CURRENT: ipfw: problems with timeouts and worse network performance

[Vladimir Zakharov]

Hello

On Fri, May 20, 2016, O. Hartmann wrote:
> I reported earlier about broken pipes in ssh sessions to remote hosts,
> which occur on an erratic basis. i'm investigating this problem now and
> it seems that it is also ipfw-related, but I'm not sure. This problem
> is present since a couple of weeks now.

Maybe this could help...

I've also experienced problems with broken pipes in ssh sessions some
time ago. Setting in sysctl.conf

net.inet.ip.fw.dyn_ack_lifetime=3600

fixed problem for me. I didn't experiment with the value though. So,
possibly, changing default value (300s) to 1 hour is overkill :).

-- 
Regards,                 | "In theory there is no difference between theory
  Vladimir Zakharov      | and practice. In practice there is."- Yogi Berra