Seems like it. Wouldn't mind except it threw off my debugging

It's always good to look at /var/log/messages when things are not working. I just tried tested the exceeding the icmp ping limits and I see this logged: kernel: Limiting ICMPv6 destination unreachable output from 98 to 97 packets/sec

dnp1: Yes, thank you.

zip: More than 200 per second though, is curious.

zip included the ping -f option which "floods" basically pouring as many packets out as fast as possible. Instead of the default ping of one packet per second.

One of the reasons FreeBSD makes an excellent server is that it has limits for abuse mitigation.

@rwp - and in the icmp rate-limiting case, it can help keep you from amplifying an attack, way too many shady providers out there not filtering egress for spoofed IPs. same argument for having your firewall silently drop rejected traffic.

anyone manage to get good performance out of tailscale on a freebsd server?

tailscale is wireguard no ?

Yeah, it is

with wireguard I saturate my gbit without a problem

No problems with wg here, either.

wg on embedded devices is another story. dont run wg on your edgerouter for example. it will max out at 20MB/s

(not mbps, MB/s)

hi all

I'm driving myself up the wall trying to work out why my nfsv4 mount stalls out from a vm to its host

i guess my next debug step is to boot freebsd on another machine and see if it's a host/vm interaction or a config issue

My NFS experience is all with v3.

zip, does it mount and stall out later, or not mount at all?

It stalls out later

Like if I dd 8mb to it, it works. If I dd 16mb it dies

TCP or UDP?

TCP

Does NFSv4 even support UDP?

... I wonder if it'd run over a vsock. Not that we have those yet I think

If so, it might be worth trying.

Not a bad idea

Might be worth using ip4 just for the smaller packets

I worked for EMC, admining their NAS dev/test labs.

I always preferred UDP for NFS, which I know is counter to most peoples' intuition.

Nah it makes sense to me

At least if the link is reliable

Well... 'cept that with TCP, if the link drops, you have to reconnect. . . with UDP you just resend.

hi all

Say I want to run freebsd amd64 on a macos arm notebook. what's the best option ?

for some reason a poudriere bulk build crashes my server every time I try. so I am thinking of building on my macbook and scp-ing the pkg tree over to my nginx server

why not run arm64 natively through a hypervisor

apple visualization framework

and then run poudriere with qemu to create amd64 packages?

will that work?

interestingly, if i add `intr` to the mount and then kill the process, a _lot_ of packets flow when I kill the process

it's like a local buffer is filling up and not getting sent

also it still seems to do tcp even when told not to

alright I am determined to get geli serial output!!!

today*

Serial is such a bliss. I'm contemplating getting pcie serial cards for my headless boxes

it's why I use supermicro boards with ipmi. sol is fine

I have contemplated picking up decomissioned server boards, and sticking them in tower cases (because I dont have a rack) but it doesnt beat free

there is just so much desktop waste that I can run an entire infra on it

the issue is desktop expects graphics card, so I cant even used integrated graphics

I usually stick an old gt730, but that drops the power efficiency

so yeah I am determined to get this to work

U will try with uefi and then if that works submit a bugzilla issue seeing if anyone there can help out getting it working with bios-only systems

ah yeah. I indeed use decomissioned enterprise gear

I also dont have a rack. I did have 4 ikea lack tables though so now I'm using that

most server boards won't fit in tower cases

mvanbaak, you can usually get like an open half-rack pretty cheap.

lacking serial is the one regret I have about this mini pc

my old minipc has a serial port

weirdly the desktop seems to have some kinda internal uart thing going on so the physical serial ports come up as com3 and com4 and aren't used by freebsd at boot

zip, common for motherboards to support serial, but the MFGs don't bother to provide ports. Can probably find a back-plate with the plugs and internal cables you'd need, though I would verify that by examining the mother board.

I'm pretty sure this mobo doesn't have a header

Whats the MFG/model?

CrtxReavr: Yeah, I have been thinking about it. for now the lack tables serve me well haha

a gigabyte b550

i will survive without my gaming PC having serial for when I boot freebsd on it for fucking-about purposes though

gigabyte's photos & diagrams for the board really suck.

is there anything in rc.d to run `apm -e`

or how else to turn it on at boot

rtprio, echo 'apm -e' | sudo tee -a /etc/rc.local

Maybe double quotes. . .

Though. . . my system has /etc/rc.d/apm

mvanbaak: helps if you work for a company which throws this shit away, I unfortunately havent got that luxury :(

zip: actually a lot of old optiplex's I found have serial, the SFF I think do as well, and they arent that big either, might be worth taking a look if you ever wanted a small-ish device with serial?

I think the newer ones dont have serial though :(

although I believe you can slop in a serial card into it anyways, they use very little power and I think they are exposed to the OS over acpi

which is important as you need it to show up as a /dev/uartx in order for it to be usable within the boot process

I buy the decommed enterprise stuff online on the local ebay

190 euro for a supermicro x9 motherboard with 2 xeons and 256gb ram in a 24hdd slot supermicro chassis with a sas2 backplane for example (my last buy)

I do have an HP EliteDesk mini with a serial port

It's just not very fast or quiet

today I running this dongle SONOFF Zigbee 3.0 USB Dongle Plus V2 with zigbee2mqtt running mqtt on a seperate vm and also HA on a linux-vm (docker).. I think to replace my firmware on the dongle to support thread instead.. but does openthread.io work on freebsd? so I can expose the dongle to my HA (docker) ?

I am one in the camp 'HA should run on its own machine'

dont want that messing with the other stuff on a machine breaks your home automation

I dont have any matter devices yet only zigbee.. so my donge today is in my mmachine connected to my vm and sending to mqtt.. but will replace it.. hope ppl understand what Im trying to achive =)

CrtxReavr: weird i couldn't find that

oh cool it looks like it was removed from -current