Re: Question about nf_conntrack_proto for IPsec

2019-07-09 Thread Naruto Nguyen
Hi Florian, Thanks a lot for your reply. Could you please elaborate more on how generic tracker tracks ESP connection? Brs, Bao On Wed, 26 Jun 2019 at 18:13, Florian Westphal wrote: > > Naruto Nguyen wrote: > > In linux/latest/source/net/netfilter/ folder, I only

Question about nf_conntrack_proto for IPsec

2019-06-26 Thread Naruto Nguyen
Hi everyone, In linux/latest/source/net/netfilter/ folder, I only see we have nf_conntrack_proto_tcp.c, nf_conntrack_proto_udp.c and some other conntrack implementations for other protocols but I do not see nf_conntrack_proto for IPsec, so does it mean connection tracking cannot track ESP or AH pr

Significant capacity drop on loopback interface

2018-05-10 Thread Naruto Nguyen
Hello everyone, Recently, I used netperf to test the TCP performance on loopback interface on my 2 nodes, one is installed kernel 4.4.103 and the other is 3.12.61 netperf -l 100 -t TCP_RR netperf -l 100 -t TCP_RR -- -D In both cases, I see that the throughput on 4.4.103 is about just 1/2 in comp

SO_TCP_NODELAY implementation in TCP stack

2018-03-31 Thread Naruto Nguyen
Hello everyone, As I know we have a socket option SO_TCP_NODELAY to disable Nagle Algorithm, and I found it is implemented in TCP/IP stack at https://elixir.bootlin.com/linux/v4.4.90/source/net/ipv4/tcp.c#L2401 . However, I do not know where the source code the Nagle Algorithm is implemented in ke