From: "David S. Miller" <davem@davemloft.net>
To: ccaputo@alt.net
Cc: netdev@vger.kernel.org, netfilter-devel@lists.netfilter.org,
paul@clubi.ie
Subject: Re: possible problem with TSO and ip_queue
Date: Wed, 10 May 2006 12:49:55 -0700 (PDT) [thread overview]
Message-ID: <20060510.124955.114056211.davem@davemloft.net> (raw)
In-Reply-To: <Pine.LNX.4.64.0605101815430.16614@nacho.alt.net>
From: Chris Caputo <ccaputo@alt.net>
Date: Wed, 10 May 2006 18:44:30 +0000 (GMT)
> Does this sound like a bug or by design?
>
> Does it make sense that ip_queue mangled packets be subjected to TSO,
> given that the TCP header can be messed with by the user mode code?
This is by design. Netfilter looks at full TSO frames, but the
TSO hardware in the cards do not interpret the TCP options in any
way whatsoever when splitting the TSO packet up into MSS frames,
they just copy the options as-is into each sub-frame.
Once you add MD5 checksums to the TCP packet, TSO can no longer be
used on that path, so you'll have to disable TSO either in the route
or via some other means.
next prev parent reply other threads:[~2006-05-10 19:50 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-05-10 18:44 possible problem with TSO and ip_queue Chris Caputo
2006-05-10 19:49 ` David S. Miller [this message]
2006-05-10 20:07 ` Paul Jakma
2006-05-10 20:09 ` David S. Miller
2006-05-10 20:17 ` Paul Jakma
2006-05-10 20:30 ` David S. Miller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20060510.124955.114056211.davem@davemloft.net \
--to=davem@davemloft.net \
--cc=ccaputo@alt.net \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@lists.netfilter.org \
--cc=paul@clubi.ie \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox