 lgcosta
|
90c51f43fc
|
M5: queue gate 15 green (hfsc in the data path, pfctl -s queue works); vendor OpenBSD net/hfsc.h + net/fq_codel.h so kernel and pfctl share the ABI; pflog payload anchored; splassert no longer BUGs
|
2026-11-12 03:10:46 -03:00 |
|
|
lgcosta
|
4bade69cf9
|
docs: queue status honest - attach path reached, purge lock assert documented as the blocker (caveats #9)
|
2026-11-12 01:42:51 -03:00 |
|
|
lgcosta
|
f34c4f92a9
|
M5 step 1: build OpenBSD hfsc/fq_codel back ends into pf.ko (ml_* API, ifq_q handshake, scheduler types); priq still attached, 14/14 suite unchanged
|
2026-11-12 00:48:56 -03:00 |
|
|
lgcosta
|
12e9c1a2f3
|
reply-to: gate 13 green (reply forced onto the gateway link); docs/README/CHANGELOG for 14 gates
|
2026-11-11 23:56:01 -03:00 |
|
|
lgcosta
|
c2d1fc4c53
|
docs: fail-to is not an OpenBSD 8.0 keyword (removed upstream) - correct all references; reply-to gate added
|
2026-11-11 23:52:11 -03:00 |
|
|
lgcosta
|
b3e7358868
|
scrub: gate 09 green (min-ttl/max-mss measured on egress); matrix + guides updated EN+PT-BR
|
2026-11-11 23:32:32 -03:00 |
|
|
lgcosta
|
e7e941047f
|
docs: route-to/dup-to verified (matrix EN+PT-BR, guides)
|
2026-11-11 23:11:56 -03:00 |
|
|
lgcosta
|
2668d99d5a
|
binat: gate 07 green (pfctl's nat-to+rdr-to expansion verified both directions); docs updated
|
2026-11-11 22:14:44 -03:00 |
|
|
lgcosta
|
92c015b97b
|
docs: pflog verified (matrix EN+PT-BR, porting notes, README status)
|
2026-11-11 21:53:55 -03:00 |
|
|
lgcosta
|
0eb040fcc8
|
docs: rdr-to verified; porting notes on checksum strategy across translation paths (GSO regression)
|
2026-11-11 21:27:32 -03:00 |
|
|
lgcosta
|
6cc4e21ae2
|
docs+demo: asciinema recording of the lab (stateful filtering, tables, drop, NAT, divert); README/matrix reflect the verified state
|
2026-11-11 20:33:27 -03:00 |
|
|
lgcosta
|
444a0555c6
|
docs: divert verified (matrix + porting notes); FORWARD hook evaluates the out ruleset for transit traffic
|
2026-11-11 19:50:14 -03:00 |
|
|
lgcosta
|
0fe4d83b93
|
docs: divert status corrected after AF_DIVERT restore (COMPILES untested, M4 e2e gate defined)
|
2026-11-11 18:50:29 -03:00 |
|
|
lgcosta
|
ac56534c3b
|
AF_DIVERT family restored & compiling: full socket family (PF_DIVERT=32, sock_register), blocking recv/poll, divert_output-compatible sendmsg reinject, mtag type passthrough; pfk_api decls
|
2026-11-11 18:47:04 -03:00 |
|