Subject: Re: Current - pf+altq kernel compilation problem.
To: None <current-users@netbsd.org>
From: Miles Nordin <carton@Ivy.NET>
List: current-users
Date: 10/10/2005 16:18:49
--pgp-sign-Multipart_Mon_Oct_10_16:18:37_2005-1
Content-Type: text/plain; charset=US-ASCII
>>>>> "rp" == Rui Paulo <rpaulo@fnop.net> writes:
rp> If you want to use pf with altq I think your only option is to
rp> enable altq in the kernel but not pf and then use the pflkm
rp> pkg available in pkgsrc.
i'm using PF/ALTQ (the openbsd ALTQ, not the old ALTQ) with NetBSD
3.0_BETA. I think the LKM will work with NetBSD 2.0 only. For 3.0
and -current everything goes in the kernel.
You need to apply the PF/ALTQ patch(es):
http://nedbsd.nl/~ppostma/pf/altq.html
The important one is all kernel patches, then the small pfctl patch to
enable 'pfctl -v -s queue'.
And there are fewer kernel config options. Here are the ones in my
working 3.0_BETA config file that seem related:
options PFIL_HOOKS # pfil(9) packet filter hooks
#options IPFILTER_LOG # ipmon(8) log support
#options IPFILTER_DEFAULT_BLOCK # block all packets by default
#options ALTQ_DEBUG
#options ALTQ_NOPCC # XXX -- port-alpha -- read out the machine
# dependent clock once a second to detect
# counter wrap-around.
options ALTQ # Manipulate network interfaces' output queues
options ALTQ_CBQ # Class-Based Queueing
options ALTQ_HFSC # Hierarchical Fair Service Curve
options ALTQ_PRIQ # Priority Queueing
options ALTQ_RED # Random Early Detection
options ALTQ_RIO # RED with IN/OUT
options ALTQ_CDNR # Diffserv Traffic Conditioner
#pseudo-device ipfilter
pseudo-device pf # PF packet filter
pseudo-device pflog # PF log if
#options BRIDGE_IPF # bridge uses IP/IPv6 pfil hooks too
Good luck.
I'm still having a nasty intermittent problem with HFSC that queues
seem to get ``stuck'' and stop dequeueing packet until doing
'pfctl -Fq; /etc/rc.d/pf reload'. but it is fun to play with, and the
link sharing scheduling AFAICT is, albeit ancient, still more advanced
than what proprietary routers have.
--pgp-sign-Multipart_Mon_Oct_10_16:18:37_2005-1
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (NetBSD)
iQCVAwUAQ0rMqYnCBbTaW/4dAQKunQP7Bx0UYfdrQ6FZXU8C655ub/2TZz9ahriz
8i2qO577/xaj0wz5YEeJ46Ut8M2CRe31Xl3nTnPwBTqL033CwRIVDQXgZN6qs96x
mj3Qexy85ClyytP8i9OGzDSb2yjSs46HSIEO7d44uWJ8oUqu5yW7JyuGpn7rTgF4
i+V8kB2YcwM=
=B5DX
-----END PGP SIGNATURE-----
--pgp-sign-Multipart_Mon_Oct_10_16:18:37_2005-1--