misc/154557: Freeze tcp-session of the clients, if in the gateway is used quagga

[Vladislav V. Prodan]

>Number:         154557
>Category:       misc
>Synopsis:       Freeze  tcp-session of the clients, if in the gateway is used quagga
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Feb 06 17:50:06 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Vladislav V. Prodan
>Release:        8.2-PRERELEASE amd64
>Organization:
>Environment:
FreeBSD bgp.ZZZ 8.2-PRERELEASE FreeBSD 8.2-PRERELEASE #0: Sun Jan 30 03:15:34 EET 2011     root at bgp.ZZZ:/usr/obj/usr/src/sys/bgp.1  amd64

>Description:
<uplink via ng0> --> <re1> gateway freebsd (8.2-PRERELEASE, Jan 30) <re0>-->(Local area network, using unmanaged switch) --> <re0> client freebsd (8.2-PRERELEASE, Dec 19)

AS1111 <--> AS5555 via BGP
gateway freebsd, quagga-0.99.17_5, prefix XXX.YYY.202.0/23 

No problems with services that use udp, for example, DNS and ntp.
Also, there are no problems when using ipv6.

This impression, if tcp response of more than 1000 bytes - then the session hangs.

Below shows how to hang two sessions - http and cvsup:

Proto Recv-Q Send-Q  Local Address          Foreign Address       (state)
tcp4       0      0 XXX.YYY.202.12.45966   H250.onetel92.on.http  ESTABLISHED
tcp4       0      0 XXX.YYY.202.12.14486   sesame.csx.cam.a.cvsup ESTABLISHED
tcp4       0     52 10.0.1.201.ssh         10.0.0.10.1587         ESTABLISHED
tcp4       0      0 XXX.YYY.202.12.11307   otrada.pptp      ESTABLISHED
udp4       0      0 10.0.1.201.ntp         *.*
udp6       0      0 fe80:4::1.ntp          *.*
udp6       0      0 localhost.ntp          *.*
udp4       0      0 localhost.ntp          *.*
udp4       0      0 beastie.local.ntp      *.*
udp4       0      0 XXX.YYY.202.18.ntp     *.*
udp6       0      0 fe80:1::92e6:baf.ntp   *.*
udp4       0      0 XXX.YYY.202.12.ntp     *.*
udp4       0      0 localhost.11211        *.*
udp4       0      0 10.0.1.201.domain      *.*
udp4       0      0 localhost.domain       *.*
udp4       0      0 beastie.local.domain   *.*
udp4       0      0 XXX.YYY.202.18.domain  *.*
udp4       0      0 XXX.YYY.202.12.domain  *.*



BGP-router# sh ip bgp  sum
BGP router identifier A.B.C.D, local AS number 5555
RIB entries 632127, using 58 MiB of memory
Peers 2, using 9120 bytes of memory

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
195.230.ZZZ.xx   4 1111    7062    1138        0    0    0 18:54:53     5044
195.230.ZZZ.YY   4 1111  143093    1138        0    0    0 18:54:51   336779

Total number of neighbors 2


/etc/sysctl.conf on the gateway:
kern.ipc.somaxconn=65535
kern.ipc.maxsockets=204800
net.inet.ip.portrange.first=1024
net.inet.ip.portrange.last=65535
kern.maxfiles=204800 ##? 256000
kern.maxfilesperproc=200000 ## ? 230400
kern.ipc.shmmax=67108864
kern.ipc.shmall=67108864
net.inet.tcp.rfc3465=0
net.inet.flowtable.enable=0
net.inet.tcp.blackhole=1
net.inet.udp.blackhole=1
net.inet.icmp.drop_redirect=1


/etc/sysctl.conf on the client:
kern.ipc.somaxconn=65535
kern.ipc.maxsockets=204800
net.inet.ip.portrange.first=1024
net.inet.ip.portrange.last=65535
kern.maxfiles=204800 ##? 256000
kern.maxfilesperproc=200000 ## ? 230400
kern.ipc.shmmax=67108864
kern.ipc.shmall=67108864
net.inet.tcp.rfc3465=0
net.inet.flowtable.enable=0

>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: