* Accessing certain web sites broken from 2.6.19+
@ 2007-05-11 4:23 Andrew Hall
2007-05-11 4:38 ` Robert Iakobashvili
0 siblings, 1 reply; 6+ messages in thread
From: Andrew Hall @ 2007-05-11 4:23 UTC (permalink / raw)
To: netdev
When accessing certain web sites when using any kernel above 2.6.19, TCP
seems to break. Connection to the site is established but never completes.
One particular site is www.dcita.gov.au. Is there a known issue pertaining
to this? Using any kernel below 2.6.19 (for example: 2.6.12 or 2.6.15) works
fine.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Accessing certain web sites broken from 2.6.19+
2007-05-11 4:23 Accessing certain web sites broken from 2.6.19+ Andrew Hall
@ 2007-05-11 4:38 ` Robert Iakobashvili
2007-05-11 5:16 ` Andrew Hall
0 siblings, 1 reply; 6+ messages in thread
From: Robert Iakobashvili @ 2007-05-11 4:38 UTC (permalink / raw)
To: Andrew Hall; +Cc: netdev
On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote:
> When accessing certain web sites when using any kernel above 2.6.19, TCP
> seems to break. Connection to the site is established but never completes.
> One particular site is www.dcita.gov.au. Is there a known issue pertaining
> to this? Using any kernel below 2.6.19 (for example: 2.6.12 or 2.6.15) works
> fine.
Including 2.6.21?
Which browser/s have you tried?
--
Sincerely,
Robert Iakobashvili,
coroberti %x40 gmail %x2e com
...........................................................
http://curl-loader.sourceforge.net
A web testing and traffic generation tool.
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: Accessing certain web sites broken from 2.6.19+
2007-05-11 4:38 ` Robert Iakobashvili
@ 2007-05-11 5:16 ` Andrew Hall
2007-05-11 5:57 ` Robert Iakobashvili
2007-05-11 11:27 ` Simon Arlott
0 siblings, 2 replies; 6+ messages in thread
From: Andrew Hall @ 2007-05-11 5:16 UTC (permalink / raw)
To: 'Robert Iakobashvili'; +Cc: netdev
> -----Original Message-----
> From: Robert Iakobashvili [mailto:coroberti@gmail.com]
> Sent: Friday, 11 May 2007 2:38 PM
> To: Andrew Hall
> Cc: netdev@vger.kernel.org
> Subject: Re: Accessing certain web sites broken from 2.6.19+
>
> On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote:
> > When accessing certain web sites when using any kernel above 2.6.19,
> TCP
> > seems to break. Connection to the site is established but never
> completes.
> > One particular site is www.dcita.gov.au. Is there a known issue
> pertaining
> > to this? Using any kernel below 2.6.19 (for example: 2.6.12 or
> 2.6.15) works
> > fine.
>
> Including 2.6.21?
>
> Which browser/s have you tried?
>
> --
> Sincerely,
> Robert Iakobashvili,
> coroberti %x40 gmail %x2e com
> ...........................................................
> http://curl-loader.sourceforge.net
> A web testing and traffic generation tool.
I have not yet tried 2.6.21.. only tried to 2.6.20.9. The issue isn't
browser dependent ,as a wget directly from the OS will also fail during the
connection. Interestingly requests made from hosts behind the 2.6.20 gateway
that make the same request work fine, it seems it's only requests made from
the localhost itself.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Accessing certain web sites broken from 2.6.19+
2007-05-11 5:16 ` Andrew Hall
@ 2007-05-11 5:57 ` Robert Iakobashvili
2007-05-11 11:27 ` Simon Arlott
1 sibling, 0 replies; 6+ messages in thread
From: Robert Iakobashvili @ 2007-05-11 5:57 UTC (permalink / raw)
To: Andrew Hall; +Cc: netdev
Andrew,
On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote:
> > > When accessing certain web sites when using any kernel above 2.6.19,
> > TCP seems to break. Connection to the site is established but never
> > completes.
Is it happening with a single connection, or when trying tens, hundreds,
thousands? Is it stalled?
Could you send a packet capture for such connection? Thank you.
> > > One particular site is www.dcita.gov.au. Is there a known issue
> > pertaining to this? Using any kernel below 2.6.19 (for example: 2.6.12 or
> > 2.6.15) works fine.
> I have not yet tried 2.6.21.. only tried to 2.6.20.9.
Please, try it with the most close configuration by using the
same config-file and running make oldconfig. There are some
issues fixed since that.
> The issue isn't browser dependent ,as a wget directly from the OS will also fail during the
> connection. Interestingly requests made from hosts behind the 2.6.20 gateway
> that make the same request work fine, it seems it's only requests made from
> the localhost itself.
To be in position to assist you, the people of the list may wish more
details, like:
1. wireshark or tcpdump capture of the broken/stalled sessions;
2. iptables ruleset dump and running modules list;
3. more knowledge about your kernel configuration (config file);
4. more details about your HW, particular networking and their drivers
(is not it a HW/card/driver specific issue?)
Y may wish to look at how other people are submitting issues/bugs with
more details.
--
Sincerely,
Robert Iakobashvili,
coroberti %x40 gmail %x2e com
...........................................................
http://curl-loader.sourceforge.net
A web testing and traffic generation tool.
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: Accessing certain web sites broken from 2.6.19+
2007-05-11 5:16 ` Andrew Hall
2007-05-11 5:57 ` Robert Iakobashvili
@ 2007-05-11 11:27 ` Simon Arlott
2007-05-11 15:47 ` Stephen Hemminger
1 sibling, 1 reply; 6+ messages in thread
From: Simon Arlott @ 2007-05-11 11:27 UTC (permalink / raw)
To: Andrew Hall; +Cc: 'Robert Iakobashvili', netdev
On Fri, May 11, 2007 06:16, Andrew Hall wrote:
>> -----Original Message-----
>> From: Robert Iakobashvili [mailto:coroberti@gmail.com]
>> Sent: Friday, 11 May 2007 2:38 PM
>> To: Andrew Hall
>> Cc: netdev@vger.kernel.org
>> Subject: Re: Accessing certain web sites broken from 2.6.19+
>>
>> On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote:
>> > When accessing certain web sites when using any kernel above 2.6.19,
>> TCP
>> > seems to break. Connection to the site is established but never
>> completes.
>> > One particular site is www.dcita.gov.au. Is there a known issue
>> pertaining
>> > to this? Using any kernel below 2.6.19 (for example: 2.6.12 or
>> 2.6.15) works
>> > fine.
>>
>> Including 2.6.21?
>>
>> Which browser/s have you tried?
>>
>> --
>> Sincerely,
>> Robert Iakobashvili,
>> coroberti %x40 gmail %x2e com
>> ...........................................................
>> http://curl-loader.sourceforge.net
>> A web testing and traffic generation tool.
>
> I have not yet tried 2.6.21.. only tried to 2.6.20.9. The issue isn't
> browser dependent ,as a wget directly from the OS will also fail during the
> connection. Interestingly requests made from hosts behind the 2.6.20 gateway
> that make the same request work fine, it seems it's only requests made from
> the localhost itself.
>
Use tcptraceroute with and without -E to check this isn't a problem with ECN.
--
Simon Arlott
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Accessing certain web sites broken from 2.6.19+
2007-05-11 11:27 ` Simon Arlott
@ 2007-05-11 15:47 ` Stephen Hemminger
0 siblings, 0 replies; 6+ messages in thread
From: Stephen Hemminger @ 2007-05-11 15:47 UTC (permalink / raw)
To: Simon Arlott; +Cc: Andrew Hall, 'Robert Iakobashvili', netdev
On Fri, 11 May 2007 12:27:40 +0100
"Simon Arlott" <simon@fire.lp0.eu> wrote:
>
> On Fri, May 11, 2007 06:16, Andrew Hall wrote:
> >> -----Original Message-----
> >> From: Robert Iakobashvili [mailto:coroberti@gmail.com]
> >> Sent: Friday, 11 May 2007 2:38 PM
> >> To: Andrew Hall
> >> Cc: netdev@vger.kernel.org
> >> Subject: Re: Accessing certain web sites broken from 2.6.19+
> >>
> >> On 5/11/07, Andrew Hall <andrew.a.hall@gmail.com> wrote:
> >> > When accessing certain web sites when using any kernel above 2.6.19,
> >> TCP
> >> > seems to break. Connection to the site is established but never
> >> completes.
> >> > One particular site is www.dcita.gov.au. Is there a known issue
> >> pertaining
> >> > to this? Using any kernel below 2.6.19 (for example: 2.6.12 or
> >> 2.6.15) works
> >> > fine.
> >>
> >> Including 2.6.21?
> >>
> >> Which browser/s have you tried?
> >>
> >> --
> >> Sincerely,
> >> Robert Iakobashvili,
> >> coroberti %x40 gmail %x2e com
> >> ...........................................................
> >> http://curl-loader.sourceforge.net
> >> A web testing and traffic generation tool.
> >
> > I have not yet tried 2.6.21.. only tried to 2.6.20.9. The issue isn't
> > browser dependent ,as a wget directly from the OS will also fail during the
> > connection. Interestingly requests made from hosts behind the 2.6.20 gateway
> > that make the same request work fine, it seems it's only requests made from
> > the localhost itself.
> >
>
> Use tcptraceroute with and without -E to check this isn't a problem with ECN.
>
>
The problem is TCP window scaling, see:
http://lwn.net/Articles/92727/
The problem is some sites have firewalls that don't follow the TCP standards.
There is no way to automatically detect these.
Linux has supported TCP window scaling for a long time, but only recently
has the default memory sizing been adjusted to use larger buffers by default.
If the buffer size is >64K then window scaling will be used. If scaling is
greater than 2 (ie >128k) then it is possible to have the problem.
The firewall is doing bad job of passing SYN packets and strips off the
options. This leaves the receiver is doing window scaling, but the sender
is not. The receiver says it has a window of say 1K bytes (with scale of 7)
but sender thinks that is only 8 bytes so goes into silly window syndrome (SWS)
avoidance and doesn't send.
The kernel developers made a conscious decision not to restrict Linux usage
of window scaling, even though it might cause problems with broken networks.
You can avoid the problem by restricting buffering by setting tcp_mem lower,
turning off window scaling with sysctl, or by setting a cwnd limit on
a per route basis.
--
Stephen Hemminger <shemminger@linux-foundation.org>
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2007-05-11 15:47 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-05-11 4:23 Accessing certain web sites broken from 2.6.19+ Andrew Hall
2007-05-11 4:38 ` Robert Iakobashvili
2007-05-11 5:16 ` Andrew Hall
2007-05-11 5:57 ` Robert Iakobashvili
2007-05-11 11:27 ` Simon Arlott
2007-05-11 15:47 ` Stephen Hemminger
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).