Discussion:
PPTP Broken in latest AMD 2.0 Snapshots
Adam Piasecki
14 years ago
Permalink
Same config works with i386, does not work with AMD..

PPTP clients on AMD can not send traffic over IPSEC Tunnels or traffic
out to the internet. PPTP to the local LAN works fine with AMD.

I386 works with everything.

Thanks,
Adam

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
Bob Armstrong
14 years ago
Permalink
We have seen this as well, but it isn't completely broken. 5-15 attempts will fail then 1 will work. After that they will all work until all pptp connections are terminated and then you have to keep trying until it works again.

Regards,
Bob

-----Original Message-----
From: Adam Piasecki [mailto:apiasecki-URPvFTpAcV6gWe/JvKEfaQC/***@public.gmane.org]
Sent: Wednesday, August 17, 2011 2:38 PM
To: support-***@public.gmane.org
Subject: [pfSense Support] PPTP Broken in latest AMD 2.0 Snapshots

Same config works with i386, does not work with AMD..

PPTP clients on AMD can not send traffic over IPSEC Tunnels or traffic out to the internet. PPTP to the local LAN works fine with AMD.

I386 works with everything.

Thanks,
Adam

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org


---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
Chris Buechler
14 years ago
Permalink
On Wed, Aug 17, 2011 at 3:38 PM, Adam Piasecki
Post by Adam Piasecki
Same config works with i386, does not work with AMD..
PPTP clients on AMD can not send traffic over IPSEC Tunnels or traffic out
to the internet. PPTP to the local LAN works fine with AMD.
I386 works with everything.
That's this.
http://redmine.pfsense.org/issues/1107

Fixing that broke PPPoE entirely on AMD64, doubt if that gets fixed for 2.0.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
David Burgess
14 years ago
Permalink
Post by Chris Buechler
http://redmine.pfsense.org/issues/1107
Fixing that broke PPPoE entirely on AMD64, doubt if that gets fixed for 2.0.
Can you please clarify? Are you saying that folks who use PPPoE on the
WAN should not update to the newer 2.0 snaps until this is resolved
post-2.0?

db

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
Chris Buechler
14 years ago
Permalink
Post by David Burgess
Post by Chris Buechler
http://redmine.pfsense.org/issues/1107
Fixing that broke PPPoE entirely on AMD64, doubt if that gets fixed for 2.0.
Can you please clarify? Are you saying that folks who use PPPoE on the
WAN should not update to the newer 2.0 snaps until this is resolved
post-2.0?
That was only an issue for a couple days back in July, PPPoE was
broken on AMD64, and that particular PPTP issue was fixed. It's been
back to normal (PPTP in some circumstances on AMD64 broken, PPPoE
works fine) for ~3 weeks.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org

Adam Thompson
14 years ago
Permalink
Subject: Re: [pfSense Support] PPTP Broken in latest AMD 2.0
Snapshots
On Wed, Aug 17, 2011 at 3:38 PM, Adam Piasecki
Post by Adam Piasecki
Same config works with i386, does not work with AMD..
PPTP clients on AMD can not send traffic over IPSEC Tunnels or
traffic
Post by Adam Piasecki
out to the internet. PPTP to the local LAN works fine with AMD.
I386 works with everything.
That's this.
http://redmine.pfsense.org/issues/1107
Fixing that broke PPPoE entirely on AMD64, doubt if that gets fixed for 2.0.
Do you mean you're willing to put out 2.0-RELEASE with non-functional
PPPoE on all x64 platforms?

If I had to choose between PPPoE or PPTP support, that's a no-brainer for
me: PPPoE is far more important. If PPTP doesn't work, I can put a PPTP
server behind the pfSense box and tunnel through. If PPPoE doesn't
work... I have to replace the firewall.

Assuming I took your response correctly, the workaround would then be: run
the i386 build instead.

In my experience 32-bit code now provides about 20% less peak bandwidth
than x86_64 code on the latest Xeons (don't know about Opterons). That's
not a very good workaround, IMHO. (Yes, it's possible that was a
hardware-specific result, I wasn't doing scientifically valid
benchmarking.) And yes, I also realize it's unlikely I'll be pumping
10Gb/sec of data through the same router that needs to talk PPPoE to an
ISP, so maybe no-one cares; the 32-bit build runs about as fast as the
64-bit build in normal cases. I wonder if there's some difference in DMA
coalescing, or interrupt handling, in the device driver? For all I know
the CPU could be running slower, or IOAT could be disabled or something
like that in 32-bit mode. I'm only talking about a single data point
here.


Still hoping I misunderstood you anyway,

-Adam Thompson
athompso-gKoiEJA+***@public.gmane.org




---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
Jim Pingle
14 years ago
Permalink
...
[snip]

Read the ticket, and the response again. :-)

We tried fixing that, and it broke PPPoE. The fix had to be backed out,
so now PPTP is broken again but PPPoE works.

Jim


---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
Adam Thompson
14 years ago
Permalink
Post by Jim Pingle
Read the ticket, and the response again. :-)
We tried fixing that, and it broke PPPoE. The fix had to be backed
out, so now PPTP is broken again but PPPoE works.
Jim
I've re-read the ticket and the email and I still don't see how I would
come to any other interpretation...

Regardless, you've clarified the situation now, thank you.


-Adam Thompson
athompso-gKoiEJA+***@public.gmane.org

"This Is Just A Test, Please Ignore The Peanut Panicking Over In The
Gallery. Thank You For Your Cooperation."




---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
Jim Pingle
14 years ago
Permalink
Post by Adam Thompson
Post by Jim Pingle
Read the ticket, and the response again. :-)
We tried fixing that, and it broke PPPoE. The fix had to be backed
out, so now PPTP is broken again but PPPoE works.
Jim
I've re-read the ticket and the email and I still don't see how I would
come to any other interpretation...
Regardless, you've clarified the situation now, thank you.
Ah, the ticket with the more up-to-date info was closed in favor of the
older but more specific ticket. I thought it was the other way around. I
added a cross-reference to the ticket that is still open.

Here is where the PPTP fix happened:
http://redmine.pfsense.org/issues/1336

Jim

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org
Loading...