Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.64.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx.pao1.isc.org", Issuer "COMODO RSA Organization Validation Secure Server CA" (not verified)) by bugs.isc.org (Postfix) with ESMTPS id AF464D78AFE for ; Mon, 4 Sep 2017 15:23:20 +0000 (UTC) Received: from prod2.absolight.net (mx3.absolight.net [IPv6:2a01:678:2:100::25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id 993EE34AE3B for ; Mon, 4 Sep 2017 15:23:18 +0000 (UTC) Received: from prod2.absolight.net (localhost [127.0.0.1]) by prod2.absolight.net (Postfix) with ESMTP id 05B0ABDD2F for ; Mon, 4 Sep 2017 17:23:17 +0200 (CEST) Received: from ogg.in.absolight.net (ogg.in.absolight.net [79.143.241.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by prod2.absolight.net (Postfix) with ESMTPSA id DA752BDD2D for ; Mon, 4 Sep 2017 17:23:16 +0200 (CEST) X-RT-Incoming-Encryption: Not encrypted Message-ID: Organization: Absolight / The FreeBSD Foundation Delivered-To: bind9-public@bugs.isc.org X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.0 From mat@FreeBSD.org Mon Sep 4 15:23:20 2017 In-Reply-To: content-type: text/plain; charset="utf-8" MIME-Version: 1.0 X-Original-To: bind9-public@bugs.isc.org Return-Path: Date: Mon, 4 Sep 2017 17:23:16 +0200 Subject: Re: [ISC-Bugs #44754] TCP_FASTOPEN, again. X-RT-Interface: Email References: <20170227041130.33E766544B34@rock.dv.isc.org> <5b169096-a6c8-a998-4fe9-d6a6168523c4@FreeBSD.org> Content-Language: fr User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 Content-Transfer-Encoding: quoted-printable From: "Mathieu Arnold" To: bind9-public@isc.org X-RT-Original-Encoding: utf-8 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mx.pao1.isc.org RT-Message-ID: Content-Length: 1111 Hi, Le 01/09/2017 à 13:01, Michał Kępień via RT a écrit : > As the original issue was reported for BIND 9.11, I prepared a patch > (attached) which applies cleanly on top of BIND 9.11.2, which is the > latest maintenance release in the 9.11 branch. > > Could you please test it and tell me whether the modified BIND behavior > it causes is acceptable to you? If it is, please do not pass the patch > on just yet; once it gets merged, I will refer you to the relevant git > commit. > > Just applying the patch and recompiling BIND should be all that is > needed for FreeBSD to be handled in a bit more friendly manner. As I > mentioned before, the new configure option (--disable-tcp-fastopen) is > only there for other systems that we currently do not know of which > might exhibit a similar behavior. I can confirm that the patch does not break BIND9 and that it still works on my workstation and does not log anything superflous that I can find. I do not have any FreeBSD with a kernel where TCP fastopen is enabled though, so I cannot really test any further. Kind regards, -- Mathieu Arnold