tcpcrypt icon indicating copy to clipboard operation
tcpcrypt copied to clipboard

Tcpcrypt incompatible with ECN

Open jech opened this issue 14 years ago • 2 comments

Run

sudo sysctl net.ipv4.tcp_ecn=1

and tcpcrypt is no longer negotiated.

This is on x86, under Debian's Linux 2.6.37-1, running git 91cce740.

--Juliusz

jech avatar Feb 18 '11 18:02 jech

Thanks for reporting this. I've added a note to the Linux installation instructionsm about this, and I'll leave this issue open until it's resolved.

sqs avatar May 04 '11 23:05 sqs

Without ECN, tcpcrypt seems limited to Linux servers that don't expect to face any incast issues.

skull-squadron avatar May 20 '11 07:05 skull-squadron