kern/132176: [pf] pf stalls connection when using route-to [regression]

Karsten Schmidt gugge at guggemand.dk
Wed May 27 19:07:48 UTC 2009


Ermal Luçi skrev:
> On Tue, May 26, 2009 at 1:00 PM, Karsten Schmidt <gugge at guggemand.dk> wrote:
>   
>> The following reply was made to PR kern/132176; it has been noted by GNATS.
>>
>> From: Karsten Schmidt <gugge at guggemand.dk>
>> To: bug-followup at FreeBSD.org, link at ngc.net.ua
>> Cc:
>> Subject: Re: kern/132176: [pf] pf stalls connection when using route-to [regression]
>> Date: Tue, 26 May 2009 12:40:52 +0200
>>
>>  I have the same error on a 7.2 box with a bce device and vlans
>>
>>  #pf.conf
>>  # send all packets from x.x.x.128/26 to nonlocal addresses through x.x.x.129
>>  pass out quick route-to ( bce0.11 x.x.x.129 ) from x.x.x.128/26 to
>>  !x.x.x.128/26 no state
>>
>>  #default gateway
>>  91.208.16.1
>>
>>  #ifconfig
>>  bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>>
>>  options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4>
>>         ether 00:1f:29:06:85:28
>>         inet x.x.x.125 netmask 0xffffff80 broadcast x.x.x.127
>>         media: Ethernet autoselect (1000baseTX <full-duplex>)
>>         status: active
>>  bce0.11: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
>>  1500
>>         options=3<RXCSUM,TXCSUM>
>>         ether 00:1f:29:06:85:28
>>         inet x.x.x.140 netmask 0xffffffc0 broadcast x.x.x.191
>>         media: Ethernet autoselect (1000baseTX <full-duplex>)
>>         status: active
>>         vlan: 11 parent interface: bce0
>>
>>  --
>>     
> Can you show your complete ruleset?
>
>   
After making a simple setup with no vlans, and only one ip on the bce0 
interface i tried a ruleset with only one rule.
#pass out route-to ( bce0 $defaultgate ) from $localip to any no state
Where $defaultgate is the gateway used without the rule too, and 
$localip is the only ip on the bce0 interface

This made scp transfers stall to a near halt too.

Trying different options it seems disabling TSO on bce0 works.
hw.bce.tso_enable=0 in loader.conf or simply ifconfig bce0 -tso makes 
the scp transfers run at full speed.

Checking with 7.1-RELEASE and 7.0-RELEASE-p4 its the same behavior, so i 
guess its not the samme error as kern/132176

-- 
Karsten



More information about the freebsd-pf mailing list