From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from bifrost.lang.hm (mail.lang.hm [64.81.33.126]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id 8933921F21F; Mon, 2 Mar 2015 12:40:00 -0800 (PST) Received: from asgard.lang.hm (asgard.lang.hm [10.0.0.100]) by bifrost.lang.hm (8.13.4/8.13.4/Debian-3) with ESMTP id t22KdgUB027289; Mon, 2 Mar 2015 12:39:42 -0800 Date: Mon, 2 Mar 2015 12:39:42 -0800 (PST) From: David Lang X-X-Sender: dlang@asgard.lang.hm To: Dave Dolson In-Reply-To: Message-ID: References: User-Agent: Alpine 2.02 (DEB 1266 2009-07-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: Wes Felter , "aqm@ietf.org" , "cerowrt-devel@lists.bufferbloat.net" , "bloat@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] [aqm] ping loss "considered harmful" X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Mar 2015 20:40:29 -0000 On Mon, 2 Mar 2015, Dave Dolson wrote: > Would you do that to TCP or UDP traffic? > > At IETF I often hear laments about middle-boxes breaking the internet by being "clever" with certain types of traffic. > It seems that policing ICMP falls into that category. > > There may have been bugs in the past, but I'm not aware that ICMP packets are any more dangerous than UDP or TCP. And if the RFCs can be believed, ICMPv6 is critical to determining Path-MTU. Don't drop those. > > One may wish to rate-limit ICMP (or DNS or TCP) flows as a matter of network policy, but in my opinion this should be kept orthogonal to solving buffer bloat. > > Taken to the extreme, a network should support full utilization of a link doing only ping. If I wish to use my connection to the internet to ping hosts at full line rate, why not? what's going on here isn't that pings are being rate limited, but rather that the TCP/UDP traffic is being given priority over the ping traffic. This means that when you max out the pipe, pings will suffer. David Lang