Hung connection over Juniper Tunnel

[Jason Benguerel]

I have disabled TCP Window scaling on both the client and server. I  
also confirmed that there are no MTU issues using ping (with the no  
fragment flag and full payload.) There are reports of Juniper  
firewalls causing similar issues, but I have applied the supposed  
workaround of disabling TCP sequence checking (which they claim stops  
the window scaling issue) and still have no results.

The sshd server is still replying with:

debug1: server_input_channel_open: ctype session rchan 0 win 1048576  
max 16384

Which looks to me as if it is still trying to set a variable TCP  
window despite turning the feature off via:

echo 0 > /proc/sys/net/ipv4/tcp_window_scaling

Is there some other way to disable this in ssh/sshd?

Jason


On Feb 6, 2009, at 3:52 PM, maf at appgate.com wrote:

> TCP window scaling is also a possibility. At least that is an issue we
> have encountered a number of times.
>
> 	/MaF
> -- 
> Martin Forssen <maf at appgate.com>              Development Manager
> Phone: +46 31 7744361                         AppGate Network  
> Security AB
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev