:49
Content-Type: text/plain; charset=US-ASCII

>>>>> "rp" == Rui Paulo <> writes:

    rp> If you want to use pf with altq I think your only option is to
    rp> enable altq in the kernel but not pf and then use the pflkm
    rp> pkg available in pkgsrc.

i'm using PF/ALTQ (the openbsd ALTQ, not the old ALTQ) with NetBSD
3.0_BETA.  I think the LKM will work with NetBSD 2.0 only.  For 3.0
and -current everything goes in the kernel.

You need to apply the PF/ALTQ patch(es):

The important one is all kernel patches, then the small pfctl patch to
enable 'pfctl -v -s queue'.

And there are fewer kernel config options.  Here are the ones in my
working 3.0_BETA config file that seem related:

options 	PFIL_HOOKS	# pfil(9) packet filter hooks
#options 	IPFILTER_LOG	# ipmon(8) log support
#options 	IPFILTER_DEFAULT_BLOCK	# block all packets by default

#options        ALTQ_DEBUG
#options        ALTQ_NOPCC	# XXX -- port-alpha -- read out the machine 
				# dependent clock once a second to detect 
				# counter wrap-around.
options		ALTQ            # Manipulate network interfaces' output queues
options		ALTQ_CBQ	# Class-Based Queueing
options		ALTQ_HFSC	# Hierarchical Fair Service Curve
options		ALTQ_PRIQ	# Priority Queueing
options		ALTQ_RED	# Random Early Detection
options		ALTQ_RIO	# RED with IN/OUT
options 	ALTQ_CDNR	# Diffserv Traffic Conditioner

#pseudo-device	ipfilter
pseudo-device	pf			# PF packet filter
pseudo-device	pflog			# PF log if
#options	BRIDGE_IPF		# bridge uses IP/IPv6 pfil hooks too

Good luck.  

I'm still having a nasty intermittent problem with HFSC that queues
seem to get ``stuck'' and stop dequeueing packet until doing 
'pfctl -Fq; /etc/rc.d/pf reload'.  but it is fun to play with, and the
link sharing scheduling AFAICT is, albeit ancient, still more advanced
than what proprietary routers have.

Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

Version: GnuPG v1.2.6 (NetBSD)