Sponsored Content
Operating Systems Solaris Solaris 11 Express NAT performance issues Post 302511913 by vectox on Friday 8th of April 2011 08:02:19 PM
Old 04-08-2011
Found the problem...working on the solution

So I did some packet sniffing and determined that the problem is IP fragmentation. Here is my setup

<DSL_Modem>-<Linux Router>-<switch>-<wifi>-<macbook>
- this setup works fine, with no fragmentation or performance issues


<DSL_Modem>-<Sol 11 Router>-<switch>-<wifi>-<macbook>
- this setup has major packet fragmentation

<DSL_Modem>-<Sol 11 Router>-<switch>-<macbook>
- this setup has major packet fragmentation

I played with various MTU settings on the solaris servers internal NIC, but it made no difference so I tried a couple of things with the client box.

I determined the max MTU I could send from my macbook as 1464 without getting fragmentation by using:
ping -D -s 1464 <any internet ip>

Once I manually set my MTU down to 1464 instead of the default 1500 web pages are loading normally. So here's the problem...why do I have to manually set the MTU on the client macbook when I have my solaris server setup as a router. Is there some network related tuning I can perform on the server that will address these issues?

---------- Post updated at 08:02 PM ---------- Previous update was at 12:31 AM ----------

I've posted this problem in the network area because of the nature of the problem once I broke it down to fragments

Solaris 11 Express NAT/Router IP Fragments
 

8 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Installing Solaris behind a windows NAT...

Greetings, and thank you for your time. I am cracking the whip to self-teach myself Unix because I think it will be the best platform for me to really open my mind and be creative. Sadly I lack anyone experienced in Unix to nag with questions, so you will be seeing a lot of me here I am sure... (4 Replies)
Discussion started by: Dustin
4 Replies

2. IP Networking

Destination NAT using ipnat in Solaris 8

Hello People, Please can someone help me with destination IP address NAT and Port transalation using ipnat in Solaris 8. Scenario: Box A(192.168.100.1/24) and Box B (192.168.100.50/24) are connected phyically and logically(vlan) on the same network switch. Box A hosts an... (0 Replies)
Discussion started by: mandarawachat
0 Replies

3. Solaris

raidctl performance issues

using the internal 2 drives mirror was created using raidctl on 100's of our servers . sometime when one drive fails we dont face any issue & we replace the drive with out any problem . but sometimes when one drive fails , system becomes unresponsive and doesnot allow us to login , the only way to... (1 Reply)
Discussion started by: skamal4u
1 Replies

4. UNIX for Dummies Questions & Answers

Awk Performance Issues

Hi All, I'm facing an issue in my awk script. The script is processing a large text file having the details of a number of persons, each person's details being written from 100 to 250 tags as given below: 100 START| 101klklk| ... 245 opr| 246 55| 250 END| 100 START| ... 245 pp| 246... (4 Replies)
Discussion started by: pgp_acc1
4 Replies

5. IP Networking

Solaris 11 Express NAT/Router IP Fragments

Upon replacing my linux router/server with a Solaris one I've noticed very poor network performance. The server itself has no issues connecting to the net, but clients using the server as a router are getting a lot of IP fragments as indicated from some packet sniffing I conducted. Here was my... (3 Replies)
Discussion started by: vectox
3 Replies

6. UNIX for Advanced & Expert Users

ipf/ipnat NAT/port forward issues

I've been going crazy trying to get this working. Here's the situation: we have a Solaris 10 box that connects an internal network to an external network. We're using ipf/ipnat on it. We've added a couple of new boxes to the internal network (192.168.1.100, .101) and want to be able to get to port... (1 Reply)
Discussion started by: spakov
1 Replies

7. Solaris

Getcwd performance issues

Hello everyone, recently we have been experiencing performance issues with chmod. We managed to narrow it down to getcwd. The following folder exists: /Folder1/subfol1/subfol2/subfol3 cd /Folder1/subfol1/subfol2/subfol3 truss -D pwd 2>&1 | grep getcwd 0.0001... (4 Replies)
Discussion started by: KotekBury
4 Replies

8. IP Networking

Debugging NAT / prerouting issues (iptables)

Hello, Recently I discovered an issue with packet routing in the latest Android releases (4.4+ KitKat & Lollipop). It seems that the problem Android specific, but essentially it comes from the Linux kernel. I already filed a bug report to Google. You can see the details by searching for... (0 Replies)
Discussion started by: Vladislav
0 Replies
dhcrelay(8)						      System Manager's Manual						       dhcrelay(8)

NAME
dhcrelay - Dynamic Host Configuration Protocol Relay Agent SYNOPSIS
dhcrelay [ -p port ] [ -d ] [ -q ] [ -i if0 [ ... -i ifN ] ] [ -a ] [ -c count ] [ -A length ] [ -D ] [ -m append | replace | forward | discard ] server0 [ ...serverN ] DESCRIPTION
The Internet Systems Consortium DHCP Relay Agent, dhcrelay, provides a means for relaying DHCP and BOOTP requests from a subnet to which no DHCP server is directly connected to one or more DHCP servers on other subnets. SYSTEM REQUIREMENTS
You must have the Berkeley Packet Filter (bpf) configured in your NetBSD kernel. OPERATION
The DHCP Relay Agent listens for DHCP and BOOTP queries and responses. When a query is received from a client, dhcrelay forwards it to the list of DHCP servers specified on the command line. When a reply is received from a server, it is broadcast or unicast (according to the relay agent's ability or the client's request) on the network from which the original request came. COMMAND LINE
The names of the network interfaces that dhcrelay should attempt to configure may be specified on the command line using the -i option. If no interface names are specified on the command line dhcrelay will identify all network interfaces, elimininating non-broadcast interfaces if possible, and attempt to configure each interface. The -i flag can be used to specify the network interfaces on which the relay agent should listen. In general, it must listen not only on those network interfaces to which clients are attached, but also on those network interfaces to which the server (or the router that reaches the server) is attached. However, in some cases it may be necessary to exclude some networks; in this case, you must list all those network interfaces that should not be excluded using the -i flag. In some cases it is helpful for the relay agent to forward requests from networks on which a DHCP server is running to other DHCP servers. This would be the case if two DHCP servers on different networks were being used to provide backup service for each other's networks. If dhcrelay should listen and transmit on a port other than the standard (port 67), the -p flag may used. It should be followed by the udp port number that dhcrelay should use. This is mostly useful for debugging purposes. Dhcrelay will normally run in the foreground until it has configured an interface, and then will revert to running in the background. To force dhcrelay to always run as a foreground process, the -d flag should be specified. This is useful when running dhcrelay under a debug- ger, or when running it out of inittab on System V systems. Dhcrelay will normally print its network configuration on startup. This can be unhelpful in a system startup script - to disable this be- haviour, specify the -q flag. RELAY AGENT INFORMATION OPTIONS
If the -a flag is set the relay agent will append an agent option field to each request before forwarding it to the server. Agent option fields in responses sent from servers to clients will be stripped before forwarding such responses back to the client. The agent option field will contain two agent options: the Circuit ID suboption and the Remote ID suboption. Currently, the Circuit ID will be the printable name of the interface on which the client request was received. The client supports inclusion of a Remote ID subop- tion as well, but this is not used by default. When forwarding packets, dhcrelay discards packets which have reached a hop count of 10. If a lower or higher threshold (up to 255) is desired, depending on your environment, you can specify the max hop count threshold as a number following the -c option. Relay Agent options are added to a DHCP packet without the knowledge of the DHCP client. The client may have filled the DHCP packet option buffer completely, in which case there theoretically isn't any space to add Agent options. However, the DHCP server may be able to handle a much larger packet than most DHCP clients would send. The current Agent Options draft requires that the relay agent use a maxi- mum packet size of 576 bytes. It is recommended that with the Internet Systems Consortium DHCP server, the maximum packet size be set to about 1400, allowing plenty of extra space in which the relay agent can put the agent option field, while still fitting into the Ethernet MTU size. This can be done by specifying the -A flag, followed by the desired maximum packet size (e.g., 1400). Note that this is reasonably safe to do even if the MTU between the server and the client is less than 1500, as long as the hosts on which the server and client are running support IP fragmentation (and they should). With some knowledge as to how large the agent options might get in a particular configuration, this parameter can be tuned as finely as necessary. It is possible for a relay agent to receive a packet which already contains an agent option field. If this packet does not have a giaddr set, the standard requires that the packet be discarded. If giaddr is set, the server may handle the situation in one of four ways: it may append its own set of relay options to the packet, leav- ing the supplied option field intact. It may replace the existing agent option field. It may forward the packet unchanged. Or, it may discard it. Which of these behaviours is followed by the Internet Systems Consortium DHCP Relay Agent may be configured with the -m flag, followed by one of the four keywords specified in italics above. When the relay agent receives a reply from a server that it's supposed to forward to a client, and Relay Agent Information option process- ing is enabled, the relay agent scans the packet for Relay Agent Information options and removes them. As it's scanning, if it finds a Relay Agent Information option field containing an Agent ID suboption that matches one of its IP addresses, that option is recognized as its own. If no such option is found, the relay agent can either drop the packet, or relay it anyway. If the -D option is specified, all packets that don't contain a match will be dropped. SPECIFYING DHCP SERVERS
The name or IP address of at least one DHCP server to which DHCP and BOOTP requests should be relayed must be specified on the command line. SEE ALSO
dhclient(8), dhcpd(8), RFC2132, RFC2131, draft-ietf-dhc-agent-options-03.txt. BUGS
It should be possible for the user to define the Circuit ID and Remote ID values on a per-interface basis. The relay agent should not relay packets received on a physical network to DHCP servers on the same physical network - if they do, the server will receive duplicate packets. In order to fix this, however, the relay agent needs to be able to learn about the network topol- ogy, which requires that it have a configuration file. AUTHOR
dhcrelay(8) has been written for Internet Systems Consortium by Ted Lemon in cooperation with Vixie Enterprises. To learn more about Internet Systems Consortium, see http://www.isc.org/isc. To learn more about Vixie Enterprises, see http://www.vix.com. dhcrelay(8)
All times are GMT -4. The time now is 09:26 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy