All of lore.kernel.org
 help / color / mirror / Atom feed
* nftables are non-deterministic
@ 2024-09-04  9:02 Artem S. Tashkinov
  2024-09-04 10:53 ` Pablo Neira Ayuso
  0 siblings, 1 reply; 2+ messages in thread
From: Artem S. Tashkinov @ 2024-09-04  9:02 UTC (permalink / raw)
  To: netfilter

Hello,

Connections to a certain port are _randomly_ delayed by up to three seconds.

This is not down to the service, it works perfectly.

This has been happening for the past couple of years. This has never
happened with iptables.

I wouldn't want to share my nftables config, so if someone's willing to
take a look, please give me your email so that I could send you the
config privately, off-mailing-list.

Best regards,
Artem

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: nftables are non-deterministic
  2024-09-04  9:02 nftables are non-deterministic Artem S. Tashkinov
@ 2024-09-04 10:53 ` Pablo Neira Ayuso
  0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2024-09-04 10:53 UTC (permalink / raw)
  To: Artem S. Tashkinov; +Cc: netfilter

On Wed, Sep 04, 2024 at 09:02:29AM +0000, Artem S. Tashkinov wrote:
> Hello,
> 
> Connections to a certain port are _randomly_ delayed by up to three seconds.
> 
> This is not down to the service, it works perfectly.
> 
> This has been happening for the past couple of years. This has never
> happened with iptables.
> 
> I wouldn't want to share my nftables config, so if someone's willing to
> take a look, please give me your email so that I could send you the
> config privately, off-mailing-list.

I received it, it certainly looks to me like an issue in your ruleset,
unless you prove otherwise. You cannot drop a ruleset on us a expect
to debug it for you.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2024-09-04 10:53 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-09-04  9:02 nftables are non-deterministic Artem S. Tashkinov
2024-09-04 10:53 ` Pablo Neira Ayuso

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.