From nobody Fri Nov 17 09:00:39 2023 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SWrTh0zvmz50jmy; Fri, 17 Nov 2023 09:00:40 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4SWrTh0HK4z4Zx4; Fri, 17 Nov 2023 09:00:40 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1700211640; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1LH4koiX+DN7shP5WskBSrpqxRvJokwLuMyA+JU7+2c=; b=hZ99E61paZ/lB/MVn+hnF8REKbbWde5xpbF5FeASSu4yzl90hscGgQqoOFlZhrWMJRbQ5e +SN9blt7YPeYhgBtuxN/UKE9hZ90LMn2bMGpLaW97yQg/qS4XSc3XFBZ4+NQ/KzG1fPiUl tXI3xAbv3DrIlG+gPc3YjycwkXKB10OV8AyITgsX7FZ7YgGMSMj18rbE1UjFqRbSa9L9WJ dHrDtfv5D3KliEiuIbEmtIBiOXnTxjlABATSJOXxI7xXe7GPH3lsxfT1VaSsZy4vzhwNnp aOApMgJrQAyWuZIEjp1q1XuG29FVcsS/wY5iA1huXg9XHDga8a2Etauru3gBSg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1700211640; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1LH4koiX+DN7shP5WskBSrpqxRvJokwLuMyA+JU7+2c=; b=tAYfKhwFoLhqOVH0ctf64lqcLUkuqiyf4A/82+fYdpCUMiT76p0MnUgRi+2rH6OqIYKgV6 DnrpQ4yZqsZYMhVpWBdFbD36nWnHnYUHOVcxDcs3NKvr8Kss7klS6AJmZbtALkzTmGjTuS ZJHy7TxPs5KYj40ijIxbRTjAmq9pIpNsHG3CrV5uixrlPpMLsinBobMOiUFt6SQnc0gPrh aBPfbNJn5xtFZoD321zll2Pvyky3uzVKPWJZO8BrhEvTg9nru9I0CULJX/YXCu488AF1eR sWuk6CQLpv9NgmwWm0N/iABI/o2yM0qkjGveQpCyIvk+KkPn0gS2lXqWfD3+5g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1700211640; a=rsa-sha256; cv=none; b=Q7xeou8O+XtxWjE7v/5b+2Nvy6AVQ+O7QT1gEOTCM+5ZjYy0M9Te4VlQOd/ajDCwNTlyGH TtTDoqkxXAyMZDMhFXmHkoyaJO8bk+61EvLzWp0qPr8VnibqmqsSyH5JfUGSroPodQkLGO j2js4aUBW9uAmUwv8ha6gmbhG39qZP/wJwuNT+WIDMDaptN/U0lA6Lt5l99obCKwd26w1U ljoQaAYbAwefjOECUPIWodFiizVsEd3Jc9uuIK+WLNcM3Q5ePhchGLKYBS2MQ2pkteAW2D uD6/drgMsVs8tXrGT3R6A6Sb84tF9UUGZLdhy+t0QQL5HoLEyESoShpq+n42nA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4SWrTg6TJ5zckB; Fri, 17 Nov 2023 09:00:39 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 3AH90dHC065929; Fri, 17 Nov 2023 09:00:39 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 3AH90dbT065926; Fri, 17 Nov 2023 09:00:39 GMT (envelope-from git) Date: Fri, 17 Nov 2023 09:00:39 GMT Message-Id: <202311170900.3AH90dbT065926@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Kristof Provost Subject: git: 51a024c42c46 - stable/14 - pfsync: Document the transport over IPv6 feature List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-src-all@freebsd.org X-BeenThere: dev-commits-src-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/stable/14 X-Git-Reftype: branch X-Git-Commit: 51a024c42c4698da1616f1126fb0af4660a3155d Auto-Submitted: auto-generated The branch stable/14 has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=51a024c42c4698da1616f1126fb0af4660a3155d commit 51a024c42c4698da1616f1126fb0af4660a3155d Author: Luiz Amaral AuthorDate: 2023-11-10 15:40:02 +0000 Commit: Kristof Provost CommitDate: 2023-11-17 09:00:22 +0000 pfsync: Document the transport over IPv6 feature On D40102 we implemented support for transport over IPv6 but the documentation was not updated to reflect the new feature. Clarify what is available and how it can be used. MFC after: 1 week Sponsored by: InnoGames GmbH Differential Revision: https://reviews.freebsd.org/D42505 (cherry picked from commit 81d4c786209bfa3752c25b2564eb363027f5d914) --- sbin/ifconfig/ifconfig.8 | 24 ++++++++++++++++++------ share/man/man4/pfsync.4 | 21 ++++++++++++++++++++- 2 files changed, 38 insertions(+), 7 deletions(-) diff --git a/sbin/ifconfig/ifconfig.8 b/sbin/ifconfig/ifconfig.8 index bd6cbd05210e..3b1774606b21 100644 --- a/sbin/ifconfig/ifconfig.8 +++ b/sbin/ifconfig/ifconfig.8 @@ -27,7 +27,7 @@ .\" .\" From: @(#)ifconfig.8 8.3 (Berkeley) 1/5/94 .\" -.Dd October 17, 2023 +.Dd November 08, 2023 .Dt IFCONFIG 8 .Os .Sh NAME @@ -2870,12 +2870,24 @@ to send and receive pfsync state synchronisation messages. .It Fl syncdev Stop sending pfsync state synchronisation messages over the network. .It Cm syncpeer Ar peer_address -Make the pfsync link point-to-point rather than using -multicast to broadcast the state synchronisation messages. -The peer_address is the IP address of the other host taking part in -the pfsync cluster. +Set the destination address for the state synchronization messages sent. +The +.Ar peer_address +is normally the IPv4 or IPv6 address of the other host taking +part in the pfsync cluster. +.Pp +When the +.Ar peer_address +is set to a unicast IP address, the pfsync link will behave +as point-to-point rather than using multicast to broadcast the messages. +.Pp +When the +.Ar peer_address +is set to ff12::f0, the state synchronization +messages will be broadcast using multicast over IPv6. .It Fl syncpeer -Broadcast the packets using multicast. +Unset the syncpeer. +Packets will then be broadcast using multicast over IPv4. .It Cm maxupd Ar n Set the maximum number of updates for a single state which can be collapsed into one. diff --git a/share/man/man4/pfsync.4 b/share/man/man4/pfsync.4 index 4decb50feb7b..b3603c48316e 100644 --- a/share/man/man4/pfsync.4 +++ b/share/man/man4/pfsync.4 @@ -24,7 +24,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd October 17, 2023 +.Dd November 08, 2023 .Dt PFSYNC 4 .Os .Sh NAME @@ -113,6 +113,25 @@ dedicated to pfsync messages such as a crossover cable between two firewalls, or specify a peer address and protect the traffic with .Xr ipsec 4 . .Pp +Support for +.Nm +transport over IPv6 was introduced in +.Fx 14.0 . +To set up +.Nm +using multicast with IPv6 link-local addresses, the +.Ic syncpeer +must be set to the +.Nm +multicast address and the +.Ic syncdev +to the interface where +.Nm +traffic is expected. +.Bd -literal -offset indent +# ifconfig pfsync0 syncpeer ff12::f0 syncdev vtnet0 +.Ed +.Pp When new features are introduced to .Xr pf 4 the format of messages used by