[AusNOG] Are there any other providers who use M2 as an upstream having issues with SSL based websites?

[Craig Meyers]

The easy solution to fix multiple connections for MTU issues, is to add
"ip tcp adjust-mss blah" if cisco kit on a 'central-ish' device, where
blah is somewhere between 536 and 1460 depnding on the solar flare count
of the day.
 
What it does is that on SYN/SYN-ACK exchange it modifies the MSS option
in the TCP packet to force both ends of the conversation to use lower
size packets. Thereby negating the deal to modify MTU on kit you may/may
not manage inbetween.
 
I know it's a hack, but hey if desperate...
 
-- Craig Meyers
 
 

________________________________

From: ausnog-bounces at lists.ausnog.net
[mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Justin Twiss
Sent: Tuesday, 9 March 2010 1:10 PM
To: ausnog at lists.ausnog.net
Subject: [AusNOG] Are there any other providers who use M2 as an
upstream having issues with SSL based websites?



 

If so, please contact me off-list - As far as I'm concerned, M2's
response of 'get your customers to change the MTU on their routers down
to 1400' really isn't acceptable and this apparently has been on-going
since Thursday.  (SSL based websites in particular, banking websites -
we've had reports of clients unable to access/successfully log in to
almost every major bank in Australia so far)

 

 

(Just glad they're not our only upstream provider!)

 

 

 

 

Justin Twiss
Hosting Manager

 

Bekkers, 884 Beaufort Street, Inglewood, WA, 6052
Telephone: +618 9422 6777
Mobile:  0405 555 044
Facsimile: +618 9272 6625
Justin.Twiss at bekkers.com.au <mailto:Justin.Twiss at bekkers.com.au>  | 
www.bekkers.com.au <http://www.bekkers.com.au> 

	
	
		

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20100312/51013c38/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 2382 bytes
Desc: image001.gif
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20100312/51013c38/attachment.gif>