Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-21 Thread O. Hartmann
Am Sat, 21 May 2016 12:28:42 +0200 "O. Hartmann" schrieb: > Am Fri, 20 May 2016 17:41:39 +0300 > "Andrey V. Elsukov" schrieb: > > > On 20.05.16 17:23, O. Hartmann wrote: > > > The problem is simpel to trigger: have firewall type "WORKSTATION"

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-21 Thread O. Hartmann
Am Fri, 20 May 2016 17:41:39 +0300 "Andrey V. Elsukov" schrieb: > On 20.05.16 17:23, O. Hartmann wrote: > > The problem is simpel to trigger: have firewall type "WORKSTATION" > > configured, IPFW > > active (I have IPFW statically in-kernel-compiled, no modules so far). Have

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread O. Hartmann
Am Fri, 20 May 2016 17:41:39 +0300 "Andrey V. Elsukov" schrieb: > On 20.05.16 17:23, O. Hartmann wrote: > > The problem is simpel to trigger: have firewall type "WORKSTATION" > > configured, IPFW > > active (I have IPFW statically in-kernel-compiled, no modules so far). Have

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread O. Hartmann
Am Fri, 20 May 2016 17:59:17 +0300 "Andrey V. Elsukov" schrieb: > On 20.05.16 17:23, O. Hartmann wrote: > > I haven't checked so far whether the problem occurs also with non-SSL > > connections > > since all connections I see the suffering are somehow encrypted. > > Can

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread Andrey V. Elsukov
On 20.05.16 17:23, O. Hartmann wrote: > I haven't checked so far whether the problem occurs also with non-SSL > connections since > all connections I see the suffering are somehow encrypted. Can you try to update up to r300302? -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread Andrey V. Elsukov
On 20.05.16 17:23, O. Hartmann wrote: > The problem is simpel to trigger: have firewall type "WORKSTATION" > configured, IPFW > active (I have IPFW statically in-kernel-compiled, no modules so far). Have > /usr/src as a > svn+https repository and try a svn update of the source tree. Hi, it

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread Vladimir Zakharov
On Fri, May 20, 2016, Jan Bramkamp wrote: > On 20/05/16 15:51, Vladimir Zakharov wrote: > > On Fri, May 20, 2016, Jan Bramkamp wrote: > >> On 20/05/16 14:54, Vladimir Zakharov wrote: > >>> Hello > >>> > >>> On Fri, May 20, 2016, O. Hartmann wrote: > I reported earlier about broken pipes in

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread O. Hartmann
Am Fri, 20 May 2016 16:01:17 +0200 Jan Bramkamp schrieb: > On 20/05/16 15:51, Vladimir Zakharov wrote: > > On Fri, May 20, 2016, Jan Bramkamp wrote: > >> On 20/05/16 14:54, Vladimir Zakharov wrote: > >>> Hello > >>> > >>> On Fri, May 20, 2016, O. Hartmann wrote: > I

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread O. Hartmann
Am Fri, 20 May 2016 15:28:35 +0200 Jan Bramkamp schrieb: > On 20/05/16 14:54, Vladimir Zakharov wrote: > > Hello > > > > On Fri, May 20, 2016, O. Hartmann wrote: > >> I reported earlier about broken pipes in ssh sessions to remote hosts, > >> which occur on an erratic basis.

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread Jan Bramkamp
On 20/05/16 15:51, Vladimir Zakharov wrote: On Fri, May 20, 2016, Jan Bramkamp wrote: On 20/05/16 14:54, Vladimir Zakharov wrote: Hello On Fri, May 20, 2016, O. Hartmann wrote: I reported earlier about broken pipes in ssh sessions to remote hosts, which occur on an erratic basis. i'm

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread Vladimir Zakharov
On Fri, May 20, 2016, Jan Bramkamp wrote: > On 20/05/16 14:54, Vladimir Zakharov wrote: > > Hello > > > > On Fri, May 20, 2016, O. Hartmann wrote: > >> I reported earlier about broken pipes in ssh sessions to remote hosts, > >> which occur on an erratic basis. i'm investigating this problem now

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread Jan Bramkamp
On 20/05/16 14:54, Vladimir Zakharov wrote: Hello On Fri, May 20, 2016, O. Hartmann wrote: I reported earlier about broken pipes in ssh sessions to remote hosts, which occur on an erratic basis. i'm investigating this problem now and it seems that it is also ipfw-related, but I'm not sure.

Re: CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread Vladimir Zakharov
Hello On Fri, May 20, 2016, O. Hartmann wrote: > I reported earlier about broken pipes in ssh sessions to remote hosts, > which occur on an erratic basis. i'm investigating this problem now and > it seems that it is also ipfw-related, but I'm not sure. This problem > is present since a couple of

CURRENT: ipfw: problems with timeouts and worse network performance

2016-05-20 Thread O. Hartmann
With most recent CURRENT (r300295) I face a very strange behaviour on all systems running CURRENT with IPFW enabled. I realize massive network problems, especially when services like claws-mail, pgadmin3, OpenLDAP clients, drill or even svn try to connect to their servers. In most cases, the