Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    If_msk.ko and if_so.ko files to match 2.1 release for Watchguard X750e

    Scheduled Pinned Locked Moved Hardware
    22 Posts 5 Posters 4.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Steve Evans
      last edited by

      I've trawled the forum, looking for a "final" version of these drivers with the correct LED behaviour. Now that 2.1 is released do we have final versions of these drivers to install? Also, is it still necessary to specify hw.msk.msi_disable=1 in boot/loader.conf? I've done so as I was previously seeing issues under very high load, and it's probably not doing any harm, but it would be good to get a solid final "approved" configuration for these drivers.

      Thanks,

      Steve

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        The modules compiled for 2.1 can be found here: http://forum.pfsense.org/index.php/topic,20095.msg346347.html#msg346347
        I haven't had a chance to test them myself but the mods are the same.

        Steve

        1 Reply Last reply Reply Quote 0
        • C
          charlie0440
          last edited by

          I can confirm they work fine.

          1 Reply Last reply Reply Quote 0
          • S
            Steve Evans
            last edited by

            OK, so to confirm, I download if_msk.ko-freebsd-8.3.png and if_sk.ko-freebsd-8.3.png, rename them to just have the "ko" suffix, drop them under /boot/modules, add the following lines to /boot/loader.conf, and reboot?

            
            if_sk_load="yes"
            if_msk_load="yes"
            
            

            Do I still need the hw.msk.msi_disable=1 in boot/loader.conf if using these?

            Thanks,

            Steve

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Yes. I would keep the msi disable sysctl. There hasn't been any specific fix gone into msk(4)  that might fix it and it doesn't hurt to have it there.
              Interestingly I just updated my test X750e and the original 8.1 modules work fine. You don't get any bug fixes that went between 8.1 and 8.3 though.

              Steve

              1 Reply Last reply Reply Quote 0
              • S
                Steve Evans
                last edited by

                Thanks Steve.

                Given that you've done a lot to support this platform, do you think it would be a good idea to gather together the essentials as a single Watchguard X[5|7|12]50e package that's easily installable?

                These network drivers would be a good start, plus the stuff I've just posted in the thread HERE. This includes your WGXepc utility, automatic fan control, and temperature display on the dashboard.

                Steve

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  It would be nice to have it easily installable in one go but it's a bit trickier than that. The lcdproc-dev package should (hopefully when it's stable) be most stuff since it already includes the LED control. Not the fan speed control though. The LCD and LED control are universal for all fireboxes, not just the X-Core-e, but the driver modules aren't though it wouldn't hurt to install them on another box. Probably not good practice.

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • S
                    Steve Evans
                    last edited by

                    I'm using lcdproc-dev myself. There are a number of issues (another one HERE) that I think a new user, or an experienced one who's just installed an update, might find useful to have a simple installer for. I have all the necessary files in one place now for easy updates; I'm just thinking of ways to make the wonderful experience of pfSense have fewer barriers to adoption for the less technical user.

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      I agree, lowering the barrier to entry can only be a good thing. A single installable package has been suggested a number of times but it's just not that easy. Not for me at least. The pfSense package system has a steep learning curve that I've hit but failed to make it up a few times.  ::) Having everything in one package then puts significant responsibility on someone to maintain it. That would be across all the models as well. Separate 'packages' means if one thing breaks the rest is still good.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • S
                        Steve Evans
                        last edited by

                        In which case, perhaps an update in the Wiki to include the latest for all these issues now that 2.1 is stable?

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • C
                          ceama
                          last edited by

                          @stephenw10:

                          Yes. I would keep the msi disable sysctl. There hasn't been any specific fix gone into msk(4)  that might fix it and it doesn't hurt to have it there.
                          Interestingly I just updated my test X750e and the original 8.1 modules work fine. You don't get any bug fixes that went between 8.1 and 8.3 though.

                          Steve

                          Hi Stephen10,
                          I tested the sk and msk drivers compiled in 8.3 and this is how they report on dmesg:

                          skc0: <marvell gigabit="" ethernet="" (led="" mod="" 0.9)="">port 0xc000-0xc0ff mem 0xd042c000 
                          mskc0: <marvell yukon="" 88e8053="" gigabit="" ethernet="" (led="" mod="" 1.3)="">port 0x8000-0x80ff

                          So it appears the Watchdog patch is not in the new compile.  I am wondering if the watchdog mod in the 8.1 driver has the same effect as the msi disable sysctl?  I have been using the [Watchdog/LED mod 1.4] driver for a long time without the sysctl tunable.  No issues except the annoying uncorrectable pci error.</marvell></marvell>

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            The watchdog mod appeared to do nothing, it didn't prevent the timeouts occurring. It seemed unwise to leave the non-functional code in there.
                            Has your experience been different? I still haven't found a good way to trigger the timeouts reliably so I was relying on the reports of others.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • C
                              ceama
                              last edited by

                              I have been using these 2 tunables:

                              hw.pci.enable_msix="0"
                              hw.pci.enable_msi="0"

                              And the sk driver (LED mod 0.9) downloaded from the forum.
                              And the msk driver (Watchdog/LED mod 1.4) downloaded from the forum.

                              I have sent that out to run on maybe 50 or so client boxes, some of them under very heavy use in large IT centers for the last year or so with no issues except the uncorrectable PCI error on the msk ports.

                              I haven't been able to get them to lock up.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Ah yes sorry I didn't recognise your username.
                                Those are some nice numbers. Should persuade anyone that the X-e is a good box for pfSense.

                                When I first moded the msk driver to correct the LED config the MSI disable fix wasn't in common use. I wasn't using it because I wasn't seeing any lockups. Some people were though so I added the watchdog timeout code suggested by the msk(4) maintainer in a mailing list. There was no confimation in the list as to it's effectiveness. After trying the updated driver with the code, 1.4, the reports were that it made no difference. The timeouts were still occouring and the driver was not recovering which is what the mod code should have done. Since it seemed to have effect but could have potentially introduced further problems I have been recommending the 1.3 mod module. That's what's referenced in the wiki and on my Google site.
                                I have seen no timeout problems personally or had any reported using either the standard driver or the 1.3 mod (LEDs only) and the loader tunable:

                                hw.msk.msi_disable=1
                                

                                The only way to remove the PCIe error is to update the VPD.
                                http://forum.pfsense.org/index.php/topic,20095.msg207289.html#msg207289

                                If you know any different please tell me.  :)

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • C
                                  ceama
                                  last edited by

                                  Stephen,
                                  Like you, I notice there is more code in the FreeBSD 8.3 drivers.  I didn't take time to see what was added to them, but I did the LED mods 0.9 on the sk driver, compiled it and it works in pfSense 2.1.  I did the LED mods and one other mod in the msk driver to surpress the PCI express error.  I noticed in the source code, there is a comment just before the printf that displays the error.

                                  /* Ignore unsupported request error. */

                                  The driver truly does just ignore anything that it can't handle.  I commented out the printf statement to supress the printing of the error and compiled on 8.3.  Then I set up a test with iperf.  I ran 2 copies on the firebox unit.  One server and one client and connected msk0 to another firewall with a Intel pro/1000 interface.  I ran a test both directions simultaneously so the interface was transmitting and receiving at the same time for 12 straight hours.  This activity pegged out the other units CPU at 100%.  Transmit speed was 200Mbps, receive speed 120 Mbps.  I got no errors or lockups.  I wanted a way to get rid of the error without a VPD flash so clients wouldn't have to worry about that.  The firebox is running a Pentium M 1.7 GHz.  CPU showed 48% during test.

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Nice real numbers and nice result.  :)

                                    It's tempting to flash the VPD because having done so the standard drivers wouldn't dipslay any errors in the future. However since I have no idea what the VPD code does it may just as likely introduce new errors. I'm sure it's possible to correct the LED behaviour in the VPD code also. Just need to find a friendly Marvell engineer who has access to documentation!  :)

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • ghostshellG
                                      ghostshell
                                      last edited by

                                      Hey Charlie!

                                      I can confirm then work on

                                      x1000 2.1
                                      x1250e 2.1 (3 units)
                                      x5500e 2.1

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        There aren't any Marvell NICs in the X1000, no need to load the modules. It won't hurt though.

                                        Steve

                                        1 Reply Last reply Reply Quote 0
                                        • ghostshellG
                                          ghostshell
                                          last edited by

                                          Tested them for Charlie

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            charlie0440
                                            last edited by

                                            @ghostshell ??? when did I ask for a test? you also pm'd me ??? (sorry if off topic)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.