https://bugzilla.novell.com/show_bug.cgi?id=866443 https://bugzilla.novell.com/show_bug.cgi?id=866443#c0 Summary: missing some icmp redirects Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: i686 OS/Version: openSUSE 13.1 Status: NEW Severity: Normal Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers@forge.provo.novell.com ReportedBy: per@computer.org QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:11.0) Gecko/20100101 Firefox/11.0 Background: I have recently upgraded our firewall to openSUSE 13.1. It used to be 11.x I think. We have long had a transparent webcache setup, but after upgrading I disabled this as there was something odd with it, and I didn't have time to investigate initially. Setup: the webcache works by redirecting port 80 and 443 traffic to a system running squid. Problem: complex websites, e.g. an on-line newspaper, typically pull in content from several sources. When a page is loaded, I often see e.g. 8-10 different sources (IP-addresses) of content. With the webcaching enabled, loading e.g. http://www.tagesanzeiger.ch leads to a 2-3 minute wait, usually for one of those IPs/resources. I have traced the ICMP redirects and noticed that usually only one of the IP-addresses is not redirected. This is the one the browser waits for. After about 2 minutes, the connection-attempt times out and is retried, and then properly redirected. This is reproducable with a variety of websites. Relatively "simple" web pages using content from only one webserver, e.g. a wikipedia page or the google start page show no problems. Some sort of race condition in the ip stack? Reproducible: Always Steps to Reproduce: in a transparent webcache setup: 1. load http://www.tagesanzeiger.ch/ 2. observe how the browser will end up waiting for one source. 3. check the address of this resource 4. ip route get <ipaddr> will show it was not redirected 5. after 2 minutes, the page is shown. 6. ip route get <ipaddr> will show it was now redirected -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.