On Tue, Oct 25, 2022 at 12:43:48PM +0100, Pedro Caetano wrote: > Hi @bugs, > > I've a pair of boxes peering bgp with isp infrastructure and on premises > infrastructure > One of the routers was upgraded to 7.2 last night without any issues. > > This is a 'border router' announcing private prefixes via bgp to isp > equipment and customer on a vpn that is pushing ~5tb a day. (upload and > download aggregated) > It has a few rules on pf.conf setup with sloppy state. (only one router was > upgraded, the traffic flow is assymetric) > > > After upgrading, TSO was enabled on this NICs using ifconfig ix0 tso; > ifconfig ix1 tso. > It was not possible to detect any issues on the maintenance window, yet > today with more users using the network we had reports of issues. > > Some traffic would be very *slow*, some traffic would flow normally. > After disabling TSO, the packet forwarding resumed its normal state. > Unfortunately I do not have pcaps to support this issue. > > The router is running 7.2 with latest patches available > > Please let me know what further information would be useful in this > scenario.
Do not enable TSO on forwading infrastructure. It is only useful on servers and clients. And even then receive TCP segment offloading does not scale on systems handling many concurrent TCP sessions. The cards just don't have enough RAM to reassemble that many streams. So I'm not surprised that some connections show strange behaviour. -- :wq Claudio
