[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Note: states with asymmetric routing

  Just note.
  Stateful inspection on gateway can hamper tcp-connections, when
inbound or outbound packets goes another route (i.e. when one of
directions not goes thru gateway).
  Connection works fine on low rate, but fast transfers stops on
each 64K (because suddenly PF stops passing packets).
  I guess, it is not bug, just some feature (like some
tcp-window-related state protection). So think, is there reasons to
correct this PF behavior.
Thank you
Ilya A. Kovalenko