Date: Tue, 16 Nov 2021 18:15:31 +1100 From: Graham Menhennitt <graham@menhennitt.com.au> To: stable@freebsd.org Subject: Re: packet loss between interfaces on the router Message-ID: <8c8e724a-d9c2-9465-2e35-4422b736aaf9@menhennitt.com.au> In-Reply-To: <baa67203-42a7-196e-cdd6-3edbafc040b8@zhegan.in> References: <216340c2-795d-d7ad-87d8-e07d9336564d@zhegan.in> <baa67203-42a7-196e-cdd6-3edbafc040b8@zhegan.in>
next in thread | previous in thread | raw e-mail | index | archive | help
On 15/11/21 6:58 pm, Eugene M. Zheganin wrote: > Hello, > > 15.11.2021 2:14, Eugene M. Zheganin пишет: >> [...] >> The host is running PF as a packet filter, several dozens of rules. I >> disable the scrub on outer interface (since the lost packet wasn'ta >> fragment, I was sceptical about it, and it doesn't help indeed). >> [...] >> > ...and seems like it's a PF problem (so I probably should've started > this conversation in pf@) > > Here's another stalled session with PF debug turned "loud". Below are > caprtures on outer and inner interfaces, along with PF debug messages. > What is the "3" condition ? I only managed to find that this is some > sort of ackskew clashing. > > Could something be done here via pf configuration ? > > Outer interface: I've never used pf, so I have no idea if this is relevant, but... Are you doing NAT on this interface? If so, maybe you need to turn off various hardware checksum options in the interface. ifconfig_igb1="-vlanhwtso -tso4 -txcsum -rxcsum" (in /etc/rc.conf - replace igb1 with your interface name) Maybe not all of those are needed. It fixed problems for me with ipfw. It's worth a try anyway. Good luck, Graham
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8c8e724a-d9c2-9465-2e35-4422b736aaf9>