*the first vcl conf:*
vcl {
heapsize 134217728
segment-size 2147483648
add-segment-size 4000000000
rx-fifo-size 8388608
tx-fifo-size 8388608
app-socket-api /run/vpp/app_ns_sockets/vrf10
}
*the second vcl conf:*
vcl {
heapsize 134217728
segment-size 2147483648
add-segment-size 4000000000
rx-fifo-size 8388608
tx-fifo-size 8388608
app-socket-api /run/vpp/app_ns_sockets/vrf20
}
*vpp conf:*
unix {
nodaemon
log /var/log/vpp/vpp.log
full-coredump
cli-listen /run/vpp/cli.sock
gid vpp
}
api-trace {
on
}
api-segment {
gid vpp
}
session {
enable
use-app-socket-api
evt_qs_memfd_seg
}
socksvr {
socket-name /var/run/vpp/vcl-api.sock # VCL API socket
}
memory {
main-heap-size 4G
}
cpu {
}
# 配置 DPDK interfaces
dpdk {
dev 0000:03:00.0{
name eth0
}
dev 0000:04:00.0{
name eth1
}
dev 0000:05:00.0{
name eth2
}
dev 0000:06:00.0{
name eth3
}
}
plugins {
path /usr/lib/x86_64-linux-gnu/vpp_plugins
}
statseg {
size 256M
}
logging {
default-log-level debug
}
Guo Huiliang via lists.fd.io <[email protected]>
于2025年11月26日周三 15:26写道：
> My traffic flow is as follows:
>
> Client browser → Decryption Nginx (bound to a BVI interface on loop0)
> After TLS decryption, the traffic is forwarded to Encryption Nginx (bound
> to another BVI interface in a separate bridge domain on loop1)
> Then it accesses the backend HTTPS server.
> The entire pipeline works fine under normal conditions. When I refresh the
> page in the browser (using regular F5), it succeeds every time—no matter
> how many times I refresh.
>
> However, when I perform a hard refresh (Ctrl+F5):
>
> The first and second attempts still load the webpage successfully.
> But starting from the third Ctrl+F5, the page fails to load.
> Packet capture analysis shows that between the backend server and the
> Encryption Nginx, there are massive TCP retransmissions, and even port
> reuse occurs. After a certain number of retransmissions, both sides send
> RST packets to terminate the connection.
>
> From the command line, I observe that:
>
> Both the Decryption Nginx and Encryption Nginx processes are consuming
> 100% CPU.
> Both loop0 (used by Decryption Nginx) and loop1 (used by Encryption Nginx)
> show significant packet drops.
> What is the root cause of this failure triggered specifically by Ctrl+F5?
>
> How can this issue be resolved?
>
> [image: 475ea392-3170-41a2-a0ff-a4f669bcff36.png]
>
>
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#26553): https://lists.fd.io/g/vpp-dev/message/26553
Mute This Topic: https://lists.fd.io/mt/116482254/21656
Group Owner: [email protected]
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/14379924/21656/631435203/xyzzy
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
