From: Andi Kleen <andi@firstfloor.org>
Date: Tue, 23 Sep 2008 02:14:09 +0200

quoted text
> Typical case: you got a large company network behind a NAT.
> First user has a very crappy wireless connection behind a slow
> intercontinental link talking to the outgoing NAT router. He connectes to 
> your internet server first and the window, slow start etc. parameters 
> for him are saved in the dst_entry.  
> 
> The next guy behind the same NAT is in the same building
> as the router who connects the company to the internet. He
> has a much faster line. He connects to the same server. 
> They will share the same dst and inetpeer entries.
> 
> The parameters saved earlier for the same IP are clearly invalid
> for the second case. The link characteristics are completely 
> different.

Just as typical are setups where the NAT clients are 1 or 2
fast hops behind the firewall.

There are many cases where perfectly acceptible heuristics
don't perform optimally, this doesn't mean we disable them
by default.

quoted text
> Also did you know there are there are whole countries behind
> NAT.

I am more than aware of this, however this doesn't mean it is
sane and this kind of setup makes many useful internet services
inaccessible.

quoted text
> Ah I see there's a sysctl now to disable this. How about
> setting it by default?

It's for debugging.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html