My traffic flow is as follows:

Client browser → Decryption Nginx (bound to a BVI interface on loop0)
After TLS decryption, the traffic is forwarded to Encryption Nginx (bound
to another BVI interface in a separate bridge domain on loop1)
Then it accesses the backend HTTPS server.
The entire pipeline works fine under normal conditions. When I refresh the
page in the browser (using regular F5), it succeeds every time—no matter
how many times I refresh.

However, when I perform a hard refresh (Ctrl+F5):

The first and second attempts still load the webpage successfully.
But starting from the third Ctrl+F5, the page fails to load.
Packet capture analysis shows that between the backend server and the
Encryption Nginx, there are massive TCP retransmissions, and even port
reuse occurs. After a certain number of retransmissions, both sides send
RST packets to terminate the connection.

>From the command line, I observe that:

Both the Decryption Nginx and Encryption Nginx processes are consuming 100%
CPU.
Both loop0 (used by Decryption Nginx) and loop1 (used by Encryption Nginx)
show significant packet drops.
What is the root cause of this failure triggered specifically by Ctrl+F5?

How can this issue be resolved?

[image: 475ea392-3170-41a2-a0ff-a4f669bcff36.png]
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#26552): https://lists.fd.io/g/vpp-dev/message/26552
Mute This Topic: https://lists.fd.io/mt/116482254/21656
Group Owner: [email protected]
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/14379924/21656/631435203/xyzzy 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to