[Bug 295942] SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE data corruption on files > 128KB

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295942

--- Comment #15 from Dirk Meyer <dinoex@FreeBSD.org> ---
bhyve VM with vtnet0, issue can be reproduced:

vtnet0: <VirtIO Networking Adapter> on virtio_pci5
vtnet0: Ethernet address: 00:a0:98:**:**:**
vtnet0: netmap queues/slots: TX 1/1024, RX 1/512
vtnet0: link state changed to UP


added to the bootom of lighttpd.conf:

server.network-backend = "writev"
server.feature-flags += ( "server.h2proto" => "disable", "server.h2c" =>
"disable" )
server.modules += ( "mod_openssl" )

$SERVER["socket"] == ":443" {
    ssl.engine = "enable"
    ssl.privkey = "/usr/local/etc/lighttpd/ssl/server.key"
    ssl.pemfile = "/usr/local/etc/lighttpd/ssl/server.crt"
    ssl.openssl.ssl-conf-cmd += ("Options" => "KTLS")
}

6ef4e2869521451b3be4d0f1c082c25145bf2c26cb28a30a62f946bb12407d85 
webalizer-geodb-20260601.ok.tgz
6ef4e2869521451b3be4d0f1c082c25145bf2c26cb28a30a62f946bb12407d85 
webalizer-geodb-20260601.tgz.curl.https
66194d91b763b3a8ad695abc5c5c293f64e524eae423d0c4fce1792b8151b12d 
webalizer-geodb-20260601.tgz.fetch.https
8520862de92217a7832f794ef694b7bb6a82b053b1ae1b568622497d6622e80e 
webalizer-geodb-20260601.tgz.wget.https

# sysctl kern.ipc.tls | grep -v ': 0'
kern.ipc.tls.ifnet.permitted: 1
kern.ipc.tls.sw.gcm: 2
kern.ipc.tls.max_reclaim: 1024
kern.ipc.tls.sw_buffer_cache: 1
kern.ipc.tls.cbc_enable: 1
kern.ipc.tls.rx_enable: 1
kern.ipc.tls.enable: 1
kern.ipc.tls.ifnet_max_rexmit_pct: 2
kern.ipc.tls.maxlen: 16384
kern.ipc.tls.stats.ocf.separate_output: 4146
kern.ipc.tls.stats.ocf.inplace: 143
kern.ipc.tls.stats.ocf.tls13_gcm_encrypts: 4289
kern.ipc.tls.stats.ocf.tls13_gcm_decrypts: 121
kern.ipc.tls.stats.active: 2
kern.ipc.tls.stats.enable_calls: 53
kern.ipc.tls.stats.offload_total: 53
kern.ipc.tls.stats.threads: 4

-- 
You are receiving this mail because:
You are the assignee for the bug.