From owner-freebsd-stable@FreeBSD.ORG Tue Apr 13 15:19:35 2010 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C0BDC106564A for ; Tue, 13 Apr 2010 15:19:35 +0000 (UTC) (envelope-from jdc@koitsu.dyndns.org) Received: from qmta05.emeryville.ca.mail.comcast.net (qmta05.emeryville.ca.mail.comcast.net [76.96.30.48]) by mx1.freebsd.org (Postfix) with ESMTP id A94218FC12 for ; Tue, 13 Apr 2010 15:19:35 +0000 (UTC) Received: from omta19.emeryville.ca.mail.comcast.net ([76.96.30.76]) by qmta05.emeryville.ca.mail.comcast.net with comcast id 51bV1e0061eYJf8A53KcnH; Tue, 13 Apr 2010 15:19:36 +0000 Received: from koitsu.dyndns.org ([98.248.46.159]) by omta19.emeryville.ca.mail.comcast.net with comcast id 53Kb1e0013S48mS013Kbss; Tue, 13 Apr 2010 15:19:36 +0000 Received: by icarus.home.lan (Postfix, from userid 1000) id 09B219B419; Tue, 13 Apr 2010 08:19:34 -0700 (PDT) Date: Tue, 13 Apr 2010 08:19:34 -0700 From: Jeremy Chadwick To: Lin Jui-Nan Eric Message-ID: <20100413151933.GA20976@icarus.home.lan> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.20 (2009-06-14) Cc: stable@freebsd.org Subject: Re: pf stalls connection when using route-to X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Apr 2010 15:19:35 -0000 On Tue, Apr 13, 2010 at 08:17:57PM +0800, Lin Jui-Nan Eric wrote: > We recently found that when the traffic passes pf with route-to, the > connection stalls. > Turning off TSO solves the problem. Our pf.conf is very simple: > > table const {10/8, 172.16/12, 192.168/16} > pass out quick route-to (em0 10.1.1.1) from to ! no state > > And we have a tcpdump capture file. It shows that there's lots of > duplicate packets and > retransmissions while TSO is enabled. Our NIC is an Intel PRO/1000: > > em0: port 0x2000-0x201f > mem 0xdf200000-0xdf21ffff irq 18 at device 0.0 on pci4 > em0: Using MSI interrupt > em0: [FILTER] > > Screenshot: http://cf.files.jnlin.org/with-tso.png > > Any suggestion? I just turn off the TSO, but I think it is only a workaround. What FreeBSD version? uname -a output please. -- | Jeremy Chadwick jdc@parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB |