Re: packet loss between interfaces on the router

On 15/11/21 6:58 pm, Eugene M. Zheganin wrote:
> Hello,
>
> 15.11.2021 2:14, Eugene M. Zheganin пишет:
>> [...]
>> The host is running PF as a packet filter, several dozens of rules. I 
>> disable the scrub on outer interface (since the lost packet wasn'ta  
>> fragment, I was sceptical about it, and it doesn't help indeed).
>> [...]
>>
> ...and seems like it's a PF problem (so I probably should've started 
> this conversation in pf@)
>
> Here's another stalled session with PF debug turned "loud". Below are 
> caprtures on outer and inner interfaces, along with PF debug messages. 
> What is the "3" condition ? I only managed to find that this is some 
> sort of ackskew clashing.
>
> Could something be done here via pf configuration ?
>
> Outer interface:


I've never used pf, so I have no idea if this is relevant, but...

Are you doing NAT on this interface? If so, maybe you need to turn off 
various hardware checksum options in the interface.

     ifconfig_igb1="-vlanhwtso -tso4 -txcsum -rxcsum" (in /etc/rc.conf - 
replace igb1 with your interface name)

Maybe not all of those are needed.

It fixed problems for me with ipfw. It's worth a try anyway.

Good luck,

     Graham