From owner-freebsd-net@FreeBSD.ORG Wed Nov 5 18:12:04 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4489AD36; Wed, 5 Nov 2014 18:12:04 +0000 (UTC) Received: from olymp.kibab.com (olymp6.kibab.com [IPv6:2a01:4f8:160:84c1::2]) by mx1.freebsd.org (Postfix) with ESMTP id 03E911F6; Wed, 5 Nov 2014 18:12:03 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.8.3 olymp.kibab.com 16F817590E DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=bakulin.de; s=default; t=1415211115; bh=jiqV7nshTFIXF30xL6f5PmjUmzZN+LXf1Ry2BCijBP4=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=ZYYBX1HDMmRovjnVtTVS9V9nscarWp/f/UltL4jBIIvvdDM6rArHKVm/NfR77fcEz vQbHXxzwC17pPREwj/281nOzIv4Q08BBhOqPXNK5+uc51JwYvFkC7IWmQmTyrBfBby oKbvJvfq/zhp+nE1C7fMHnWJwdqHVUO9M1yl1IjM= MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 05 Nov 2014 19:11:55 +0100 From: Ilya Bakulin To: Mark Felder Subject: Re: Checksumming outgoing packets in PF vs in =?UTF-8?Q?ip=5B=36=5D=5Foutput?= Organization: Deglitch Networks In-Reply-To: <1415210423.3394438.187470637.21CD8D3D@webmail.messagingengine.com> References: <1415210423.3394438.187470637.21CD8D3D@webmail.messagingengine.com> Message-ID: <9355b23f1a07008eca61f16ebd828d0b@mail.bakulin.de> X-Sender: ilya@bakulin.de Cc: freebsd-net@freebsd.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Nov 2014 18:12:04 -0000 On 2014-11-05 19:00, Mark Felder wrote: > On Wed, Nov 5, 2014, at 08:28, Ilya Bakulin wrote: >> Hi all, >> >> I have been hit by this 2-year-old bug with PF and 'scrub reassemble >> tcp' on IPv6 connections: >> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648 >> > > Wow, this is great. I've known about this problem since I discovered it > upon updating to the 9.0-RELEASE and found my IPv6 connections were > slow > as molasses. Thank you for implementing a fix. I hope to be able to > test > it soon. I hope this helps! btw I've tested this on 11-CURRENT, but I think the code in 9 and 10 should not be different wrt checksum handling. > > Now if we could only stamp out the bug with ipv6 fragment and pf I'd be > a happy, happy daemon. :-) This is somewhat more complex problem, I'll take a look as the time allows.