Change the TCP Window size

adiazm · February 24, 2011, 10:18pm

Hello everybody.

We are using RouterOS 3.30 under i386 (also we tried with RouterOS 4.16 and 5.0rc5)

We have this error trying to browse this website:

http://www.pacificar.com.ec

Connection Interrupted

The document contains no data.

The network link was interrupted while negotiating a connection. Please try again.

I replace my routerOS gateway with a Linux IPtables gateway and get the same error. But checking some options I found with this command that I run in my linux box.

[root@mail ~]# echo 4096 87380 262144 > /proc/sys/net/ipv4/tcp_rmem

Then the trouble was solved and we can browse that website.

How can we modify these kernel parameters in RouterOS?

We will appreciate your help.

Best Regards.

Antonio Díaz M.

normis · February 25, 2011, 11:01am

it doesn’t work for me as well, so that’s a problem with the website. i doubt that all their visitors install Linux and modify their Kernel just to browse one page

Email their admin, that’s the best approach here.

adiazm · February 25, 2011, 1:16pm

Hi Normis, thank you for the answer.

The main idea is replace Linux gateways with RouterBoard / RouterOS, but this is an issue that I have to get over.

I don’t know why but some websites here in Ecuador, mostly government related, have this problem.

Anyway, if you use another gateway (cisco, huawei, checkpoint or another not-linux-based solution) don’t have this issue.

Best regards.

normis · February 25, 2011, 1:20pm

I will try to investigate

adiazm · February 25, 2011, 1:42pm

Thanks Normis!

You Rule!!!

normis · February 28, 2011, 9:14am

The tcp-window-size that you are setting with the mentioned command is directly linked to the amount of RAM. So, you could simply put more RAM into the machine to solve this issue (more RAM will increase TCP window size). This affects only the Webproxy in RouterOS, and from the description of the issue, looks like tcp-windows size is not the only problem, could be some configuration issue or undiscovered RouterOS proxy problem. Hard to say. But - disabling webproxy will also solve the issue.

Chupaka · February 28, 2011, 3:47pm

*** ns1.xxxxxxxxx can’t find > www.pacificar.com.ec> : Non-existent domain

adiazm · February 28, 2011, 4:14pm

I´m sorry.

http://www.pacificard.com.ec

Best regards.

Chupaka · February 28, 2011, 4:22pm

so, does it work with proxy disabled?

it works for me, I don’t use proxy

normis · March 1, 2011, 6:34am

that website is completely broken

Chupaka · March 1, 2011, 4:33pm

Normis, your “ERR_EMPTY_RESPONSE” and adiazm’s “The document contains no data” sounds very similar

seems like you both have the same problem, as the website works fine for me. and I still don’t use webproxy

normis · March 2, 2011, 5:41am

I have never seen this error in my life. That server is the problem for sure.

Chupaka · March 2, 2011, 2:06pm

sorry to say that, but it’s definitely proxy problem: when I enable proxy on one of my routers (it’s x86 v4.2), I can browse any website except http://www.pacificard.com.ec/ %)

maybe GZIP encoding of webpage is the reason? can WebProxy work with compressed data?..

p.s. actually, after a minute or two, webpage opened… after refresh, it shown

<!DOCTYPE html PUBLIC "-

and stopped. one more page reload - four minutes, no reaction… when I disable proxy - I can browase the website smoothly

normis · March 3, 2011, 5:32am

I understand that this is caused by the proxy, but why only one website? I have not seen this behavior with any other website, and I use proxy for a very long time.

Chupaka · March 3, 2011, 1:51pm

your developers should trace that =)

for example, look at ticket 2010101966000509 (it’s not my one, but I was commenting it to Sergejs) - was it solved? that webserver has one insignificant difference in its header part - and WebProxy cannot process it correctly