Re: 13.0-BETA1: ipfw regression?

2021-02-12 Thread Stefan Ehmann
On Tuesday, February 9, 2021 11:23:32 PM CET Stefan Ehmann wrote: > I'm having issues with stale TCP connections after the upgrade from 12.2 to > 13.0-BETA1. > > Symptoms: > Outgoing TCP connections no longer receive data after being idle. > > I can do more testing later, but I think these ipfw

Re: 13.0-BETA1: ipfw regression?

2021-02-12 Thread Stefan Ehmann
On Thursday, February 11, 2021 7:57:43 AM CET Helge Oldach wrote: > Hi Stefan, > > Stefan Ehmann wrote on Thu, 11 Feb 2021 02:50:35 +0100 (CET): > > On Wednesday, February 10, 2021 7:46:25 AM CET Helge Oldach wrote: > > > Hi, > > > > > > Stefan Ehmann wrote on Tue, 09 Feb 2021 23:23:32 +0100

Re: 13.0-BETA1: ipfw regression?

2021-02-11 Thread Stefan Ehmann
On Thursday, February 11, 2021 7:57:43 AM CET Helge Oldach wrote: > Hi Stefan, > > Stefan Ehmann wrote on Thu, 11 Feb 2021 02:50:35 +0100 (CET): > > On Wednesday, February 10, 2021 7:46:25 AM CET Helge Oldach wrote: > > > Hi, > > > > > > Stefan Ehmann wrote on Tue, 09 Feb 2021 23:23:32 +0100

Re: 13.0-BETA1: ipfw regression?

2021-02-10 Thread Stefan Ehmann
On Wednesday, February 10, 2021 7:46:25 AM CET Helge Oldach wrote: > Hi, > > Stefan Ehmann wrote on Tue, 09 Feb 2021 23:23:32 +0100 (CET): > > I'm having issues with stale TCP connections after the upgrade from 12.2 > > to > > 13.0-BETA1. > > > > Symptoms: > > Outgoing TCP connections no longer

Re: 13.0-BETA1: ipfw regression?

2021-02-10 Thread Stefan Ehmann
On Wednesday, February 10, 2021 7:46:25 AM CET Helge Oldach wrote: > Hi, > > Stefan Ehmann wrote on Tue, 09 Feb 2021 23:23:32 +0100 (CET): > > I'm having issues with stale TCP connections after the upgrade from 12.2 > > to > > 13.0-BETA1. > > > > Symptoms: > > Outgoing TCP connections no longer

Re: 13.0-BETA1: ipfw regression?

2021-02-10 Thread Andrey V. Elsukov
On 10.02.2021 10:40, Dewayne Geraghty wrote: > Stefan, Would you check that you have net.inet.tcp.always_keepalive=1, > and perhaps that net.inet.tcp.keepidle and net.inet.tcp.keepintvl are > reasonable to ensure that the expected keep alives are running. I don't > have a FreeBSD 13 to view the

Re: 13.0-BETA1: ipfw regression?

2021-02-09 Thread Dewayne Geraghty
Stefan, Would you check that you have net.inet.tcp.always_keepalive=1, and perhaps that net.inet.tcp.keepidle and net.inet.tcp.keepintvl are reasonable to ensure that the expected keep alives are running. I don't have a FreeBSD 13 to view the defaults, but Helge might be right that "it" is

13.0-BETA1: ipfw regression?

2021-02-09 Thread Stefan Ehmann
I'm having issues with stale TCP connections after the upgrade from 12.2 to 13.0-BETA1. Symptoms: Outgoing TCP connections no longer receive data after being idle. I can do more testing later, but I think these ipfw rules trigger the problem: - check-state - allow tcp from me to any setup