First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Possible MSS Issue

I have configured PE Router with MSS of 1410 and am testing. Some websites are loading fine and some are not. As a relevant test site to show th4e data with, I chose www.bbc.co.uk

The issue with the website is that the Writing appears immediately, as it should, but then I wait for 15 - 20 seconds for all images to appear at the same time. On other websites this can be even slower (even with basic connection). To make it clearer, the websites have also been tested when cached, with the same problem.

Here is the initial SYN - SYN/ACK agreement for the MSS:

   6    2.382020    192.168.1.11    212.58.244.70   TCP 66  50783 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1
  54    2.420046    212.58.244.70   192.168.1.11    TCP 58  443 → 50783 [SYN, ACK] Seq=0 Ack=1 Win=0 Len=0 MSS=1410

This shows in the SYN/ACK the MSS of 1410, which is fantastic. Exactly as configured. From my understanding this is a one time negotiation and this MSS should be used throughout the rest of the connection communication.

So, why is it that the text appears immediately, but I am having to always wait for the images?

Has anyone seen this before?

updated 2018-07-16 14:07:05 +0000
This post is a wiki. Anyone with karma >750 is welcome to improve it.
edit flag offensive 0 remove flag close merge delete

Comments

That is a question that would require having all packets for the whole page loading process, including the pictures. The handshake is nice, but to see where the delays are the rest of the packets need to be looked at. Can you share a PCAP?

Jasper's avatar Jasper (2018-07-16 14:56:01 +0000) edit

I can't load a PCAP as I apparently don't have enough points.

adgwytc's avatar adgwytc (2018-07-16 15:04:48 +0000) edit

Okay, can you put it on a file hoster, or CloudShark, and post the link? Make sure that it's visible to the public (CloudShark makes uploaded PCAPs private by default IIRC)

Jasper's avatar Jasper (2018-07-16 15:10:14 +0000) edit

Try this: https://www.cloudshark.org/captures/b...

ip.addr==212.58.244.70 as the filter for the website address

adgwytc's avatar adgwytc (2018-07-16 15:17:19 +0000) edit

It requires a login, so I guess it's still set to private ;-)

Jasper's avatar Jasper (2018-07-16 15:53:34 +0000) edit
add a comment see more comments

1 Answer

1

Your problem seems that none of your IPV6 SYN packets get through. Is your router configured to route IPV6 ?

Regards Matthias

mrEEde's avatar
4k
mrEEde
answered 2018-07-16 19:44:02 +0000
edit flag offensive 0 remove flag delete link

Comments

Yes, the routers that I have configured are for dual stack and we are advertsing and receiving IPv6 via BGP.

Why would that cause an issue with the IPv4 though and the loading of the images?

IPv6 is working well to IPv6 addressing but I am contacting via IPv4, or at least I hope I am....

I will try a different CPE tomorrow and see what the result is.

adgwytc's avatar adgwytc (2018-07-16 20:16:42 +0000) edit

The reason you see SYN packets going out via IPV6 is because some of the 'bbc' host names are successfully resolved to AAAA records: e3891.dscf.akamaiedge.net 2a02:26f0:c800:28c::f33 I guess this is where your pictures are located ...

mrEEde's avatar mrEEde (2018-07-17 04:41:53 +0000) edit

Thank you for the answer.

Strangely, I now have IPv6 working and can ping and traceroute through the CPE to the IPv6 address stated and now I get no images at all on the bbc website.

Thanks

adgwytc's avatar adgwytc (2018-07-17 07:55:00 +0000) edit

Okay. I have narrowed it down. I turned off IPv6 on the CPE and everything worked perfectly. So, it is definitely an IPv6 issue.

adgwytc's avatar adgwytc (2018-07-17 08:48:51 +0000) edit

@adgwytc I have converted your answer to comment. As it is more a comment.

Christian_R's avatar Christian_R (2018-07-17 08:55:04 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer