On 2024-11-05, Loïc Revest <l.rev...@apc.fr> wrote:
> We've a few OpenBSD running -release at work and acting as IKE "road
> warrior" VPN servers, serving traffic to Android (strongswan), Linux
> (also strongswan) and Windows 10/11 ("default" Windows WAN Miniport
> IKEv2 driver) clients.
>
> Up until 7.5 everything was running smoothly. Last week we upgraded two
> of our machines to 7.6 (nothing more than sysupgrade > pkg_add -u,
> since sysmerge returned nothing and the configuration changes weren't
> relevant for these servers).
>
> Connections engaged with Linux or Android clients didn't show any
> noticeable difference, while Windows users started to complain that
> every download (whether it be on shared folders over SMB or straight
> from an host on the broader Internet) comes almost to an halt.
>
> Everything else being equal (no Windows update on clients, no
> meaningful network maintenance, ...) except for the 7.5>7.6 upgrade, we
> decided to restore one server to its 7.5 version. Performance on
> SMB/HTTP download got back to "normal" immediately.
>
> As seen in dmesg (see below), both servers are guest machines, and as
> such use vio(4) (more precisely a vlan(4) on top of vio(4)).
>
> We did notice in the 7.6 changelog that some changes have been made to
> vio(4), but are unsure if they come at play here.
Yes.
Looks like pascal@ figured this out. Another area where network offload
features are broken.
Try "sysctl net.inet.tcp.tso=0".
--
Please keep replies on the mailing list.
