Yamaban wrote:
On Mon, 30 May 2016 20:57, Per Jessen wrote:
Thanks Yamaban, most helpful! Do you also happen to know how I determine if the kernel is capable? If that cannot be or is difficult to determine, I presume it is best to just strip the ECN bits? The mechanism seems to be mostly superfluous these days anyway. It is the first time ever in ten years I have had this issue.
Oh, how did I handle that? (long time ago....)
- First, try setting "tcp_ecn = 2" (sysctl net.ipv4.tcp_ecn=2)
- Are new incomming connection handled correctly ? (accepted, regardless of ECN bits) Yes? -- Then OK, you are done, please, add the "net.ipv4.tcp_ecn=2" to your config in /etc/sysctl*
Thanks, that's pretty much as I thought. It's been working with tcp_ecn=2 since last night.
- Still dropped or rejected connections? Invest the work in the filter.
I think I'll try that out today, it's just a single iptables directive. -- Per Jessen, Zürich (15.6°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org