From owner-freebsd-net@FreeBSD.ORG  Tue Apr 13 12:43:19 2010
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A7D07106564A
	for <freebsd-net@freebsd.org>; Tue, 13 Apr 2010 12:43:19 +0000 (UTC)
	(envelope-from ericlin@tamama.org)
Received: from mail-qy0-f175.google.com (mail-qy0-f175.google.com
	[209.85.221.175])
	by mx1.freebsd.org (Postfix) with ESMTP id 6A97D8FC1A
	for <freebsd-net@freebsd.org>; Tue, 13 Apr 2010 12:43:18 +0000 (UTC)
Received: by qyk5 with SMTP id 5so7699939qyk.3
	for <freebsd-net@freebsd.org>; Tue, 13 Apr 2010 05:43:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.229.231.84 with HTTP; Tue, 13 Apr 2010 05:18:52 -0700 (PDT)
X-Originating-IP: [59.124.10.59]
In-Reply-To: <y2o47713ee11004130517icff3b568yb31529556fae06f8@mail.gmail.com>
References: <y2o47713ee11004130517icff3b568yb31529556fae06f8@mail.gmail.com>
Date: Tue, 13 Apr 2010 20:18:52 +0800
Received: by 10.229.213.208 with SMTP id gx16mr5715225qcb.35.1271161132183; 
	Tue, 13 Apr 2010 05:18:52 -0700 (PDT)
Message-ID: <o2u47713ee11004130518j4054d57l206fe6b99473754d@mail.gmail.com>
From: Lin Jui-Nan Eric <ericlin@tamama.org>
To: freebsd-net@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Subject: pf stalls connection when using route-to
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Apr 2010 12:43:19 -0000

Hi listers,

We recently found that when the traffic passes pf with route-to, the
connection stalls.
Turning off TSO solves the problem. Our pf.conf is very simple:

table <privip> const {10/8, 172.16/12, 192.168/16}
pass out quick route-to (em0 10.1.1.1) from <privip> to ! <privip> no state

And we have a tcpdump capture file. It shows that there's lots of
duplicate packets and
retransmissions while TSO is enabled. Our NIC is an Intel PRO/1000:

em0: <Intel(R) PRO/1000 Network Connection 6.9.14> port 0x2000-0x201f
mem 0xdf200000-0xdf21ffff irq 18 at device 0.0 on pci4
em0: Using MSI interrupt
em0: [FILTER]

Screenshot: http://cf.files.jnlin.org/with-tso.png

Any suggestion? I just turn off the TSO, but I think it is only a workaroun=
d.



Sincerely,

=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Jui-Nan