From nobody Sat Jul 13 07:49:55 2024
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WLgbt2wVQz5QBmx
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Sat, 13 Jul 2024 07:50:02 +0000 (UTC)
	(envelope-from tuexen@freebsd.org)
Received: from drew.franken.de (mail-n.franken.de [193.175.24.27])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "*.franken.de", Issuer "Sectigo RSA Domain Validation Secure Server CA" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4WLgbs47vkz54Jr;
	Sat, 13 Jul 2024 07:50:01 +0000 (UTC)
	(envelope-from tuexen@freebsd.org)
Authentication-Results: mx1.freebsd.org;
	none
Received: from smtpclient.apple (unknown [IPv6:2a02:8109:1140:c3d:8958:56e7:6903:9ce1])
	(Authenticated sender: micmac)
	by drew.franken.de (Postfix) with ESMTPSA id 901FC721E280D;
	Sat, 13 Jul 2024 09:49:56 +0200 (CEST)
Content-Type: text/plain;
	charset=us-ascii
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@FreeBSD.org
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.600.62\))
Subject: Re: TCP_RACK, TCP_BBR, and firewalls
From: tuexen@freebsd.org
In-Reply-To: <CAOtMX2iLv5OW4jQiBOHqMvcqkQSznTyO-eWMrOcHWbpeyaeRsg@mail.gmail.com>
Date: Sat, 13 Jul 2024 09:49:55 +0200
Cc: FreeBSD Net <freebsd-net@freebsd.org>
Content-Transfer-Encoding: 7bit
Message-Id: <C7467BCD-7232-4C6C-873E-EEC2482214A7@freebsd.org>
References: <CAOtMX2iLv5OW4jQiBOHqMvcqkQSznTyO-eWMrOcHWbpeyaeRsg@mail.gmail.com>
To: Alan Somers <asomers@FreeBSD.org>
X-Mailer: Apple Mail (2.3774.600.62)
X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00
	autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mail-n.franken.de
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:680, ipnet:193.174.0.0/15, country:DE]
X-Rspamd-Queue-Id: 4WLgbs47vkz54Jr

> On 13. Jul 2024, at 01:43, Alan Somers <asomers@FreeBSD.org> wrote:
> 
> I've been experimenting with RACK and BBR.  In my environment, they
> can dramatically improve single-stream TCP performance, which is
> awesome.  But pf interferes.  I have to disable pf in order for them
> to work at all.
> 
> Is this a known limitation?  If not, I will experiment some more to
> determine exactly what aspect of my pf configuration is responsible.
> If so, can anybody suggest what changes would have to happen to make
> the two compatible?
A problem with same symptoms was already reported and fixed in
https://reviews.freebsd.org/D43769

Which version are you using?

Best regards
Michael
> 
> -Alan
>