[98368] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: large organization nameservers sending icmp packets to dns servers.

daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Aug 6 13:48:16 2007

To: "Steven M. Bellovin" <smb@cs.columbia.edu>
Cc: Drew Weaver <drew.weaver@thenap.com>,
        "'nanog@merit.edu'" <nanog@merit.edu>
In-Reply-To: Your message of "Mon, 06 Aug 2007 12:13:03 EDT."
             <20070806161304.0BABB7660C3@berkshire.machshav.com>
From: Valdis.Kletnieks@vt.edu
Date: Mon, 06 Aug 2007 13:37:06 -0400
Errors-To: owner-nanog@merit.edu


--==_Exmh_1186421826_9507P
Content-Type: text/plain; charset=us-ascii

On Mon, 06 Aug 2007 12:13:03 EDT, "Steven M. Bellovin" said:

> > 1) ICMP is handled at the same rate as TCP/UDP packets in all the
> > routers involved (so there's no danger of declaring a path "slow"
> > when it really isn't, just becase a router slow-pathed ICMP).
> 
> This is aimed at hosts, not routers, right?  As far as I know, routers
> don't slow-path forwarded ICMP.  Hosts will probably reply to ICMP from
> their kernel, so it's a faster response than a user-level DNS reply.

Well, they don't *directly* slow-path it.  But we've seen *plenty* of cases
of "multi-hop performance as indicated by ICMP Echo Request/Reply doesn't at
all match throughput/latency as indicated by TCP-level stats" mentioned on
this list...

--==_Exmh_1186421826_9507P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFGt1xCcC3lWbTT17ARApI8AJ4hbSRFsP8RaGa0A3UWY42t618gSwCgpOCl
U2yhYdDJnUB4LLhukXTL5sc=
=PJn8
-----END PGP SIGNATURE-----

--==_Exmh_1186421826_9507P--


home help back first fref pref prev next nref lref last post