From owner-freebsd-stable@FreeBSD.ORG Wed Mar 18 12:33:53 2009 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C650F106566B; Wed, 18 Mar 2009 12:33:53 +0000 (UTC) (envelope-from nick@nickwithers.com) Received: from mail.nickwithers.com (mail.nickwithers.com [123.243.228.66]) by mx1.freebsd.org (Postfix) with ESMTP id E6D1C8FC0A; Wed, 18 Mar 2009 12:33:52 +0000 (UTC) (envelope-from nick@nickwithers.com) Received: from [10.0.0.245] (presario.shmon.net [10.0.0.245]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.nickwithers.com (Postfix) with ESMTPSA id 8739944; Wed, 18 Mar 2009 23:33:41 +1100 (EST) From: Nick Withers To: Robert Watson In-Reply-To: References: <1236920519.1490.30.camel@localhost> <1237020646.1532.24.camel@localhost> <1237081381.1581.2.camel@localhost> Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-SiMUy3jaWYaZiOHMhr+1" Date: Wed, 18 Mar 2009 23:33:39 +1100 Message-Id: <1237379619.85532.55.camel@localhost> Mime-Version: 1.0 X-Mailer: Evolution 2.24.5 FreeBSD GNOME Team Port X-MailScanner-ID: 8739944.70B2E X-nickwithers-MailScanner: Found to be clean X-nickwithers-MailScanner-From: nick@nickwithers.com Cc: freebsd-stable@freebsd.org Subject: Re: NICs locking up, "*tcp_sc_h" X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Mar 2009 12:33:54 -0000 --=-SiMUy3jaWYaZiOHMhr+1 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Wed, 2009-03-18 at 11:52 +0000, Robert Watson wrote: > On Sun, 15 Mar 2009, Nick Withers wrote: >=20 > >> I'll need to think a bit about a proper fix for this, but you'll find = the=20 > >> problem likely goes away if you eliminate all uid/gid/jail rules from = your=20 > >> firewall. You could also tweak the syncache logic not to use a retran= smit=20 > >> timer, which might slightly extend the time it takes for systems to co= nnect=20 > >> to your host in the presence of packet loss, but would eliminate this=20 > >> transmission path entirely. We'll need a real and more general fix,=20 > >> however, to commit, and I'll look and see what I can come up with. > > > > Brilliant, thanks very much. I'll work without uid rules for the time b= eing,=20 > > then. >=20 > Could I ask you to file a PR on this problem, btw, with the two traces I=20 > singled out as interesting included, then forward me the PR receipt? Tha= t=20 > will make the problem easier to keep track of. Done - Please see newborn kern/132774! > We're currently pondering ways to fix the problem that don't disturb the=20 > stability of the ABI, and may have a workaround patch available shortly t= hat's=20 > appropriate for MFC. Wow! Must admit I'd assumed this one was going to take a while to sort out, so I'm certainly happy to hear this. Cheers very much! > Robert N M Watson > Computer Laboratory > University of Cambridge --=20 Nick Withers email: nick@nickwithers.com Web: http://www.nickwithers.com Mobile: +61 414 397 446 --=-SiMUy3jaWYaZiOHMhr+1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.11 (FreeBSD) iEYEABECAAYFAknA6iMACgkQ3wcG/Pf4Wrix4gCeOPV/SlO7eHjrTidvmtL8TIPl m1IAn0UfQN/RAgQMnxqESgLAGDZIYlR/ =NnAG -----END PGP SIGNATURE----- --=-SiMUy3jaWYaZiOHMhr+1--