Re: MPD and fragmentation

Mihai Tanasescu wrote:
First of all I'm getting icmp losses even if I use a test LAN to make a tunnel to the local FBSD machine, but these don't seem to affect my transfer rate when trying to get a large file via HTTP from the same machine.

I have just merged small pptp windowing related patch to 6-STABLE, you can try it. Also you can try to disable windowing completely in mpd config, it is not really needed

What bothers me most is that some sites (like msn.com, microsoft.com, etc) don't seem to be loading.
What I first thought about was the mss problem and so I discovered the following:

22:54:36.633254 IP (tos 0x0, ttl 64, id 14254, offset 0, flags [DF], proto: ICMP (1), length: 56) FBSD-IP > 207.68.183.32: ICMP FBSD-IP unreachable - need to frag (mtu 1336), length 36

It is widely known problem whith broken PMTUD at Microsoft. They filter that ICMP packets.

In my config file I have:
set iface mtu 1500
set link mtu 1440

There is no need to specify both. Mpd will calculate iface mtu based on link mtu. iface mtu will be used only as upper limit.

set iface enable tcpmssfix

Actually that should help, but it is strange to see "need to frag (mtu 1336)" in you tcpdump. 1336 looks too small to me. What MTUs do you have around at the interfaces?

My full config is posted here:
http://pastebin.com/m66a3c05f
My system:
FreeBSD 6.1-RELEASE-p17
MPD 4.1

MPD 4.2.2 was released some time ago.

I played a bit with the above mentioned values with no luck unfortunately.
I'm still wondering (don't know if I'm right) if a too large packet comes from 207.68.183.32 why doesn't it get fragmented upon being sent via ng0 -> pptp1 and instead of this happening my machine sends an ICMP unreachable back.

TCP packets usually have DF flag set which denies fragmentation. You can enable multilink PPP feature, it will give you complete 1500 bytes MTU and will process fragmentation by itself, but it will lead to bigger overhead and probably some lower peak performance.

--
Alexander Motin
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: SonicWall VPN says Fragmented Packet Dropped
    ... Scott Moseman wrote: ... I imagine that it'll only confirm that the packets are fragmented, and not necessarily showing me how to resolve it. ... Tried dropping the mtu size on the PC so that the packets don't get fragmented? ... I found in the past that some applications would use the largest packet they could, by the time it's been wrapped up in the security etc it always needed fragmentation. ...
    (comp.dcom.vpn)
  • Re: Router on 6.0-stable fails to route tcp packets due to NAT?? malfunction
    ... Further analysis brought me to a conclusion that the problem is in MTU ... packet "Need Fragmentation" should be sent to packet sender. ... As I know web and ftp packets dont have "dont fragment" bit set so ...
    (freebsd-net)
  • Re: PMTU discovery
    ... [Where is fragmentation done?] ... but only the packets which are not allowed to be ... packet is fragmented later if it is bigger than the MTU ... > then router code always have pmtu values of next hop touter. ...
    (comp.os.linux.networking)
  • Re: SBS 2003 Setup recommendation
    ... Your suggestion about MTU looks very interesting. ... We want something lige the following setup: http://pings.dk/sbssetup.gif ... agaist SBS2003 server. ... IPSec adds a small overhead the size of a packet which would make packets ...
    (microsoft.public.windows.server.sbs)
  • Re: Disable ipv4 fragmentation
    ... I'd like to disable the fragmentation of the ipv4 introduce. ... Which means, oversized packets ... fit the smallest MTU on the whole path. ... You are probably talking about gigabit ethernet. ...
    (Debian-User)