Today I created the new gateway machine. It is a ZFS-only system with 3x3TB drives in a mirror configuration.
The hardware was my old ZFS workhorse, now replaced by something with more storage.
I had a moment of panic, thinking this server had just one NIC, but I was wrong. em0 will be the local 1G LAN. re0 will have to be my upstream connection. That’s pretty sad, given it’s only a 10Mb NIC. I am sure I have some fxp(4) NICs around here. I should use that instead. I know they were 100Mb NICs.
$ ifconfig em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=4219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC,VLAN_HWTSO> ether 00:1b:21:51:ab:2d inet 10.105.0.12 netmask 0xffffff00 broadcast 10.105.0.255 inet6 fe80::21b:21ff:fe51:ab2d%em0 prefixlen 64 scopeid 0x1 nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> media: Ethernet autoselect (1000baseT <full-duplex>) status: active re0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE> ether e0:cb:4e:42:f0:ff nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> media: Ethernet autoselect (10baseT/UTP <half-duplex>) status: no carrier lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384 options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6> inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0xa inet 127.0.0.1 netmask 0xff000000 nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
# zfs list
NAME USED AVAIL REFER MOUNTPOINT
system 664M 2.68T 144K /
system/root 144K 2.68T 144K /root
system/rootfs 661M 2.68T 661M legacy
system/tmp 176K 2.68T 176K /tmp
system/usr 1.16M 2.68T 144K /usr
system/usr/home 320K 2.68T 144K /usr/home
system/usr/home/dan 176K 2.68T 176K /usr/home/dan
system/usr/local 144K 2.68T 144K /usr/local
system/usr/obj 144K 2.68T 144K /usr/obj
system/usr/ports 296K 2.68T 152K /usr/ports
system/usr/ports/distfiles 144K 2.68T 144K /usr/ports/distfiles
system/usr/src 144K 2.68T 144K /usr/src
system/var 636K 2.68T 144K /var
system/var/audit 144K 2.68T 144K /var/audit
system/var/log 196K 2.68T 196K /var/log
system/var/tmp 152K 2.68T 152K /var/tmp
# zpool status
pool: system
state: ONLINE
scan: none requested
config:
NAME STATE READ WRITE CKSUM
system ONLINE 0 0 0
mirror-0 ONLINE 0 0 0
gpt/disk0 ONLINE 0 0 0
gpt/disk1 ONLINE 0 0 0
gpt/disk2 ONLINE 0 0 0
errors: No known data errors
# zpool list
NAME SIZE ALLOC FREE CAP DEDUP HEALTH ALTROOT
system 2.72T 664M 2.72T 0% 1.00x ONLINE -
# gpart show
=> 34 5860533101 ada0 GPT (2.7T)
34 94 1 freebsd-boot (47k)
128 4194304 2 freebsd-swap (2.0G)
4194432 5851054080 3 freebsd-zfs (2.7T)
5855248512 5284623 - free - (2.5G)
=> 34 5860533101 ada1 GPT (2.7T)
34 94 1 freebsd-boot (47k)
128 4194304 2 freebsd-swap (2.0G)
4194432 5851054080 3 freebsd-zfs (2.7T)
5855248512 5284623 - free - (2.5G)
=> 34 5860533101 ada2 GPT (2.7T)
34 94 1 freebsd-boot (47k)
128 4194304 2 freebsd-swap (2.0G)
4194432 5851054080 3 freebsd-zfs (2.7T)
5855248512 5284623 - free - (2.5G)
#
A simple test of speed:
# time portsnap fetch extract Looking up portsnap.FreeBSD.org mirrors... 7 mirrors found. Fetching public key from your-org.portsnap.freebsd.org... done. Fetching snapshot tag from your-org.portsnap.freebsd.org... done. Fetching snapshot metadata... done. Fetching snapshot generated at Fri Aug 16 00:05:33 UTC 2013: 521ce25aa9b1fb3a14c289c669f22023b4e6d12fcfb2c4100% of 69 MB 2657 kBps 00m00s Extracting snapshot... ... /usr/ports/x11/yalias/ /usr/ports/x11/yeahconsole/ /usr/ports/x11/yelp/ /usr/ports/x11/zenity/ Building new INDEX files... done. 52.774u 95.826s 2:40.30 92.6% 78+1512k 380+148972io 351pf+0w #
I have 26 packages installed. I have no plans for any more. Unless I missed something… Nothing is configured yet. Just installed.
$ pkg_info autoconf-2.69 Automatically configure source code on many Un*x platforms autoconf-wrapper-20130530 Wrapper script for GNU autoconf automake-1.14 GNU Standards-compliant Makefile generator automake-wrapper-20130530 Wrapper script for GNU automake bacula-client-5.2.12_3 Network backup solution (client) bash-4.2.45 The GNU Project's Bourne Again SHell bison-2.7.1,1 A parser generator from FSF, (mostly) compatible with Yacc bsdstats-5.5_3 Monthly script for reporting anonymous statistics about you db41-4.1.25_4 The Berkeley DB package, revision 4.1 dialog4ports-0.1.5_1 Console Interface to configure ports easy-rsa-2.2.0.m Small RSA key management package based on openssl gettext-0.18.3 GNU gettext package gmake-3.82_1 GNU version of 'make' utility help2man-1.43.3 Automatically generating simple manual pages from program o libexecinfo-1.1_3 A library for inspecting program's backtrace libffi-3.0.13 Foreign Function Interface libiconv-1.14_1 A character set conversion library libtool-2.4.2 Generic shared library support script libyaml-0.1.4_2 A YAML 1.1 parser and emitter written in C logcheck-1.3.15_2 Auditing tool for system logs on Unix boxes lzo2-2.06 Portable speedy, lossless data compression library m4-1.4.16_1,1 GNU m4 mime-construct-1.11 Construct and optionally send MIME messages from command li nagios-plugins-1.4.16_2,1 Plugins for Nagios noip-2.1.9_2 No-IP.com's dynamic DNS update client nrpe-2.13_2 Nagios Remote Plugin Executor openvpn-2.3.2 Secure IP/Ethernet tunnel daemon p5-IPC-Signal-1.00 IPC::Signal - Utility functions dealing with signals p5-Locale-gettext-1.05_3 Message handling functions p5-MIME-Base64-3.14 Perl5 module for Base64 and Quoted-Printable encodings p5-MIME-Types-1.38 Perl extension for determining MIME types p5-Proc-WaitStat-1.00 Interpret and act on wait() status values pcre-8.33 Perl Compatible Regular Expressions library perl-5.14.4 Practical Extraction and Report Language pkgconf-0.9.2_1 Utility to help to configure compiler and linker flags portaudit-0.6.1 Checks installed ports against a list of security vulnerabi portupgrade-2.4.11,2 FreeBSD ports/packages administration and management tool s postfix-2.10.0,1 Secure alternative to widely-used Sendmail procmail-3.22_7 A local mail delivery agent ruby-1.8.7.371,1 An object-oriented interpreted scripting language ruby-1.9.3.448,1 An object-oriented interpreted scripting language ruby19-bdb-0.6.6_1 Ruby interface to Oracle Berkeley DB revision 2 or later ruby19-date2-4.0.19 An alternative date class for Ruby
The dmesg is below. I’m only slightly concerned by the messages on lines 8-13.
cat /var/run/dmesg.boot
Copyright (c) 1992-2012 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4 09:23:10 UTC 2012
root@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64
can't re-use a leaf (geom_label)!
can't re-use a leaf (geom_part_gpt)!
module_register: module g_label already exists!
Module g_label failed to register: 17
module_register: module g_part_gpt already exists!
Module g_part_gpt failed to register: 17
CPU: AMD Phenom(tm) II X4 945 Processor (3010.22-MHz K8-class CPU)
Origin = "AuthenticAMD" Id = 0x100f42 Family = 10 Model = 4 Stepping = 2
Features=0x178bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT>
Features2=0x802009<SSE3,MON,CX16,POPCNT>
AMD Features=0xee500800<SYSCALL,NX,MMX+,FFXSR,Page1GB,RDTSCP,LM,3DNow!+,3DNow!>
AMD Features2=0x37ff<LAHF,CMP,SVM,ExtAPIC,CR8,ABM,SSE4A,MAS,Prefetch,OSVW,IBS,SKINIT,WDT>
TSC: P-state invariant
real memory = 8589934592 (8192 MB)
avail memory = 8241164288 (7859 MB)
Event timer "LAPIC" quality 400
ACPI APIC Table: <111909 APIC1708>
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 4 core(s)
cpu0 (BSP): APIC ID: 0
cpu1 (AP): APIC ID: 1
cpu2 (AP): APIC ID: 2
cpu3 (AP): APIC ID: 3
ACPI Warning: Optional field Pm2ControlBlock has zero address or length: 0x0000000000000000/0x1 (20110527/tbfadt-586)
ioapic0 <Version 2.1> irqs 0-23 on motherboard
kbd1 at kbdmux0
GEOM_PART: scheme GPT is already registered!
cryptosoft0: <software crypto> on motherboard
acpi0: <111909 RSDT1708> on motherboard
acpi0: Power Button (fixed)
acpi0: reservation of fee00000, 1000 (3) failed
acpi0: reservation of ffb80000, 80000 (3) failed
acpi0: reservation of fec10000, 20 (3) failed
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, dfe00000 (3) failed
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
cpu2: <ACPI CPU> on acpi0
cpu3: <ACPI CPU> on acpi0
attimer0: <AT timer> port 0x40-0x43 irq 0 on acpi0
Timecounter "i8254" frequency 1193182 Hz quality 0
Event timer "i8254" frequency 1193182 Hz quality 100
atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
Event timer "RTC" frequency 32768 Hz quality 0
hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 950
Event timer "HPET" frequency 14318180 Hz quality 450
Event timer "HPET1" frequency 14318180 Hz quality 450
Event timer "HPET2" frequency 14318180 Hz quality 450
Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
acpi_timer0: <32-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> irq 18 at device 2.0 on pci0
pci3: <ACPI PCI bus> on pcib1
em0: <Intel(R) PRO/1000 Network Connection 7.3.2> port 0xec00-0xec1f mem 0xfbfe0000-0xfbffffff,0xfbf00000-0xfbf7ffff,0xfbfdc000-0xfbfdffff irq 18 at device 0.0 on pci3
em0: Using MSIX interrupts with 3 vectors
em0: Ethernet address: 00:1b:21:51:ab:2d
pcib2: <ACPI PCI-PCI bridge> irq 18 at device 6.0 on pci0
pci2: <ACPI PCI bus> on pcib2
re0: <RealTek 8168/8111 B/C/CP/D/DP/E/F PCIe Gigabit Ethernet> port 0xd800-0xd8ff mem 0xfbeff000-0xfbefffff irq 18 at device 0.0 on pci2
re0: Using 1 MSI message
re0: Chip rev. 0x38000000
re0: MAC rev. 0x00000000
miibus0: <MII bus> on re0
rgephy0: <RTL8169S/8110S/8211 1000BASE-T media interface> PHY 1 on miibus0
rgephy0: none, 10baseT, 10baseT-FDX, 10baseT-FDX-flow, 100baseTX, 100baseTX-FDX, 100baseTX-FDX-flow, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, 1000baseT-FDX-flow, 1000baseT-FDX-flow-master, auto, auto-flow
re0: Ethernet address: e0:cb:4e:42:f0:ff
ahci0: <ATI IXP700 AHCI SATA controller> port 0xc000-0xc007,0xb000-0xb003,0xa000-0xa007,0x9000-0x9003,0x8000-0x800f mem 0xfb7fe400-0xfb7fe7ff irq 22 at device 17.0 on pci0
ahci0: AHCI v1.10 with 4 3Gbps ports, Port Multiplier supported
ahcich0: <AHCI channel> at channel 0 on ahci0
ahcich1: <AHCI channel> at channel 1 on ahci0
ahcich2: <AHCI channel> at channel 2 on ahci0
ahcich3: <AHCI channel> at channel 3 on ahci0
ohci0: <AMD SB7x0/SB8x0/SB9x0 USB controller> mem 0xfb7fa000-0xfb7fafff irq 16 at device 18.0 on pci0
usbus0 on ohci0
ohci1: <OHCI (generic) USB controller> mem 0xfb7fb000-0xfb7fbfff irq 16 at device 18.1 on pci0
usbus1 on ohci1
ehci0: <AMD SB7x0/SB8x0/SB9x0 USB 2.0 controller> mem 0xfb7fe800-0xfb7fe8ff irq 17 at device 18.2 on pci0
ehci0: AMD SB600/700 quirk applied
usbus2: EHCI version 1.0
usbus2 on ehci0
ohci2: <AMD SB7x0/SB8x0/SB9x0 USB controller> mem 0xfb7fc000-0xfb7fcfff irq 18 at device 19.0 on pci0
usbus3 on ohci2
ohci3: <OHCI (generic) USB controller> mem 0xfb7fd000-0xfb7fdfff irq 18 at device 19.1 on pci0
usbus4 on ohci3
ehci1: <AMD SB7x0/SB8x0/SB9x0 USB 2.0 controller> mem 0xfb7fec00-0xfb7fecff irq 19 at device 19.2 on pci0
ehci1: AMD SB600/700 quirk applied
usbus5: EHCI version 1.0
usbus5 on ehci1
pci0: <serial bus, SMBus> at device 20.0 (no driver attached)
atapci0: <ATI IXP700/800 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff00-0xff0f at device 20.1 on pci0
ata0: <ATA channel> at channel 0 on atapci0
ata1: <ATA channel> at channel 1 on atapci0
isab0: <PCI-ISA bridge> at device 20.3 on pci0
isa0: <ISA bus> on isab0
pcib3: <ACPI PCI-PCI bridge> at device 20.4 on pci0
pci1: <ACPI PCI bus> on pcib3
vgapci0: <VGA-compatible display> mem 0xfb800000-0xfbbfffff,0xfbdf0000-0xfbdfffff irq 21 at device 6.0 on pci1
ohci4: <AMD SB7x0/SB8x0/SB9x0 USB controller> mem 0xfb7ff000-0xfb7fffff irq 18 at device 20.5 on pci0
usbus6 on ohci4
acpi_button0: <Power Button> on acpi0
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
fdc0: <floppy drive controller (FDE)> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
orm0: <ISA Option ROMs> at iomem 0xc0000-0xc7fff,0xc8000-0xc8fff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ppc0: cannot reserve I/O port range
ctl: CAM Target Layer loaded
acpi_throttle0: <ACPI CPU Throttling> on cpu0
hwpstate0: <Cool`n'Quiet 2.0> on cpu0
ZFS filesystem version 5
ZFS storage pool version 28
Timecounters tick every 1.000 msec
The GEOM class LABEL is already loaded.
usbus0: 12Mbps Full Speed USB v1.0
usbus1: 12Mbps Full Speed USB v1.0
usbus2: 480Mbps High Speed USB v2.0
usbus3: 12Mbps Full Speed USB v1.0
usbus4: 12Mbps Full Speed USB v1.0
usbus5: 480Mbps High Speed USB v2.0
usbus6: 12Mbps Full Speed USB v1.0
ugen0.1: <ATI> at usbus0
uhub0: <ATI OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0
ugen1.1: <ATI> at usbus1
uhub1: <ATI OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus1
ugen2.1: <ATI> at usbus2
uhub2: <ATI EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus2
ugen3.1: <ATI> at usbus3
uhub3: <ATI OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus3
ugen4.1: <ATI> at usbus4
uhub4: <ATI OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus4
ugen5.1: <ATI> at usbus5
uhub5: <ATI EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus5
ugen6.1: <ATI> at usbus6
uhub6: <ATI OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus6
uhub6: 2 ports with 2 removable, self powered
uhub0: 3 ports with 3 removable, self powered
uhub1: 3 ports with 3 removable, self powered
uhub3: 3 ports with 3 removable, self powered
uhub4: 3 ports with 3 removable, self powered
(aprobe0:ahcich0:0:15:0): NOP. ACB: 00 00 00 00 00 00 00 00 00 00 00 00
(aprobe0:ahcich0:0:15:0): CAM status: Command timeout
(aprobe0:ahcich0:0:15:0): Error 5, Retries exhausted
(aprobe1:ahcich1:0:15:0): NOP. ACB: 00 00 00 00 00 00 00 00 00 00 00 00
(aprobe1:ahcich1:0:15:0): CAM status: Command timeout
(aprobe1:ahcich1:0:15:0): Error 5, Retries exhausted
(aprobe2:ahcich2:0:15:0): NOP. ACB: 00 00 00 00 00 00 00 00 00 00 00 00
(aprobe2:ahcich2:0:15:0): CAM status: Command timeout
(aprobe2:ahcich2:0:15:0): Error 5, Retries exhausted
uhub2: 6 ports with 6 removable, self powered
uhub5: 6 ports with 6 removable, self powered
ada0 at ahcich0 bus 0 scbus0 target 0 lun 0
ada0: <TOSHIBA DT01ACA300 MX6OABB0> ATA-8 SATA 3.x device
ada0: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes)
ada0: Command Queueing enabled
ada0: 2861588MB (5860533168 512 byte sectors: 16H 63S/T 16383C)
ada0: Previously was known as ad4
ada1 at ahcich1 bus 0 scbus1 target 0 lun 0
ada1: <TOSHIBA DT01ACA300 MX6OABB0> ATA-8 SATA 3.x device
ada1: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes)
ada1: Command Queueing enabled
ada1: 2861588MB (5860533168 512 byte sectors: 16H 63S/T 16383C)
ada1: Previously was known as ad6
ada2 at ahcich2 bus 0 scbus2 target 0 lun 0
ada2: <TOSHIBA DT01ACA300 MX6OABB0> ATA-8 SATA 3.x device
ada2: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes)
ada2: Command Queueing enabled
ada2: 2861588MB (5860533168 512 byte sectors: 16H 63S/T 16383C)
ada2: Previously was known as ad8
SMP: AP CPU #2 Launched!
SMP: AP CPU #1 Launched!
SMP: AP CPU #3 Launched!
Timecounter "TSC-low" frequency 11758654 Hz quality 800
GEOM_MIRROR: Device mirror/swap launched (3/3).
Trying to mount root from zfs:system/rootfs []...
GEOM_ELI: Device mirror/swap.eli created.
GEOM_ELI: Encryption: AES-XTS 256
GEOM_ELI: Crypto: software











