netdev - Re: Networking hangs when too many parallel requests are made at once

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 9 Nov 2010 17:38:38 -0500
From:	Luke Hutchison <luke.hutch@...il.com>
To:	Ben Greear <greearb@...delatech.com>
Cc:	netdev@...r.kernel.org
Subject: Re: Networking hangs when too many parallel requests are made at once

On Tue, Nov 9, 2010 at 5:29 PM, Ben Greear <greearb@...delatech.com> wrote:
> If you get all names resolved with your caching name-server, can you then
> open the browser tabs w/out problem?

This is hard to test, because to get all the same domain names
resolved for all resources on all pages, I have to successfully open
all the pages once first.  Even opening the pages a few seconds apart
seems to break things quite frequently.  And there is a period where
the connection starts acting up but is not hard locked up, and it's
hard to know at that point if it's the connection or the individual
website.  The only way I can think of of reliably triggering this 100%
of the time is to open a bunch of browser tabs all at the same time --
and that hangs the dns caching server's requests too.

> Have you tried setting all your browser tabs to simple low-bandwidth pages (no ads being
> served from various hosts, etc) to see if that works?

Not exactly, but I have one browser window with about 20 Wikipedia
articles open, and not all of them load (some get stalled until they
time out).  I think this serves the same purpose as your suggested
test, because Wikipedia doesn't draw from many external domains.

> Maybe you are just flooding the network so hard that responses are being
> dropped?

Yes, but you pointed out earlier that you routinely test with
thousands of TCP connections, and we're only talking about 20-30
browser tabs here, maybe a few thousand HTTP requests at most.  Also,
this used to work fine on old Fedora kernels and no longer works with
more recent kernels.

Thanks,
Luke
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html