* Accessing certain web sites broken from 2.6.19+ @ 2007-05-11 4:23 Andrew Hall 2007-05-11 4:38 ` Robert Iakobashvili 0 siblings, 1 reply; 6+ messages in thread From: Andrew Hall @ 2007-05-11 4:23 UTC (permalink / raw) To: netdev When accessing certain web sites when using any kernel above 2.6.19, TCP seems to break. Connection to the site is established but never completes. One particular site is www.dcita.gov.au. Is there a known issue pertaining to this? Using any kernel below 2.6.19 (for example: 2.6.12 or 2.6.15) works fine. ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Accessing certain web sites broken from 2.6.19+ 2007-05-11 4:23 Accessing certain web sites broken from 2.6.19+ Andrew Hall @ 2007-05-11 4:38 ` Robert Iakobashvili 2007-05-11 5:16 ` Andrew Hall 0 siblings, 1 reply; 6+ messages in thread From: Robert Iakobashvili @ 2007-05-11 4:38 UTC (permalink / raw) To: Andrew Hall; +Cc: netdev On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote: > When accessing certain web sites when using any kernel above 2.6.19, TCP > seems to break. Connection to the site is established but never completes. > One particular site is www.dcita.gov.au. Is there a known issue pertaining > to this? Using any kernel below 2.6.19 (for example: 2.6.12 or 2.6.15) works > fine. Including 2.6.21? Which browser/s have you tried? -- Sincerely, Robert Iakobashvili, coroberti %x40 gmail %x2e com ........................................................... http://curl-loader.sourceforge.net A web testing and traffic generation tool. ^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: Accessing certain web sites broken from 2.6.19+ 2007-05-11 4:38 ` Robert Iakobashvili @ 2007-05-11 5:16 ` Andrew Hall 2007-05-11 5:57 ` Robert Iakobashvili 2007-05-11 11:27 ` Simon Arlott 0 siblings, 2 replies; 6+ messages in thread From: Andrew Hall @ 2007-05-11 5:16 UTC (permalink / raw) To: 'Robert Iakobashvili'; +Cc: netdev > -----Original Message----- > From: Robert Iakobashvili [mailto:coroberti@gmail.com] > Sent: Friday, 11 May 2007 2:38 PM > To: Andrew Hall > Cc: netdev@vger.kernel.org > Subject: Re: Accessing certain web sites broken from 2.6.19+ > > On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote: > > When accessing certain web sites when using any kernel above 2.6.19, > TCP > > seems to break. Connection to the site is established but never > completes. > > One particular site is www.dcita.gov.au. Is there a known issue > pertaining > > to this? Using any kernel below 2.6.19 (for example: 2.6.12 or > 2.6.15) works > > fine. > > Including 2.6.21? > > Which browser/s have you tried? > > -- > Sincerely, > Robert Iakobashvili, > coroberti %x40 gmail %x2e com > ........................................................... > http://curl-loader.sourceforge.net > A web testing and traffic generation tool. I have not yet tried 2.6.21.. only tried to 2.6.20.9. The issue isn't browser dependent ,as a wget directly from the OS will also fail during the connection. Interestingly requests made from hosts behind the 2.6.20 gateway that make the same request work fine, it seems it's only requests made from the localhost itself. ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Accessing certain web sites broken from 2.6.19+ 2007-05-11 5:16 ` Andrew Hall @ 2007-05-11 5:57 ` Robert Iakobashvili 2007-05-11 11:27 ` Simon Arlott 1 sibling, 0 replies; 6+ messages in thread From: Robert Iakobashvili @ 2007-05-11 5:57 UTC (permalink / raw) To: Andrew Hall; +Cc: netdev Andrew, On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote: > > > When accessing certain web sites when using any kernel above 2.6.19, > > TCP seems to break. Connection to the site is established but never > > completes. Is it happening with a single connection, or when trying tens, hundreds, thousands? Is it stalled? Could you send a packet capture for such connection? Thank you. > > > One particular site is www.dcita.gov.au. Is there a known issue > > pertaining to this? Using any kernel below 2.6.19 (for example: 2.6.12 or > > 2.6.15) works fine. > I have not yet tried 2.6.21.. only tried to 2.6.20.9. Please, try it with the most close configuration by using the same config-file and running make oldconfig. There are some issues fixed since that. > The issue isn't browser dependent ,as a wget directly from the OS will also fail during the > connection. Interestingly requests made from hosts behind the 2.6.20 gateway > that make the same request work fine, it seems it's only requests made from > the localhost itself. To be in position to assist you, the people of the list may wish more details, like: 1. wireshark or tcpdump capture of the broken/stalled sessions; 2. iptables ruleset dump and running modules list; 3. more knowledge about your kernel configuration (config file); 4. more details about your HW, particular networking and their drivers (is not it a HW/card/driver specific issue?) Y may wish to look at how other people are submitting issues/bugs with more details. -- Sincerely, Robert Iakobashvili, coroberti %x40 gmail %x2e com ........................................................... http://curl-loader.sourceforge.net A web testing and traffic generation tool. ^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: Accessing certain web sites broken from 2.6.19+ 2007-05-11 5:16 ` Andrew Hall 2007-05-11 5:57 ` Robert Iakobashvili @ 2007-05-11 11:27 ` Simon Arlott 2007-05-11 15:47 ` Stephen Hemminger 1 sibling, 1 reply; 6+ messages in thread From: Simon Arlott @ 2007-05-11 11:27 UTC (permalink / raw) To: Andrew Hall; +Cc: 'Robert Iakobashvili', netdev On Fri, May 11, 2007 06:16, Andrew Hall wrote: >> -----Original Message----- >> From: Robert Iakobashvili [mailto:coroberti@gmail.com] >> Sent: Friday, 11 May 2007 2:38 PM >> To: Andrew Hall >> Cc: netdev@vger.kernel.org >> Subject: Re: Accessing certain web sites broken from 2.6.19+ >> >> On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote: >> > When accessing certain web sites when using any kernel above 2.6.19, >> TCP >> > seems to break. Connection to the site is established but never >> completes. >> > One particular site is www.dcita.gov.au. Is there a known issue >> pertaining >> > to this? Using any kernel below 2.6.19 (for example: 2.6.12 or >> 2.6.15) works >> > fine. >> >> Including 2.6.21? >> >> Which browser/s have you tried? >> >> -- >> Sincerely, >> Robert Iakobashvili, >> coroberti %x40 gmail %x2e com >> ........................................................... >> http://curl-loader.sourceforge.net >> A web testing and traffic generation tool. > > I have not yet tried 2.6.21.. only tried to 2.6.20.9. The issue isn't > browser dependent ,as a wget directly from the OS will also fail during the > connection. Interestingly requests made from hosts behind the 2.6.20 gateway > that make the same request work fine, it seems it's only requests made from > the localhost itself. > Use tcptraceroute with and without -E to check this isn't a problem with ECN. -- Simon Arlott ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Accessing certain web sites broken from 2.6.19+ 2007-05-11 11:27 ` Simon Arlott @ 2007-05-11 15:47 ` Stephen Hemminger 0 siblings, 0 replies; 6+ messages in thread From: Stephen Hemminger @ 2007-05-11 15:47 UTC (permalink / raw) To: Simon Arlott; +Cc: Andrew Hall, 'Robert Iakobashvili', netdev On Fri, 11 May 2007 12:27:40 +0100 "Simon Arlott" <simon@fire.lp0.eu> wrote: > > On Fri, May 11, 2007 06:16, Andrew Hall wrote: > >> -----Original Message----- > >> From: Robert Iakobashvili [mailto:coroberti@gmail.com] > >> Sent: Friday, 11 May 2007 2:38 PM > >> To: Andrew Hall > >> Cc: netdev@vger.kernel.org > >> Subject: Re: Accessing certain web sites broken from 2.6.19+ > >> > >> On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote: > >> > When accessing certain web sites when using any kernel above 2.6.19, > >> TCP > >> > seems to break. Connection to the site is established but never > >> completes. > >> > One particular site is www.dcita.gov.au. Is there a known issue > >> pertaining > >> > to this? Using any kernel below 2.6.19 (for example: 2.6.12 or > >> 2.6.15) works > >> > fine. > >> > >> Including 2.6.21? > >> > >> Which browser/s have you tried? > >> > >> -- > >> Sincerely, > >> Robert Iakobashvili, > >> coroberti %x40 gmail %x2e com > >> ........................................................... > >> http://curl-loader.sourceforge.net > >> A web testing and traffic generation tool. > > > > I have not yet tried 2.6.21.. only tried to 2.6.20.9. The issue isn't > > browser dependent ,as a wget directly from the OS will also fail during the > > connection. Interestingly requests made from hosts behind the 2.6.20 gateway > > that make the same request work fine, it seems it's only requests made from > > the localhost itself. > > > > Use tcptraceroute with and without -E to check this isn't a problem with ECN. > > The problem is TCP window scaling, see: http://lwn.net/Articles/92727/ The problem is some sites have firewalls that don't follow the TCP standards. There is no way to automatically detect these. Linux has supported TCP window scaling for a long time, but only recently has the default memory sizing been adjusted to use larger buffers by default. If the buffer size is >64K then window scaling will be used. If scaling is greater than 2 (ie >128k) then it is possible to have the problem. The firewall is doing bad job of passing SYN packets and strips off the options. This leaves the receiver is doing window scaling, but the sender is not. The receiver says it has a window of say 1K bytes (with scale of 7) but sender thinks that is only 8 bytes so goes into silly window syndrome (SWS) avoidance and doesn't send. The kernel developers made a conscious decision not to restrict Linux usage of window scaling, even though it might cause problems with broken networks. You can avoid the problem by restricting buffering by setting tcp_mem lower, turning off window scaling with sysctl, or by setting a cwnd limit on a per route basis. -- Stephen Hemminger <shemminger@linux-foundation.org> ^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2007-05-11 15:47 UTC | newest] Thread overview: 6+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2007-05-11 4:23 Accessing certain web sites broken from 2.6.19+ Andrew Hall 2007-05-11 4:38 ` Robert Iakobashvili 2007-05-11 5:16 ` Andrew Hall 2007-05-11 5:57 ` Robert Iakobashvili 2007-05-11 11:27 ` Simon Arlott 2007-05-11 15:47 ` Stephen Hemminger
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).