Possible bug in TSO or in pf on bce

Albert Shih Albert.Shih at obspm.fr
Mon Feb 15 21:11:45 UTC 2010


Hi all, 

I'm not a tcp/ip guru, so I don't known if it's a bug or not.

The situation is little complexe, so I'm going to explain that. 

I've one server with tree interfaces two bce and one bge. All test is on
two bce.

This server running FreeBSD-7.2-p6 and have lot of jail (but the problem is
the same for one jail, so I assume I've just one jail). The bce0 and bce1
are in different vlan. 

The jail is on bce1 (meaning the jail IP is on the bce1 subnet). 

The default gateway is on bce0

So to make all traffic of the jail pass only throught bce1 and not using
bce0 I'm using pf with something like 

	pass out route-to (bce1 bce1_subnet_gw) from jail_IP to ! bce1_subnet keep state
	pass in on bce1 reply-to (bce1 bce1_subnet_gw) from ! bce1_subnet to jail_IP keep state

if I do that all traffic pass through the right interface (bce1), but...the
bandwith drop to  ~60kb/s (on gigabit interface). 

So I find the problem is with TSO, if I deactivated the TSO the bandwith is
return to normal. 

I don't knwon if it's a bug in PF (the problem is same if I use scrub or
not) or in the TSO support of bce.

I can run some few tests if someone like to debug, but because the server
is in production I cannot make lot of test. 

Regards.

JAS

-- 
Albert SHIH
SIO batiment 15
Observatoire de Paris Meudon
5 Place Jules Janssen
92195 Meudon Cedex
Téléphone : 01 45 07 76 26/06 86 69 95 71
Heure local/Local time:
Lun 15 fév 2010 22:10:52 CET


More information about the freebsd-pf mailing list