Disable udp checksums by default - problem

freebee · May 7, 2013, 2:06 PM

Good morning to all,

speedtest.net don't work anymore in my pfsense install.

I disable this commit in my pfsense :
https://github.com/pfsense/pfsense/commit/7d8b75ab01103a24ee5de63130065de8d5b3e9b4

and now works normal.

Is really necessary disable udp checksums ?. Will other services like openvpn udp tunnel be affected ?.

eri-- · May 7, 2013, 3:22 PM

How that impacts the speed test?
Normally very few services require udp checksums hence the disabling.

Maybe speed test enforces it by i am not sure on that.

freebee · May 7, 2013, 7:34 PM

The page not work. A connecting message is displayed in browser bar.
I think speed test use this in some way.

gogol · May 8, 2013, 2:19 AM

I had some questions about this change too. Why this is implemented and shouldn't it be in "System: Advanced: System Tunables"? I never see an advice to turn this off when googling for it. On the other hand Ermal is supposed to know what he is doing.

However:

[2.1-BETA1]:sysctl net.inet.udp.checksum
net.inet.udp.checksum: 1

So it is not disabled…

dhatz · May 8, 2013, 2:30 AM

What is the rationale behind the change of this kernel tunable from the FreeBSD default ?

eri-- · May 8, 2013, 7:10 AM

I reverted to old behaviour and made this a system tunable.