Uros Gruber

I'm thinking about porting this project to FreeBSD and I would like to know how stable this is and how in sync is this with Envoy that has BoringSSL as...

@PiotrSikora I'm not entierly sure why, but I believe there might be some conflicst with SSL available on porting tools. But maybe Alexey Dokuchaev have more infor about this https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=247236

I'm using prestart/poststart hooks with combination of anchors to add and remove this per jail basis.

So first of all some related pf.conf configuration. I'm using a separate lo1 interface to handle all the traffic. ``` table persist counters nat-anchor "jail-nat/*" rdr-anchor "jail-rdr/*" pass quick log...

@gronke what if I need to just run a process inside jail but use the host IP?

How about `@` character. At least one case I could use this is to differentiate between the versions or jails?

Agree, this would ease thing a bit.

I think for now globally would be ok or per release. Per jail might be overkill. @gronke so I can safely update config to fit my needs?

@gronke we always use custom source (internal build server).

This one would be nice as we're also waiting to stabilize our infrastructure and with this in mind to also have native cpuset support.