00:08:52 do we support hw vlan tag insertion/removal (and if so, is there a good driver for a model)? 00:09:07 i don't recall seeing anything w/ it, but not sure if i just missed it or not 00:13:47 jbk: Isn't that what the fancy NICs will do with rings/groups for vnic/vlan interfaces? 00:14:31 I suppose we probably don't ask the frame to be rewritten, just steered 00:40:50 Currently we only do steering, not insertion/removal. 01:26:10 hrm.. we should really change SD_UA_RETRY_COUNT 01:26:16 60 * 600 seems excessive 14:39:00 Hi :) 14:39:27 Hi 16:42:30 tsoome: is there a simple way in loader to pass cmdline arguments to the kernel, like disable-=true? 16:42:55 boot -B disable-...=true 16:43:57 is it possible to use a zone with vnics on two different networks where it can get a global ipv6 address on net0 to enable hosts link-local to it on net1 to also get global ipv6 addresses from the upstream router reachable from net0? 16:43:59 thanks 16:44:35 yw 16:45:57 I already have the zone doing IPv4 NAT successfully. 16:54:13 nahamu: I believe so only because we're using v6 routing in our product with link locals being the forwarding points, but I think I'd need more specifics to give you an accurate summary. 16:54:46 I guess there are a bit more specifics about how addresses are being handed out and what you expect to happen there. 16:58:29 Ideally I'd like to consider the router handing out global ipv6 addresses as a black box. The zone in question can pick up an address with addrconf and can reach the ipv6 internet. 16:59:25 So how does that work for other zones that this is providing transit for? 16:59:37 That's the zone's net0. There's a net1 interface on a separate 10 gigabit network that currently only has one main client on it. Currently net1 has a separate ipv4 subnet and does NAT. 17:00:03 I guess, let me phrase it differently. Is net1 in that zone the only thing that should have IPv6 connectivity? 17:00:23 It sounded like you wanted to provide access for other zones / entities to go via this zone's net1 to the router and thus the Internet. 17:00:46 there's a machine called "desktop" that gets DHCP from the zone over net1 and gets NAT access to the internet via net0 and the upstream router. 17:01:23 ideally I'd like "desktop" to get global ipv6 access too somehow. 17:01:43 OK, so that suggests that you need prefix delegation from the upstream router. 17:02:13 if the upstream router can do prefix delegation, how would I configure the zone to request it? 17:02:16 And that this zone/net1 will be the gateway on your network and employ forwarding. But for that to work for desktop. 17:02:20 That I don't know! 17:02:31 But it doesn't do prefix delegation, then you basically have to nat. 17:03:50 I was hoping to avoid IPv6 NAT if possible. 17:05:10 does our ipnat even support ipv6 NAT? 17:05:22 Dunno. Just the only way to avoid that is prefix delegation. 17:05:32 And I'm not very familiar with that part of it, since we're not using it. Sorry. 17:06:00 Just that if you don't have a prefix delegated, there's no IP address that'll be able to get back to you without NAT. If that makes sense. 17:07:21 I wonder if anyone uses illumos as their main ipv6 router. That would probably point me in the right direction. 17:08:43 I suspect there probably needs to be some work on prefix delegation and tying that into ndp. But there may be other software that can do that in the interim. 17:10:03 hmmm.. So maybe something like quagga... 17:10:28 I don't think you'd need quagga for this. 17:10:38 At least, it's not really like there's dynamic routing. 17:10:45 that would be nice. 17:11:09 I thought, we don't do quagga any more 17:11:22 https://www.illumos.org/issues/4033 looks like we don't support prefix delegation. It appears that you could use ISC DHCP for it though based on the bug. 17:11:23 → FEATURE 4033: implement IPv6 prefix delegation (New) 17:11:24 it's in pkgsrc and it's software I'm aware of. I don't want to have to use it. 17:11:50 Welp. That looks about right. 17:12:00 ok - I tought https://frrouting.org/ would be used nowadays 17:12:34 Neither should be required for this. As you're not participating in any dynamic routing protocols, IIUC. 17:14:11 and I guess I could also do some experiments with a Linux VM to see if I can even request a prefix delegation from the router. 17:15:58 Thanks for pointing me at #4033. 17:23:29 Sorry I can't give you more here. 17:44:46 hrm.. nice somehow managed to trigger a VERIFY in mac w/ the e1000 driver, but not sure how yet :) 17:48:05 nahamu: I've dinked around a bit with a prefix delegation client on illumos but I don't have anything production ready. architecturally a piece of it belongs in the dhcpv6 client. 17:48:14 but I have to run right now. 17:50:10 based on an experiment with a linux VM, I'm guessing that my router might not be able to further delegate any prefixes. 17:50:36 Some routers definitely need to be told how to and there are gotchas depending on the ISP. 17:50:47 But if it can't, then I'm afraid it's back to team NAT. 19:06:57 ptribble: in your lp-removal IPD, you say " All content would be removed and the packages marked obsolete." for compatibility-ucb - surely you just mean the lp files removed from it, not the rest, right? 19:09:50 alanc: yeah, richlowe pointed that out to, I've just rephrased that 19:10:24 we tried dumping the whole package for 11.4 but had to bring parts back by customer demand 19:10:39 For those interested: https://github.com/illumos/ipd/blob/master/ipd/0042/README.md 19:10:52 → IPD 42: Sunset native printing (draft) 19:12:26 alanc: yeah, I actually mentioned it to Peter offlist to try to save it from turning into "customer demand" 19:12:56 for us, the hardest part of dumping the SVR4 lp system was porting the Trusted Extensions labeled banner stuff to CUPS 19:13:14 that is what has come up several times in the past, but the people who "use it" seem... theoretical at best. 19:13:39 and the main person I know who wants to use it would absolutely need that CUPS work done regardless. 19:14:06 Has anyone (besides myself) actually had illumos running in trusted mode? 19:14:12 What is the sn1 brand zone? 19:14:18 I think everything we did is published in https://github.com/oracle/solaris-userland/tree/master/components/cups 19:14:22 bahamat: It is a zone for testing brandz, that just sets the minor version to N-1 19:14:57 ptribble: I have long ago 19:15:00 especially patches/03-tx.patch 19:15:07 richlowe: Ok, that explains why I've never encountered it on a running system 19:15:33 I don't remember if there was anything on the ON side to do 21:15:39 [illumos-gate] 15215 SMB server discontiguous messages -- Gordon Ross 22:26:30 alanc: in str*(3C) (gosh I hate that manual page), we have a rather thorough warning about constant strings. Is that to put a cap on a call generator, or? 22:29:31 I filed #15823 (fenix?) and noticed the `-xstrconst` mention. 22:29:32 BUG 15823: str*(3C) could be several, readable, manual pages (New) 22:29:33 ↳ https://www.illumos.org/issues/15823 22:30:21 that surprisingly seems to be the only real studio-ism in our manual (that I can find), outside of standards(7) 22:30:37 and to be fair to standards(7), we never actually fixed sysconf 23:41:54 I cannot imagine anybody is actually using the trusted extensions, and that it could totally go away 23:50:36 I know of one entity who wishes to use them, and seemed to be making real enquiries about its obvious problems. 23:50:52 or possibly inquiries 23:51:18 definitely not equerries 23:51:57 An entity that might want to maintain some software? :D 23:51:59 but even then the correct answer is that they port the cups bits alan mentioned.