Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    add new Congestion-Control Algorithms

    Scheduled Pinned Locked Moved 2.5 Development Snapshots (Retired)
    35 Posts 4 Posters 2.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mrancier
      last edited by

      It appears that most errors are being logged on your LAGG port. I am going to assume that the same errors are not showing on the stats for the LAGG members ? If that is the case, only time I've seen this behavior is when you have ports LAGGed but not all of them have actual active links, so say, you have igb0 thru igb3 in a LAGG conf, but igb1 is actually disconnected (Physically). Other than that, I am unsure what the issue might be. Sorry.

      yon 0Y 1 Reply Last reply Reply Quote 0
      • yon 0Y
        yon 0 @mrancier
        last edited by

        @mrancier said in add new Congestion-Control Algorithms:

        It appears that most errors are being logged on your LAGG port. I am going to assume that the same errors are not showing on the stats for the LAGG members ? If that is the case, only time I've seen this behavior is when you have ports LAGGed but not all of them have actual active links, so say, you have igb0 thru igb3 in a LAGG conf, but igb1 is actually disconnected (Physically). Other than that, I am unsure what the issue might be. Sorry.

        thanks, What should I check or how to determine the problem? i am using two intel I350-T2 NIC. one nic two interface for pppoe wan, and one for lagged to LAN switch.

        igb0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=e500bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ether a0:36:9f:83:90:40
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        igb1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=e500bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ether a0:36:9f:83:90:40
        hwaddr a0:36:9f:83:90:41
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        igb2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1508
        options=e520bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ether 24:fd:52:3f:40:56
        hwaddr a0:36:9f:83:8b:5c
        inet6 fe80::26fd:52ff:fe3f:4656%igb2 prefixlen 64 scopeid 0x3
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        igb3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1508
        options=e500bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ether 44:6e:e5:1d:b0:a7
        hwaddr a0:36:9f:83:8b:5d
        inet6 fe80::466e:e5ff:fe1d:b4a7%igb3 prefixlen 64 scopeid 0x4
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        re0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
        ether bc:5f:f4:7b:29:6d
        media: Ethernet autoselect (none)
        status: no carrier
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        enc0: flags=0<> metric 0 mtu 1536
        groups: enc
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7
        inet 127.0.0.1 netmask 0xff000000
        groups: lo
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        pfsync0: flags=0<> metric 0 mtu 1500
        syncpeer: 224.0.0.240 maxupd: 128 defer: on
        syncok: 1
        groups: pfsync
        pflog0: flags=100<PROMISC> metric 0 mtu 33160
        groups: pflog
        lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=e500bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ether a0:36:9f:83:90:40
        inet6 fe80::a236:9fff:fe83:9940%lagg0 prefixlen 64 scopeid 0xa
        inet6 2602:fed5:7021::face prefixlen 48
        inet 185.230.191.1 netmask 0xffffffe0 broadcast 185.230.191.31
        inet 185.230.191.2 netmask 0xffffff00 broadcast 185.230.191.255
        laggproto lacp lagghash l2,l3,l4
        laggport: igb0 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
        laggport: igb1 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
        groups: lagg
        media: Ethernet autoselect
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

        LADVD Devices
        Capability Codes:
        r - Repeater, B - Bridge, H - Host, R - Router, S - Switch,
        W - WLAN Access Point, C - DOCSIS Device, T - Telephone, O - Other

        Device ID Local Intf Proto Hold-time Capability Port ID
        H3C igb1 LLDP 119 BR Gi1/0/5 In
        H3C igb0 LLDP 119 BR Gi1/0/7 In
        LADVD Detailed decode
        Chassis id: 04:d7:a5:db:db:16
        Port id: 04:d7:a5:db:db:1c
        Time remaining: 119 seconds
        Port Description: GigabitEthernet1/0/5 Interface
        System Name: H3C
        System Description:
        H3C Switch S1850-10P Software Version 5.20.99, Release 1102
        Copyright(c)2004-2017 New H3C Technologies Co., Ltd. All rights reserved.
        System Capabilities: BR
        Enabled Capabilities: BR
        Management Address IPv4: 192.168.0.233
        Port VLAN ID: 1

        Chassis id: 04:d7:a5:db:db:16
        Port id: 04:d7:a5:db:db:1e
        Time remaining: 119 seconds
        Port Description: GigabitEthernet1/0/7 Interface
        System Name: H3C
        System Description:
        H3C Switch S1850-10P Software Version 5.20.99, Release 1102
        Copyright(c)2004-2017 New H3C Technologies Co., Ltd. All rights reserved.
        System Capabilities: BR
        Enabled Capabilities: BR
        Management Address IPv4: 192.168.0.233
        Port VLAN ID: 1

        1 Reply Last reply Reply Quote 0
        • yon 0Y
          yon 0
          last edited by yon 0

          i try deleted lagg, change to normal lan interface.

          use netstat -in show all normal.

          but netstat -s still show 2929 packets not forwardable. so the route in still show packet loss.
          ip:
          110688 total packets received
          0 bad header checksums
          0 with size smaller than minimum
          0 with data size < data length
          0 with ip length > max ip packet size
          0 with header length < data size
          0 with data length < header length
          0 with bad options
          0 with incorrect version number
          0 fragments received
          0 fragments dropped (dup or out of space)
          0 fragments dropped after timeout
          0 packets reassembled ok
          62783 packets for this host
          0 packets for unknown/unsupported protocol
          35269 packets forwarded (0 packets fast forwarded)
          2929 packets not forwardable
          0 packets received for unknown multicast group
          0 redirects sent
          67139 packets sent from this host
          0 packets sent with fabricated ip header
          0 output packets dropped due to no bufs, etc.
          2742 output packets discarded due to no route
          0 output datagrams fragmented
          0 fragments created
          0 datagrams that can't be fragmented
          0 tunneling packets that can't find gif
          0 datagrams with bad address in header

          tcp:
          29618 packets sent
          1843 data packets (2075087 bytes)
          1 data packet (126 bytes) retransmitted
          2 data packets unnecessarily retransmitted
          0 resends initiated by MTU discovery
          27749 ack-only packets (0 delayed)
          0 URG only packets
          0 window probe packets
          10 window update packets
          16 control packets
          28200 packets received
          433 acks (for 2074414 bytes)
          49 duplicate acks
          0 acks for unsent data
          22516 packets (27777099 bytes) received in-sequence
          11 completely duplicate packets (8678 bytes)
          0 old duplicate packets
          0 packets with some dup. data (0 bytes duped)
          5214 out-of-order packets (6964840 bytes)
          0 packets (0 bytes) of data after window
          0 window probes
          8 window update packets
          2 packets received after close
          0 discarded for bad checksums
          0 discarded for bad header offset fields
          0 discarded because packet too short
          0 discarded due to memory problems
          10 connection requests
          3 connection accepts
          1 bad connection attempt
          0 listen queue overflows
          0 ignored RSTs in the windows
          12 connections established (including accepts)
          0 times used RTT from hostcache
          0 times used RTT variance from hostcache
          0 times used slow-start threshold from hostcache
          46 connections closed (including 3 drops)
          0 connections updated cached RTT on close
          0 connections updated cached RTT variance on close
          0 connections updated cached ssthresh on close
          0 embryonic connections dropped
          372 segments updated rtt (of 379 attempts)
          4 retransmit timeouts
          0 connections dropped by rexmit timeout
          0 persist timeouts
          0 connections dropped by persist timeout
          0 Connections (fin_wait_2) dropped because of timeout
          29 keepalive timeouts
          29 keepalive probes sent
          0 connections dropped by keepalive
          350 correct ACK header predictions
          22475 correct data packet header predictions
          3 syncache entries added
          0 retransmitted
          0 dupsyn
          0 dropped
          3 completed
          0 bucket overflow
          0 cache overflow
          0 reset
          0 stale
          0 aborted
          0 badack
          0 unreach
          0 zone failures
          1 cookie sent
          0 cookies received
          0 hostcache entries added
          0 bucket overflow
          0 SACK recovery episodes
          0 segment rexmits in SACK recovery episodes
          0 byte rexmits in SACK recovery episodes
          0 SACK options (SACK blocks) received
          4748 SACK options (SACK blocks) sent
          0 SACK scoreboard overflow
          0 packets with ECN CE bit set
          26630 packets with ECN ECT(0) bit set
          0 packets with ECN ECT(1) bit set
          9 successful ECN handshakes
          1 time ECN reduced the congestion window
          0 packets with matching signature received
          0 packets with bad signature received
          0 times failed to make signature due to no SA
          0 times unexpected signature received
          0 times no signature provided by segment
          0 Path MTU discovery black hole detection activations
          0 Path MTU discovery black hole detection min MSS activations
          0 Path MTU discovery black hole detection failures
          TCP connection count by state:
          0 connections in CLOSED state
          15 connections in LISTEN state
          0 connections in SYN_SENT state
          0 connections in SYN_RCVD state
          6 connections in ESTABLISHED state
          0 connections in CLOSE_WAIT state
          0 connections in FIN_WAIT_1 state
          0 connections in CLOSING state
          0 connections in LAST_ACK state
          0 connections in FIN_WAIT_2 state
          0 connections in TIME_WAIT state
          udp:
          38109 datagrams received
          0 with incomplete header
          0 with bad data length field
          0 with bad checksum
          0 with no checksum
          26 dropped due to no socket
          458 broadcast/multicast datagrams undelivered
          0 dropped due to full socket buffers
          0 not for hashed pcb
          37625 delivered
          37845 datagrams output
          0 times multicast source filter matched

          1 Reply Last reply Reply Quote 0
          • M
            mrancier
            last edited by

            Typically when you see counters for packets not forwardable in netstat, it is because you are missing a route to localhost.

            For reference :

            https://docs.oracle.com/cd/E19253-01/816-4555/ppp.trouble-108/index.html

            yon 0Y 1 Reply Last reply Reply Quote 1
            • yon 0Y
              yon 0 @mrancier
              last edited by

              @mrancier said in add new Congestion-Control Algorithms:

              Typically when you see counters for packets not forwardable in netstat, it is because you are missing a route to localhost

              What rules or routes do I need to add?

              M 1 Reply Last reply Reply Quote 0
              • M
                mrancier @yon 0
                last edited by

                @yon-0 Hard to say without a visual, but I will ask this : If the issue does happen on 2.4.4p3, there is a possibility, albeit small, that there may be a bug in the PPPoE client.

                yon 0Y 1 Reply Last reply Reply Quote 0
                • yon 0Y
                  yon 0 @mrancier
                  last edited by

                  @mrancier i am using pf2.5 newest version

                  1 Reply Last reply Reply Quote 0
                  • yon 0Y
                    yon 0
                    last edited by

                    ip6:
                    1301746 total packets received
                    0 with size smaller than minimum
                    0 with data size < data length
                    0 with bad options
                    18 with incorrect version number
                    0 fragments received
                    0 fragments dropped (dup or out of space)
                    0 fragments dropped after timeout
                    0 fragments that exceeded limit
                    0 packets reassembled ok
                    416553 packets for this host
                    855286 packets forwarded
                    2615 packets not forwardable
                    0 redirects sent
                    500503 packets sent from this host
                    0 packets sent with fabricated ip header
                    0 output packets dropped due to no bufs, etc.
                    1225 output packets discarded due to no route
                    0 output datagrams fragmented
                    0 fragments created
                    0 datagrams that can't be fragmented
                    0 packets that violated scope rules
                    325 multicast packets which we don't join
                    Input histogram:
                    hop by hop: 235
                    TCP: 568585
                    UDP: 597299
                    ICMP6: 135609
                    Mbuf statistics:
                    557747 one mbuf
                    two or more mbuf:
                    lo0= 2398
                    741601 one ext mbuf
                    0 two or more ext mbuf
                    0 packets whose headers are not contiguous
                    0 tunneling packets that can't find gif
                    0 packets discarded because of too many headers
                    450 failures of source address selection
                    source addresses on an outgoing I/F
                    8986 link-locals
                    11506 globals
                    source addresses on a non-outgoing I/F
                    2 globals
                    450 addresses scope=0xf
                    source addresses of same scope
                    8984 link-locals
                    11508 globals
                    source addresses of a different scope
                    2 link-locals
                    Source addresses selection rule applied:
                    20494 first candidate
                    450 same address
                    8290 appropriate scope
                    3216 outgoing interface
                    885 longest match

                    1 Reply Last reply Reply Quote 0
                    • yon 0Y
                      yon 0
                      last edited by

                      @yon-0 said in add new Congestion-Control Algorithms:

                      packets not forwardable

                      netstat -m
                      40123/4667/44790 mbufs in use (current/cache/total)
                      11125/2311/13436/1000000 mbuf clusters in use (current/cache/total/max)
                      102/2175 mbuf+clusters out of packet secondary zone in use (current/cache)
                      2/206/208/524288 4k (page size) jumbo clusters in use (current/cache/total/max)
                      0/0/0/524288 9k jumbo clusters in use (current/cache/total/max)
                      0/0/0/124480 16k jumbo clusters in use (current/cache/total/max)
                      32295K/6612K/38908K bytes allocated to network (current/cache/total)
                      0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
                      0/0/0 requests for mbufs delayed (mbufs/clusters/mbuf+clusters)
                      0/0/0 requests for jumbo clusters delayed (4k/9k/16k)
                      0/0/0 requests for jumbo clusters denied (4k/9k/16k)
                      0 sendfile syscalls
                      0 sendfile syscalls completed without I/O request
                      0 requests for I/O initiated by sendfile
                      0 pages read by sendfile as part of a request
                      0 pages were valid at time of a sendfile request
                      0 pages were valid and substituted to bogus page
                      0 pages were requested for read ahead by applications
                      0 pages were read ahead by sendfile
                      0 times sendfile encountered an already busy page
                      0 requests for sfbufs denied
                      0 requests for sfbufs delayed

                      1 Reply Last reply Reply Quote 0
                      • yon 0Y
                        yon 0 @mrancier
                        last edited by

                        @mrancier said in add new Congestion-Control Algorithms:

                        Cc_cdg.ko depends on h_ertt, so both modules need to be there, otherwise cdg will fail kload.

                        what's CUBIC need load modules?

                        1 Reply Last reply Reply Quote 0
                        • M
                          mrancier
                          last edited by

                          cc_cubic.ko is the name.

                          yon 0Y 1 Reply Last reply Reply Quote 0
                          • yon 0Y
                            yon 0
                            last edited by

                            cubic and cdg still unable to solve the problem of no speed caused by carrier network packet loss. There is a need to increase competitiveness and prevent the impact of ISP QOS on us.

                            1 Reply Last reply Reply Quote 1
                            • yon 0Y
                              yon 0 @mrancier
                              last edited by

                              @mrancier

                              now the pf 2.5 version not work for this .

                              M 1 Reply Last reply Reply Quote 0
                              • yon 0Y
                                yon 0
                                last edited by

                                why pfsense v2.5 cant load the freebsd v12.1 cc_htcp so on?

                                kldload h_ertt
                                kldload: an error occurred while loading module h_ertt. Please check dmesg(8) for more details.
                                [2.5.0-DEVELOPMENT][admin@]/root: kldload cc_htcp
                                kldload: an error occurred while loading module cc_htcp. Please check dmesg(8) for more details
                                
                                1 Reply Last reply Reply Quote 0
                                • yon 0Y
                                  yon 0
                                  last edited by yon 0

                                  pf 2.4.5 -p1 still work, pf2.5 not work, added cdg

                                  kldstat
                                  Id Refs Address            Size     Name
                                   1   18 0xffffffff80200000 37191d8  kernel
                                   2    1 0xffffffff83a21000 10c0     cpuctl.ko
                                   3    1 0xffffffff83a23000 7028     aesni.ko
                                   4    1 0xffffffff83a2b000 32d8     cryptodev.ko
                                   5    1 0xffffffff83a2f000 1580     amdtemp.ko
                                   6    1 0xffffffff83a31000 848      amdsmn.ko
                                   7    2 0xffffffff83a32000 850      h_ertt.ko
                                   8    1 0xffffffff83a33000 1dc4     cc_cdg.ko
                                  
                                  
                                  NollipfSenseN 1 Reply Last reply Reply Quote 0
                                  • NollipfSenseN
                                    NollipfSense @yon 0
                                    last edited by

                                    @yon-0 Liked your consistent testing ... good job!

                                    pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                    pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      mrancier @yon 0
                                      last edited by mrancier

                                      @yon-0 Sorry about the lack of response. I was unaware you'd replied. Unfortunately, I've moved on to a competing product which is already on the freebsd 12.1 release in production and has ZERO issues with any and all mods to the underlying OS.

                                      yon 0Y 1 Reply Last reply Reply Quote 0
                                      • yon 0Y
                                        yon 0 @mrancier
                                        last edited by yon 0

                                        @mrancier said in add new Congestion-Control Algorithms:

                                        @yon-0 Sorry about the lack of response. I was unaware you'd replied. Unfortunately, I've moved on to a competing product which is already on the freebsd 12.1 release in production and has ZERO issues with any and all mods to the underlying OS.

                                        what is your using system now? i have try opnsense, But I am not very familiar with it, and there are some usage problems.

                                        Yes, there are a lot of system problems here. Many of them are too late to report, and there are still many problems that have not been reported. It's just that I have been using it and the operation is more familiar.

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mrancier @yon 0
                                          last edited by

                                          @yon-0 Opnsense 20.7.1. Modules are readily available in the OS and load without issue. I have used htcp, cdg and cubic. Currently on Cubic and works quite well. Also, seems to be better at respecting loader.conf and loader.conf.local mods. No hardcoded kernel patches that I am aware of anyway.

                                          yon 0Y 1 Reply Last reply Reply Quote 0
                                          • yon 0Y
                                            yon 0 @mrancier
                                            last edited by

                                            @mrancier said in add new Congestion-Control Algorithms:

                                            @yon-0 Opnsense 20.7.1. Modules are readily available in the OS and load without issue. I have used htcp, cdg and cubic. Currently on Cubic and works quite well. Also, seems to be better at respecting loader.conf and loader.conf.local mods. No hardcoded kernel patches that I am aware of anyway.

                                            Have a chance to learn from you. 👼

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.