Dan Langille

750 Followers
50 Following
5.3K Posts

[email protected]

I've been contributing to open source since 1998.

FreshPortshttps://freshports.org
homepagehttps://langille.org
BSDCanhttps://bsdcan.org
PGConhttps://pgcon.org
🚨 We’ve expanded the Cisco Talos Threat Hunting service to proactively uncover the sophisticated threats hiding in your telemetry, combining AI-driven scale with human expertise: https://blog.talosintelligence.com/hypotheses-telemetry-and-human-judgment-inside-cisco-talos-threat-hunting

@dvl Ok, so following advice at the end of this thread https://forums.freebsd.org/threads/broadcom-nic-leads-to-vnet-jails-being-unable-to-make-dns-requests.101534/

if I disable txcsum on the vnet0 interface in the jail it all works now. The reason existing VNET jails work is they use tailscale for DNS.

Broadcom NIC leads to VNET jails being unable to make DNS requests

Hi everyone, I hope you're all well. I just wanted to raise a post here about a problem I'm experiencing after upgrading a server to 15.0-RELEASE where jails seem to be unable to make DNS requests. I first raised this issue as I thought it was a problem with how BastilleBSD handles networking...

The FreeBSD Forums

@tehpeh That looks promising.

Also, 'promisc up' seems odd - I'm guessing that enables 'promiscuous', yet I have not read the docs on that.

I'll go through that link again and try it soon.

@dexter In short, I'm comparing

AMD EPYC 7261 @2.5GHz
and
E5-2699 v3 @ 2.30GHz

@tehpeh For the time being, I have resolved the DNS issue by running unbound on the host and telling that vnet jail to use it for resolving.
@tehpeh I am sure it is a configuration issue.
r7725-01 – Dan Langille's Other Diary

@dexter

[23:23 r7425-01 dvl ~] % grep -i EPYC /var/run/dmesg.boot
CPU: AMD EPYC 7261 8-Core Processor (2495.44-MHz K8-class CPU)
CPU: AMD EPYC 7261 8-Core Processor (2495.31-MHz K8-class CPU)

I created a new jail, non-vnet. It can resolve DNS just fine.
$ nc -zv 10.55.0.1 53
Connection to 10.55.0.1 53 port [tcp/domain] succeeded!