From: Gregory Maxwell <greg@linuxpower.cx>
To: Jamie Lokier <lk@tantalophile.demon.co.uk>
Cc: Frank v Waveren <fvw@var.cx>, David Wagner <daw@cs.berkeley.edu>,
linux-kernel@vger.kernel.org
Subject: Re: hotmail not dealing with ECN
Date: Sat, 27 Jan 2001 15:14:28 -0500 [thread overview]
Message-ID: <20010127151428.H6821@xi.linuxpower.cx> (raw)
In-Reply-To: <Pine.LNX.4.21.0101250041440.1498-100000@srv2.ecropolis.com> <14960.56461.296642.488513@pizda.ninka.net> <3A70DDC4.6D1DB1EC@transmeta.com> <3A713B3F.24AC9C35@idb.hist.no> <94tho8$627$1@abraham.cs.berkeley.edu> <20010127191809.A3727@var.cx> <20010127142032.E6821@xi.linuxpower.cx> <20010127205851.B2501@pcep-jamie.cern.ch>
In-Reply-To: <20010127205851.B2501@pcep-jamie.cern.ch>; from lk@tantalophile.demon.co.uk on Sat, Jan 27, 2001 at 08:58:51PM +0100
On Sat, Jan 27, 2001 at 08:58:51PM +0100, Jamie Lokier wrote:
[snip]
> > I think that older Checkpoint firewalls (perhaps current?) zeroed out SACK
> > on 'hide nat'ed connections. This causes unreasonable stalls for users on
> > SACK enabled clients. Not cool.
>
> If both SACK and SACK_PERMITTED were zeroed out, the clients would
> negotiate non-SACK connections and everythings ok. A performance
> disadvantage relative to allowing SACK, but that's true of ECN as well.
Some checkpoint firewalls have caused stalls on SACK enabled clients. I
don't recall the exact configuration or method of action, but it does
happen. I suspect that it didn't kill the SackOK but only the actual SACKs
data.
Breaking end-to-end is the path to maddness. Trusting practically any
network that leaves a room is insane.
Firewalling should be implemented on the hosts, perhaps with centralized
policy management. In such a situation, there would be no reason to filter
on funny IP options.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/
next prev parent reply other threads:[~2001-01-27 20:14 UTC|newest]
Thread overview: 104+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-01-25 5:43 hotmail not dealing with ECN Jeremy Hansen
2001-01-25 7:37 ` Juri Haberland
2001-01-25 9:06 ` David S. Miller
2001-01-26 1:12 ` Lincoln Dale
2001-01-25 23:31 ` H. Peter Anvin
2001-01-26 1:30 ` David S. Miller
2001-01-26 1:38 ` H. Peter Anvin
2001-01-26 1:43 ` David S. Miller
2001-01-26 1:49 ` H. Peter Anvin
2001-01-26 2:10 ` David S. Miller
2001-01-26 2:15 ` H. Peter Anvin
2001-01-26 8:54 ` Helge Hafting
2001-01-26 18:04 ` Rick Jones
2001-01-27 7:11 ` Rusty Russell
2001-01-31 10:56 ` Alan Cox
2001-01-27 4:10 ` David Wagner
2001-01-27 4:59 ` Brian May
2001-01-27 18:18 ` Frank v Waveren
2001-01-27 19:20 ` Gregory Maxwell
2001-01-27 19:22 ` Frank v Waveren
2001-01-27 19:58 ` Jamie Lokier
2001-01-27 20:14 ` Gregory Maxwell [this message]
2001-01-27 22:18 ` David Schwartz
2001-01-27 23:09 ` James Sutherland
2001-01-28 0:11 ` Gregory Maxwell
2001-01-28 1:10 ` Dominik Kubla
2001-01-28 4:35 ` [OT] " Gregory Maxwell
2001-01-28 12:57 ` Dominik Kubla
2001-01-28 15:45 ` Michael H. Warfield
2001-01-28 19:30 ` Gregory Maxwell
2001-01-28 22:16 ` Dominik Kubla
2001-01-28 8:48 ` James Sutherland
2001-01-28 0:06 ` Gregory Maxwell
2001-01-28 3:27 ` David Schwartz
2001-01-28 0:58 ` David Lang
2001-01-26 2:24 ` Johannes Erdfelt
2001-01-26 3:03 ` Brian May
2001-01-26 5:06 ` Jeremy M. Dolan
2001-01-26 14:04 ` Florian Weimer
2001-01-27 10:00 ` Rogier Wolff
2001-01-31 10:46 ` Alan Cox
2001-01-26 10:37 ` Matti Aarnio
2001-01-26 11:32 ` David S. Miller
2001-01-26 11:40 ` James Sutherland
2001-01-26 11:44 ` Lars Marowsky-Bree
2001-01-26 13:44 ` James Sutherland
2001-01-26 14:44 ` Lars Marowsky-Bree
2001-01-26 15:03 ` Jamie Lokier
2001-01-26 15:14 ` David S. Miller
2001-01-26 15:24 ` Jamie Lokier
2001-01-26 17:05 ` ECN Simon Kirby
2001-01-26 18:12 ` ECN Andrea Arcangeli
2001-01-26 15:16 ` hotmail not dealing with ECN Dominik Kubla
2001-01-26 15:27 ` Jamie Lokier
2001-01-26 22:26 ` Dominik Kubla
2001-01-26 22:30 ` H. Peter Anvin
2001-01-26 15:35 ` Marian Jancar
2001-01-26 16:28 ` H. Peter Anvin
2001-01-28 1:59 ` Dax Kelson
2001-01-28 16:51 ` Jamie Lokier
2001-01-26 23:47 ` ECN -? Anything _I_ need to do to allow it? List User
2001-01-27 9:58 ` Matti Aarnio
2001-01-26 11:50 ` hotmail not dealing with ECN David S. Miller
2001-01-26 13:52 ` James Sutherland
2001-01-26 13:54 ` David S. Miller
2001-01-26 14:12 ` Jamie Lokier
2001-01-26 15:08 ` James Sutherland
2001-01-26 15:13 ` Lars Marowsky-Bree
2001-01-26 15:29 ` James Sutherland
2001-01-26 15:55 ` Chris Ricker
2001-01-26 18:37 ` Henning P. Schmiedehausen
2001-01-26 19:17 ` Matti Aarnio
2001-01-26 19:55 ` Jeremy M. Dolan
2001-01-26 15:34 ` Jamie Lokier
2001-01-26 17:37 ` Drago Goricanec
2001-01-26 14:11 ` Jamie Lokier
2001-01-26 18:19 ` Olaf Titz
2001-01-26 14:10 ` Jamie Lokier
2001-01-26 14:39 ` David S. Miller
2001-01-26 14:46 ` Lars Marowsky-Bree
2001-01-26 14:50 ` David S. Miller
2001-01-26 14:57 ` Jamie Lokier
2001-01-27 0:18 ` Thunder from the hill
2001-01-27 0:15 ` Thunder from the hill
-- strict thread matches above, loose matches on Subject: below --
2001-01-25 17:26 Bernd Eckenfels
2001-01-26 7:53 Bernd Eckenfels
2001-01-26 16:04 Randal, Phil
2001-01-26 16:37 ` Lars Marowsky-Bree
2001-01-26 17:18 ` Tony Hoyle
2001-01-26 18:42 ` Henning P. Schmiedehausen
2001-01-31 16:45 ` Alan Cox
2001-01-26 17:28 ` Miquel van Smoorenburg
2001-01-26 21:21 ` David Ford
2001-01-29 9:42 ` Helge Hafting
2001-01-26 17:14 James Sutherland
2001-01-26 23:25 ` Daniel Chemko
2001-01-26 19:43 ` Chris Meadors
2001-01-29 14:57 ` Thunder from the hill
2001-01-26 17:53 Adam J. Richter
2001-01-26 17:57 ` H. Peter Anvin
2001-01-26 18:15 ` Alan Shutko
2001-01-26 18:32 ` Graham Murray
[not found] <980523239.30846@whiskey.enposte.net>
2001-01-26 21:52 ` Stuart Lynne
2001-01-26 21:59 ` Michael H. Warfield
2001-01-27 9:48 ` Matti Aarnio
2001-01-27 18:55 Bernd Eckenfels
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20010127151428.H6821@xi.linuxpower.cx \
--to=greg@linuxpower.cx \
--cc=daw@cs.berkeley.edu \
--cc=fvw@var.cx \
--cc=linux-kernel@vger.kernel.org \
--cc=lk@tantalophile.demon.co.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox