Checksumming outgoing packets in PF vs in ip[6]_output

Ilya Bakulin ilya at bakulin.de
Wed Nov 5 18:12:04 UTC 2014


On 2014-11-05 19:00, Mark Felder wrote:
> On Wed, Nov 5, 2014, at 08:28, Ilya Bakulin wrote:
>> Hi all,
>> 
>> I have been hit by this 2-year-old bug with PF and 'scrub reassemble
>> tcp' on IPv6 connections:
>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648
>> 
> 
> Wow, this is great. I've known about this problem since I discovered it
> upon updating to the 9.0-RELEASE and found my IPv6 connections were 
> slow
> as molasses. Thank you for implementing a fix. I hope to be able to 
> test
> it soon.

I hope this helps! btw I've tested this on 11-CURRENT, but I think the 
code in 9 and 10 should not be
different wrt checksum handling.

> 
> Now if we could only stamp out the bug with ipv6 fragment and pf I'd be
> a happy, happy daemon. :-)

This is somewhat more complex problem, I'll take a look as the time 
allows.



More information about the freebsd-net mailing list