IPFW To use dummynet, must we build a custom kernel?

[Anthie]

Dose it works to add /boot/loader.conf:
dummynet_load="YES"?

 

[SirDice]

No, it's an option, not a device. So it cannot be loaded afterwards unfortunately.

 

[phoenix]

With recent versions of FreeBSD, yes, that is all that's needed. I think FreeBSD 10.0 and above, but it may work on 9.x as well. You no longer need to compile a custom kernel to use dummynet.

 

[leebrown66]

No, it's an option, not a device. So it cannot be loaded afterwards unfortunately.

Hmmm, I don't know about the loader.conf part, but it seems you can load it after boot into a generic kernel...

root@ws-leeb:~ # uname -a
FreeBSD ws-leeb.ad.nyingma.org 10.2-STABLE FreeBSD 10.2-STABLE #0: Sun Dec 13 20:50:40 UTC 2015     root@:/usr/obj/usr/src/sys/GENERIC  amd64
root@ws-leeb:~ # kldstat
Id Refs Address            Size     Name
1   22 0xffffffff80200000 179b700  kernel
2    1 0xffffffff8199c000 23fa0    geom_mirror.ko
3    1 0xffffffff819c0000 a6e8     geom_stripe.ko
4    1 0xffffffff819cb000 12318    tmpfs.ko
5    1 0xffffffff819de000 f143a8   nvidia.ko
6    2 0xffffffff828f3000 b92f8    linux.ko
7    1 0xffffffff82a11000 2ba9     uhid.ko
8    1 0xffffffff82a14000 3585     ums.ko
You have new mail.
root@ws-leeb:~ # kldload dummynet
root@ws-leeb:~ # kldstat
Id Refs Address            Size     Name
1   31 0xffffffff80200000 179b700  kernel
2    1 0xffffffff8199c000 23fa0    geom_mirror.ko
3    1 0xffffffff819c0000 a6e8     geom_stripe.ko
4    1 0xffffffff819cb000 12318    tmpfs.ko
5    1 0xffffffff819de000 f143a8   nvidia.ko
6    2 0xffffffff828f3000 b92f8    linux.ko
7    1 0xffffffff82a11000 2ba9     uhid.ko
8    1 0xffffffff82a14000 3585     ums.ko
9    1 0xffffffff82a18000 d313     dummynet.ko
10    1 0xffffffff82a26000 1146d    ipfw.ko

 

[SirDice]

but it seems you can load it after boot into a generic kernel...

Yeah, I already gathered that. As phoenix already mentioned, you can on recent versions. I guess I was still stuck on the old way. I do believe it's not possible for every option you can enable though. There are some that really need a custom kernel as the option changes various compile-time parameters.

 

[leebrown66]

My apologies SirDice, I totally missed that! I've only been playing with FreeBSD's firewall for a couple of months, trying to wean myself off Linux's iptables, which seems like it's next on the chopping block.