if_pppoe problems with php-fpm causing loops. (resolved)
-
@chrcoluk Yes, I have 3 VIP's setup. Also not had any drops for a good few weeks, but could just be that both AAISP and City Fibre have been stable.
-
@ajtuk Yep I have not had any outages either, I updated to 2.8.1 then decided to test those commands as it was something I wanted to do to further diagnose.
I think we may have found the reason then. Hopefully Netgate can repeat this.
-
Yep. So to be clear you have IPAlias VIPs on the PPPoE interface?
-
@stephenw10 Yep IP alias for me.
-
@stephenw10 Hi again, is there any news on this? like has it being tested as confirmed or anything like that yet? Thanks.
-
Sorry not yet. Let me see what I can do....
-
@w0w said in if_pppoe problems with php-fpm causing loops. (resolved):
@chrcoluk said in if_pppoe problems with php-fpm causing loops. (resolved):
issue related to fragments
What issue?
A little bit more info now as to why if_pppoe fixed it.
I think mpd tcpmssfix wasnt working properly, if_pppoe uses scrub instead for same feature. I did a little bit of testing with iperf and that reports a weird mss value when using mpd combined with tcpmssfix.
I havent however confirmed on the cloudflare icmpcheck.popcount test yet as site seems to be down now.
-
Hmm, interesting. So with mpd5 you ended up with both mssfix methods and that created an unknown situation?
-
Ok we replicated this VIP loop scenario and are working on it....
-
Ok I think we have a fix for this, we are testing it internally. It should be in the next 25.11 build.
-
@stephenw10 said in if_pppoe problems with php-fpm causing loops. (resolved):
Ok I think we have a fix for this, we are testing it internally. It should be in the next 25.11 build.
BTW. Anything new in this matter?:
https://redmine.pfsense.org/issues/16229
-
Not yet. The issue is more complex that initially thought. Enabling the pppoe encapsulation there prevents it crashing out but it never matches any traffic.
-
@stephenw10 said in if_pppoe problems with php-fpm causing loops. (resolved):
Not yet. The issue is more complex that initially thought. Enabling the pppoe encapsulation there prevents it crashing out but it never matches any traffic.
Thanks for the Info & explanation!
