Mailinglist Archive: opensuse (929 mails)

< Previous Next >
Re: [opensuse] Missing icmp redirects .....
  • From: Per Jessen <per@xxxxxxxxxxxx>
  • Date: Sat, 01 Mar 2014 17:46:28 +0100
  • Message-id: <let2tg$39n$1@saturn.local.net>
Per Jessen wrote:

I am debugging an issue with our transparent web proxy and I have a
suspicion that some icmp redirects are being missed or not issued. I
would like to see the route cache, all of it, but I can't find the
right commands:

Displaying the routes for individual IPs works fine:

# ip route get 195.93.85.9
195.93.85.9 via 192.168.2.133 dev wlan0 src 192.168.3.22
cache <redirected>
# ip route get 83.140.106.62
83.140.106.62 via 192.168.2.133 dev wlan0 src 192.168.3.22
cache <redirected>

# ip route show cache
(shows nothing)

# ip route show cached
(shows nothing)

# ip route show table cache
(shows nothing)

I ended up using tcpdump to track which icmp redirects the system is
receiving. Here is the issue:

When loading a complex page such as a page of an on-line newspaper with
ads, facebork etc., not all connections are being redirected. The page
will typically pull on resources from 8-10 different places, but the
browser ends up waiting for one of them which was not redirected. It's
not the same one, it appears to be random. When the request times out
and is retried, usually the redirect happens, but this means it takes 2
minutes to load a single page ....

I have recently upgraded the firewall (which does the redirecting) to
13.1, and as it worked fine before, this is almost certainly a
kernel/network issue with the newer kernel.

I have checked that the redirects aren't somehow lost, so I know that
every redirect being sent from the firewall is also seen by the client.
It does however look like the redirect is sometimes ignored by the
client, e.g. when I see two redirects for the same IP-address, but 2
minutes apart. It could be multiple requests, but surely not two
minutes apart.

Hmm, I guess I should be posting this to linux-kernel instead :-(


--
Per Jessen, Zürich (5.7°C)
http://www.hostsuisse.com/ - dedicated server rental in Switzerland.

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups
References