Checksumming outgoing packets in PF vs in ip[6]_output
Ilya Bakulin
ilya at bakulin.de
Wed Nov 5 18:12:04 UTC 2014
On 2014-11-05 19:00, Mark Felder wrote:
> On Wed, Nov 5, 2014, at 08:28, Ilya Bakulin wrote:
>> Hi all,
>>
>> I have been hit by this 2-year-old bug with PF and 'scrub reassemble
>> tcp' on IPv6 connections:
>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648
>>
>
> Wow, this is great. I've known about this problem since I discovered it
> upon updating to the 9.0-RELEASE and found my IPv6 connections were
> slow
> as molasses. Thank you for implementing a fix. I hope to be able to
> test
> it soon.
I hope this helps! btw I've tested this on 11-CURRENT, but I think the
code in 9 and 10 should not be
different wrt checksum handling.
>
> Now if we could only stamp out the bug with ipv6 fragment and pf I'd be
> a happy, happy daemon. :-)
This is somewhat more complex problem, I'll take a look as the time
allows.
More information about the freebsd-net
mailing list