Subject: Re: 2.0.2 and NAT xmit performance
To: Steven M. Bellovin <smb@cs.columbia.edu>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: port-i386
Date: 06/02/2005 23:15:20
On Thu, Jun 02, 2005 at 03:08:32PM -0400, Steven M. Bellovin wrote:
> >That was step 1 on the original email. Sending a big, 200mb file from
> >the client 192.168.1.20 to server/gateway 192.168.1.1 is fast.. Full
> >network speed, 100base xfer rate. Step 2 was to ftp that file from the
> >server to an external ftp site on the internet, which is also fast.
> >It's just when NAT comes into play it initially stalls for several
> >seconds, then continues very, very slow.
> >
> >For a test, I took my old 1.5Z server on the LAN as 192.168.1.70 and
> >tried ftping a file from LAN -> internet and it doesn't suffer the same
> >problem, so this is definately a Windows client issue. We have four(4)
> >Windows XP PC's on the LAN, all with XP Pro + SP2 and all of them are
> >doing this. They all have Yukon/Marvell Gigabit PCI network adapters so
> >it's definately a Windoze -> BSD issue instigated sometime between 1.6
> >and 2.0.2 as the 1.5Z server doesn't have this problem if I place it at
> >.1 and re-enable NAT.
> >
> >I'm going to keep plugging away and hope if anyone has any recollection
> >of things either in the SIP driver, NAT or ftp proxy that has changed
> >that might instigate this behavior. tcpdump's haven't been too helpful
> >but I'm still analyzing them.. may attach one if it would be helpful.
> >
>
> Might it be an MTU issue with PPPoE? Your original note mentioned DSL.
> I see you have mssclamp specified; is that actually taking effect in
> the packets sent and received? What happens if you lower that value to
> 1420?
Could it also be that the SP2 is blocking ICMP packets ?
From LAN to internet I don't think mssclamp will have any effect, but
the router will probably send ICMP too big messages back to the
clients.
--
Manuel Bouyer <bouyer@antioche.eu.org>
NetBSD: 26 ans d'experience feront toujours la difference
--