Re: Ingress tc filters with IPSec

2015-05-29 Thread John A. Sullivan III
On Sat, 2015-05-30 at 01:52 -0400, John A. Sullivan III wrote: > Argh! yet another obstacle from my ignorance. We are attempting ingress > traffic shaping using IFB interfaces on traffic coming via GRE / IPSec. > Filters and hash tables are working fine with plain GRE including > s

Ingress tc filters with IPSec

2015-05-29 Thread John A. Sullivan III
Argh! yet another obstacle from my ignorance. We are attempting ingress traffic shaping using IFB interfaces on traffic coming via GRE / IPSec. Filters and hash tables are working fine with plain GRE including stripping the header. We even got the ematch filter working so that the ESP packets are

Re: Need a creative way to negate u32 filter matches

2015-05-29 Thread John A. Sullivan III
On Fri, 2015-05-29 at 22:32 -0400, John A. Sullivan III wrote: > Hello, all. I understand there is no direct way to negate a u32 match. > I have a setup where I am redirecting all ingress traffic from the > physical interface to an ifb interface with a u32 match u8 0 0 action > m

Need a creative way to negate u32 filter matches

2015-05-29 Thread John A. Sullivan III
Hello, all. I understand there is no direct way to negate a u32 match. I have a setup where I am redirecting all ingress traffic from the physical interface to an ifb interface with a u32 match u8 0 0 action mirred egress redirect filter attached to : I do not want to send ingress ESP packets

Re: Drops in qdisc on ifb interface

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 15:31 -0700, Eric Dumazet wrote: > On Mon, 2015-05-25 at 16:05 -0400, John A. Sullivan III wrote: > > Hello, all. One one of our connections we are doing intensive traffic > > shaping with tc. We are using ifb interfaces for shaping ingress > > traffi

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 16:19 -0700, Eric Dumazet wrote: > On Mon, 2015-05-25 at 18:44 -0400, John A. Sullivan III wrote: > > On Mon, 2015-05-25 at 15:38 -0700, Eric Dumazet wrote: > > > On Mon, 2015-05-25 at 18:22 -0400, John A. Sullivan III wrote: > > > > > >

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 15:38 -0700, Eric Dumazet wrote: > On Mon, 2015-05-25 at 18:22 -0400, John A. Sullivan III wrote: > > > 2) Why do we still not negotiate the 16MB buffer that we get when we are > > not using GRE? > > What exact NIC handles receive side ? > >

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 17:34 -0400, John A. Sullivan III wrote: > On Mon, 2015-05-25 at 13:41 -0700, Eric Dumazet wrote: > > On Mon, 2015-05-25 at 15:21 -0400, John A. Sullivan III wrote: > > > > > > > > Thanks, Eric. I really appreciate the help. This is a pro

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 13:41 -0700, Eric Dumazet wrote: > On Mon, 2015-05-25 at 15:21 -0400, John A. Sullivan III wrote: > > > > > Thanks, Eric. I really appreciate the help. This is a problem holding up > > a very high profile, major project and, for the life of me, I can

Drops in qdisc on ifb interface

2015-05-25 Thread John A. Sullivan III
Hello, all. One one of our connections we are doing intensive traffic shaping with tc. We are using ifb interfaces for shaping ingress traffic and we also use ifb interfaces for egress so that we can apply the same set of rules to multiple interfaces (e.g., tun and eth interfaces operating on the

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 15:29 -0400, John A. Sullivan III wrote: > On Mon, 2015-05-25 at 15:21 -0400, John A. Sullivan III wrote: > > On Mon, 2015-05-25 at 12:05 -0700, Eric Dumazet wrote: > > > On Mon, 2015-05-25 at 14:49 -0400, John A. Sullivan III wrote: > > > > On

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 15:21 -0400, John A. Sullivan III wrote: > On Mon, 2015-05-25 at 12:05 -0700, Eric Dumazet wrote: > > On Mon, 2015-05-25 at 14:49 -0400, John A. Sullivan III wrote: > > > On Mon, 2015-05-25 at 09:58 -0700, Eric Dumazet wrote: > > > > On Mon, 201

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 12:05 -0700, Eric Dumazet wrote: > On Mon, 2015-05-25 at 14:49 -0400, John A. Sullivan III wrote: > > On Mon, 2015-05-25 at 09:58 -0700, Eric Dumazet wrote: > > > On Mon, 2015-05-25 at 11:42 -0400, John A. Sullivan III wrote: > > > > Hello, al

Re: TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
On Mon, 2015-05-25 at 09:58 -0700, Eric Dumazet wrote: > On Mon, 2015-05-25 at 11:42 -0400, John A. Sullivan III wrote: > > Hello, all. I hope this is the correct list for this question. We are > > having serious problems on high BDP networks using GRE tunnels. Our > > t

TX abort errors on GRE tunnels

2015-05-25 Thread John A. Sullivan III
Hello, all. We are seeing TX abort errors on all of our GRE tunnels. What would cause such a thing? We suspected it might be MTU because these are encapsulated in IPSec transport and the MTU on the GRE tunnel is still 1476 so we reduced the MTU but that did not eliminate the problem. By the way,

TCP window auto-tuning sub-optimal in GRE tunnel

2015-05-25 Thread John A. Sullivan III
Hello, all. I hope this is the correct list for this question. We are having serious problems on high BDP networks using GRE tunnels. Our traces show it to be a TCP Window problem. When we test without GRE, throughput is wire speed and traces show the window size to be 16MB which is what we con