At least one (possibly not new) unaligned exception trap has reared its head in addrconf_prefix_rcv. <br><br><a href="https://www.bufferbloat.net/issues/419">https://www.bufferbloat.net/issues/419</a><br><br>This is a bad place for one! a network burp heisenbug....<br>
<br><div class="gmail_quote">On Wed, Jan 16, 2013 at 4:12 PM, Maciej Soltysiak <span dir="ltr"><<a href="mailto:maciej@soltysiak.com" target="_blank">maciej@soltysiak.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>Good build! I have to report that the issue with polipo, DNS and TFO that I observed with 3.7.1-1 seems resolved.</div><div>Test with and without TFO.<br></div><div>Ketan, I won't post a bug unless it appears again.</div>
</blockquote><div><br>What I saw (Ages ago) was that dns would stop working over time in polipo.<br> <br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div> </div><div>Regards.</div><div>Maciej<br></div><div class="gmail_quote"><div><div class="h5">On Wed, Jan 16, 2013 at 12:37 PM, Dave Taht <span dir="ltr"><<a href="mailto:dave.taht@gmail.com" target="_blank">dave.taht@gmail.com</a>></span> wrote:<br>
</div></div><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote"><div><div class="h5">It's at:<br>
<br>
<a href="http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.7.2-3/" target="_blank">http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.7.2-3/</a><br>
<br>
It seems pretty stable but with the ipv6 churn...<br>
<br>
[insert my std hyperbolic warnings about exposing the release to<br>
default gws in front of spouses or young children]<br>
<br>
features:<br>
<br>
+ dnsmasq 2.66test10<br>
+ merge with openwrt head<br>
+ new unaligned access code from openwrt head (by nbd) and the<br>
remainder of the older unaligned patch set (by robert bradley) ported<br>
to work on top of that<br>
<br>
I have not checked to see if all traps are gone, you can look at that via<br>
files in /sys/debug/kernel/mips/<br>
<br>
- it's mostly the ipv6 related traps I'm concerned about...<br>
<br>
The checksum routine changed and I did check checksums on a variety of<br>
ipv4 ethernet traffic, but not enough to feel assured.<br>
<br>
+ Bug fixed <a href="https://www.bufferbloat.net/issues/418" target="_blank">https://www.bufferbloat.net/issues/418</a><br>
<br>
BUG_ON removed on TFO support in the kernel. TFO works. I tested it by:<br>
<br>
echo 3 > /proc/sys/net/ipv4/tcp_fastopen<br>
editing /etc/init.d/polipo to add support for a boolean useTCPFastOpen parameter<br>
adding that parameter to /etc/config/polipo<br>
testing with the current version of httping<br>
<br>
I will update the init script and config in the next spin.<br>
<br>
...<br>
<br>
The churn in how to setup ipv6 sanely continues. The configuration for<br>
how to do it has changed significantly again and is documented at:<br>
<br>
<a href="http://wiki.openwrt.org/doc/uci/network6" target="_blank">http://wiki.openwrt.org/doc/uci/network6</a><br>
<br>
It's not clear to me to state of the ipv6 dnsmasq integration now.<br>
There is much discussion on the dnsmasq-discuss list as to how to do<br>
prefix-independent configuration as one example.<br>
<br>
as for the ipv6 related changes just now come down from openwrt,<br>
steven barth tells me that:<br>
<br>
"6distributed functionality (prefix delegation) was merged into netifd<br>
for size reasons.<br>
The shell mess which was ipv6-support was abandoned.<br>
<br>
dhcpv6 is now a regular network proto in netifd (which can be added<br>
ontop of other ipv4-wan types or separately for ipv6-only).<br>
<br>
network6 is unnecessary now. 6rd, 6to4 now automatically publish their<br>
prefix. 6in4 adds a new option ip6prefix for adding the routed prefix.<br>
<br>
LANs / WLANs which want a prefix now just add a option ip6assign 64 to<br>
the interface definition.<br>
<br>
See examples in: <a href="http://wiki.openwrt.org/doc/uci/network6" target="_blank">http://wiki.openwrt.org/doc/uci/network6</a><br>
<br>
Prefix Announcement / DHCPv6 / Relaying has been untangled and should<br>
be moved into the respective daemon config / init. I've done this for<br>
6relayd.<br>
<br>
For dnsmasq you will have to add config support similar to what is<br>
done for DHCP in IPv4, so it should be easy to adapt. Maybe some of<br>
the CeroWrt contributors like to add that.<br>
<br>
I also haven't looked at NPT yet. I've removed the shell-script mess<br>
for now as we will not have all targets up to 3.7 in the coming weeks<br>
and therefore also not a new ip6tables."<br>
<br>
AHCP is still lost and lonely in the configuration.<br>
<br>
I took a stab at enabling ipv6 NPT support myself in this release, but<br>
the changes I'd made to the openwrt configuration didn't successfully<br>
get the modules to compile nor create a package. My *non-working<br>
patch* looked like this, and suggestions as to what sort of magic wand<br>
to wave over it welcomed.<br>
<br>
diff --git a/include/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a> b/include/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a><br>
index 1d89e6d..3d65f76 100644<br>
--- a/include/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a><br>
+++ b/include/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a><br>
@@ -154,10 +154,14 @@ $(eval $(call<br>
nf_add,IPT_IPV6,CONFIG_IP6_NF_MATCH_RT, $(P_V6)ip6t_rt))<br>
<br>
$(eval $(call nf_add,IPT_IPV6,CONFIG_IP6_NF_TARGET_LOG, $(P_V6)ip6t_LOG))<br>
$(eval $(call nf_add,IPT_IPV6,CONFIG_IP6_NF_TARGET_REJECT, $(P_V6)ip6t_REJECT))<br>
+$(eval $(call nf_add,IPT_IPV6,CONFIG_IP6_NF_NAT, $(P_V6)nf_nat_ipv6))<br>
+$(eval $(call nf_add,IPT_IPV6,CONFIG_IP6_NF_TARGET_MASQUERADE,<br>
$(P_V6)ip6t_MASQUERADE))<br>
+$(eval $(call nf_add,IPT_IPv6,CONFIG_IP6_NF_TARGET_NPT, $(P_V6)ip6t_NPT))<br>
<br>
# nat<br>
<br>
# kernel only<br>
+$(eval $(if $(NF_KMOD),$(call nf_add,IPT_NAT6,CONFIG_IP6_NF_NAT,<br>
$(P_V6)nf_nat_ipv6, ge 3.7.0),))<br>
$(eval $(if $(NF_KMOD),$(call nf_add,IPT_NAT,CONFIG_NF_NAT,<br>
$(P_XT)nf_nat $(P_V4)nf_nat_ipv4 $(P_XT)xt_nat $(P_V4)iptable_nat, ge<br>
3.7.0),))<br>
$(eval $(if $(NF_KMOD),$(call nf_add,IPT_NAT,CONFIG_NF_NAT,<br>
$(P_V4)nf_nat $(P_V4)iptable_nat, lt 3.7.0),))<br>
<br>
diff --git a/package/kernel/modules/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a><br>
b/package/kernel/modules/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a><br>
index 69bdba0..d862c32 100644<br>
--- a/package/kernel/modules/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a><br>
+++ b/package/kernel/modules/<a href="http://netfilter.mk" target="_blank">netfilter.mk</a><br>
@@ -164,6 +164,23 @@ endef<br>
<br>
$(eval $(call KernelPackage,ipt-nat))<br>
<br>
+define KernelPackage/ipt-nat6<br>
+ TITLE:=Basic NAT targets for IPv6<br>
+ KCONFIG:=$(KCONFIG_IPT_NAT6)<br>
+ FILES:=$(foreach mod,$(IPT_NAT6-m),$(LINUX_DIR)/net/$(mod).ko)<br>
+ AUTOLOAD:=$(call AutoLoad,42,$(notdir $(IPT_NAT6-m)))<br>
+ $(call AddDepends/ipt)<br>
+endef<br>
+<br>
+define KernelPackage/ipt-nat6/description<br>
+ Netfilter (IPv6) kernel modules for basic NAT targets<br>
+ Includes:<br>
+ - MASQUERADE<br>
+ - NPT<br>
+endef<br>
+<br>
+$(eval $(call KernelPackage,ipt-nat6))<br>
+<br>
<br>
define KernelPackage/ipt-nat-extra<br>
TITLE:=Extra NAT targets<br>
</div></div><span><font color="#888888"><div><div class="h5"><br>
<br>
--<br>
Dave Täht<br>
<br>
Fixing bufferbloat with cerowrt: <a href="http://www.teklibre.com/cerowrt/subscribe.html" target="_blank">http://www.teklibre.com/cerowrt/subscribe.html</a><br></div></div>
_______________________________________________<br>
Cerowrt-devel mailing list<br>
<a href="mailto:Cerowrt-devel@lists.bufferbloat.net" target="_blank">Cerowrt-devel@lists.bufferbloat.net</a><br>
<a href="https://lists.bufferbloat.net/listinfo/cerowrt-devel" target="_blank">https://lists.bufferbloat.net/listinfo/cerowrt-devel</a><br>
</font></span></blockquote></div><br>
</blockquote></div><br><br clear="all"><br>-- <br>Dave Täht<br><br>Fixing bufferbloat with cerowrt: <a href="http://www.teklibre.com/cerowrt/subscribe.html" target="_blank">http://www.teklibre.com/cerowrt/subscribe.html</a>