Автор: YuraseK
Дата сообщения: 05.09.2014 15:39
Очень странная проблема наблюдается в работе Kerio Connect 8.3.2 на Windows 2008 R2: внутри локальной сети всё работает исправно, а вот при попытке подключиться по HTTP(S) извне происходит проблема в виде задержки подключения, которая составляется порядка 75 секунд, после чего открытие любой другой страницы составляет столько же времени. Если смотреть снифером, то видно что предпоследним пакетом перед задержкой уходит TLS Rec Layer-1 HandShake: Client Hello. Из нюансов отмечу, что размер последнего пакета с сервера перед зависанием обмена равен 60 байтам, а размер tcp окна составляет 258, когда приходит повторный пакет через 75 секунд или проблема не наблюдается, то размер окна равен 512. Проблема наблюдается на Windows 2008 R2 SP1, рядом только Kerio Control, отключение autotuninglevel не влияет на ситуацию. Раньше всё было в порядке. В чём может быть дело?
P.S. Удалось выяснить, что дело в Kerio Control 7.4.2, если его выгрузить, то всё летает.
[more=Вот пример лога общения мобильной версии Opera с почтовиком][07/Sep/2014 12:16:53][3560] {https} Task 260 handler BEGIN
[07/Sep/2014 12:16:53][2456] {https} Task 262 handler BEGIN
[07/Sep/2014 12:16:53][5860] {https} Task 261 handler BEGIN
[07/Sep/2014 12:16:55][5564] {https} Task 263 handler BEGIN
[07/Sep/2014 12:17:02][4224] {https} Task 264 handler BEGIN
[07/Sep/2014 12:17:02][5572] {https} Task 265 handler BEGIN
[07/Sep/2014 12:18:09][3560] {https} Task 260 handler END
[07/Sep/2014 12:18:09][2456] {https} Task 262 handler END
[07/Sep/2014 12:18:09][5860] {https} Task 261 handler END
[07/Sep/2014 12:18:10][5564] {https} Task 263 handler END
[07/Sep/2014 12:18:17][5572] {https} Task 265 handler END
[07/Sep/2014 12:18:19][4224] {https} Task 264 handler starting
[07/Sep/2014 12:18:19][4224] {https} HTTPS connection from remote.client.ip:49541 started
[07/Sep/2014 12:18:19][4224] {https} GET request for URI /webmail/login/
[07/Sep/2014 12:18:19][4224] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:18:19][4224] {https} Found dispatcher for url /webmail/login/ with service id 80.
[07/Sep/2014 12:18:19][4224] {https} Response: HTTP/1.1 302 Found
[07/Sep/2014 12:18:19][4224] {https} Request finished in 0.03 s, received 432 bytes, sent 306 bytes
[07/Sep/2014 12:18:19][3560] {https} Task 266 handler BEGIN
[07/Sep/2014 12:18:34][4224] {https} Task 264 handler END
[07/Sep/2014 12:19:36][3560] {https} Task 266 handler starting
[07/Sep/2014 12:19:36][3560] {https} HTTPS connection from remote.client.ip:49621 started
[07/Sep/2014 12:19:36][3560] {https} GET request for URI /webmail/index2.html
[07/Sep/2014 12:19:36][3560] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:19:36][3560] {https} Found dispatcher for url /webmail/index2.html with service id 80.
[07/Sep/2014 12:19:36][3560] {https} Response: HTTP/1.1 302 Found
[07/Sep/2014 12:19:36][3560] {https} Request finished in 0.00 s, received 437 bytes, sent 336 bytes
[07/Sep/2014 12:19:36][2456] {https} Task 267 handler BEGIN
[07/Sep/2014 12:19:51][3560] {https} Task 266 handler END
[07/Sep/2014 12:20:53][2456] {https} Task 267 handler starting
[07/Sep/2014 12:20:53][2456] {https} HTTPS connection from remote.client.ip:49699 started
[07/Sep/2014 12:20:53][2456] {https} GET request for URI /webmail/login2/?fromUrl=ConnectClient
[07/Sep/2014 12:20:53][2456] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:20:53][2456] {https} Found dispatcher for url /webmail/login2/?fromUrl=ConnectClient with service id 80.
[07/Sep/2014 12:20:53][2456] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:20:53][2456] {https} Request finished in 0.00 s, received 455 bytes, sent 2039 bytes
[07/Sep/2014 12:20:53][2456] {https} Task 267 handler END
[07/Sep/2014 12:20:53][5860] {https} Task 268 handler BEGIN
[07/Sep/2014 12:20:53][5564] {https} Task 269 handler BEGIN
[07/Sep/2014 12:20:53][5572] {https} Task 270 handler BEGIN
[07/Sep/2014 12:20:53][4224] {https} Task 271 handler BEGIN
[07/Sep/2014 12:22:08][5564] {https} Task 269 handler END
[07/Sep/2014 12:22:08][4224] {https} Task 271 handler END
[07/Sep/2014 12:22:10][5860] {https} Task 268 handler starting
[07/Sep/2014 12:22:10][5860] {https} HTTPS connection from remote.client.ip:49777 started
[07/Sep/2014 12:22:10][5860] {https} GET request for URI /webmail/login2/defaults.js?v=8.3.2.3100
[07/Sep/2014 12:22:10][5860] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:22:10][5860] {https} Found dispatcher for url /webmail/login2/defaults.js?v=8.3.2.3100 with service id 80.
[07/Sep/2014 12:22:10][5860] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:22:10][5860] {https} Request finished in 0.00 s, received 531 bytes, sent 926 bytes
[07/Sep/2014 12:22:10][5572] {https} Task 270 handler starting
[07/Sep/2014 12:22:10][5572] {https} HTTPS connection from remote.client.ip:49779 started
[07/Sep/2014 12:22:10][5572] {https} GET request for URI /favicon.ico
[07/Sep/2014 12:22:10][5572] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:22:10][5572] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:22:10][5572] {https} Request finished in 0.00 s, received 503 bytes, sent 5737 bytes
[07/Sep/2014 12:22:10][3560] {https} Task 272 handler BEGIN
[07/Sep/2014 12:22:10][5860] {https} GET request for URI /weblib/int/login/index.js?v=8.3.2.3100
[07/Sep/2014 12:22:10][5860] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:22:10][5860] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:22:10][5860] {https} Request finished in 0.00 s, received 469 bytes, sent 1231 bytes
[07/Sep/2014 12:22:11][5564] {https} Task 273 handler BEGIN
[07/Sep/2014 12:22:11][4224] {https} Task 274 handler BEGIN
[07/Sep/2014 12:22:11][3340] {https} Task 275 handler BEGIN
[07/Sep/2014 12:22:11][5572] {https} GET request for URI /favicon.ico?v=8.3.2.3100
[07/Sep/2014 12:22:11][5572] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:22:11][5572] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:22:11][5572] {https} Request finished in 0.02 s, received 455 bytes, sent 5737 bytes
[07/Sep/2014 12:22:11][5860] {https} GET request for URI /weblib/int/login/style.css?v=8.3.2.3100
[07/Sep/2014 12:22:11][5860] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:22:11][5860] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:22:11][5860] {https} Request finished in 0.00 s, received 470 bytes, sent 1381 bytes
[07/Sep/2014 12:22:12][3132] {https} Task 276 handler BEGIN
[07/Sep/2014 12:22:12][5572] {https} GET request for URI /weblib/int/login/img/top.png?v=8.3.2.3100
[07/Sep/2014 12:22:12][5572] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:22:12][5572] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:22:12][5572] {https} Request finished in 0.00 s, received 472 bytes, sent 2074 bytes
[07/Sep/2014 12:22:12][5860] {https} GET request for URI /weblib/int/login/img/middle.png?v=8.3.2.3100
[07/Sep/2014 12:22:12][5860] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:22:12][5860] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:22:12][5860] {https} Request finished in 0.00 s, received 475 bytes, sent 558 bytes
[07/Sep/2014 12:22:27][5572] {https} Task 270 handler END
[07/Sep/2014 12:22:27][5860] {https} Task 268 handler END
[07/Sep/2014 12:23:27][3560] {https} Task 272 handler starting
[07/Sep/2014 12:23:27][3560] {https} HTTPS connection from remote.client.ip:49858 started
[07/Sep/2014 12:23:27][5564] {https} Task 273 handler starting
[07/Sep/2014 12:23:27][5564] {https} HTTPS connection from remote.client.ip:49859 started
[07/Sep/2014 12:23:27][4224] {https} Task 274 handler starting
[07/Sep/2014 12:23:27][4224] {https} HTTPS connection from remote.client.ip:49860 started
[07/Sep/2014 12:23:27][3340] {https} Task 275 handler starting
[07/Sep/2014 12:23:27][3340] {https} HTTPS connection from remote.client.ip:49861 started
[07/Sep/2014 12:23:27][3560] {https} GET request for URI /weblib/int/lib/login.js?v=8.3.2.3100
[07/Sep/2014 12:23:27][3560] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:27][3560] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:27][3560] {https} Request finished in 0.00 s, received 528 bytes, sent 3104 bytes
[07/Sep/2014 12:23:27][5564] {https} GET request for URI /weblib/int/login/img/bottom.png?v=8.3.2.3100
[07/Sep/2014 12:23:27][5564] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:27][5564] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:27][5564] {https} Request finished in 0.00 s, received 536 bytes, sent 2208 bytes
[07/Sep/2014 12:23:27][4224] {https} GET request for URI /weblib/int/login/img/background.png?v=8.3.2.3100
[07/Sep/2014 12:23:27][4224] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:27][4224] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:27][4224] {https} Request finished in 0.01 s, received 540 bytes, sent 13573 bytes
[07/Sep/2014 12:23:27][3340] {https} GET request for URI /weblib/int/login/connect/webmail2.css?v=8.3.2.3100
[07/Sep/2014 12:23:27][3340] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:27][3340] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:27][3340] {https} Request finished in 0.00 s, received 542 bytes, sent 442 bytes
[07/Sep/2014 12:23:27][3132] {https} Task 276 handler END
[07/Sep/2014 12:23:28][3340] {https} GET request for URI /weblib/int/login/script.js?v=8.3.2.3100
[07/Sep/2014 12:23:28][3340] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:28][3340] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:28][3340] {https} Request finished in 0.00 s, received 470 bytes, sent 3796 bytes
[07/Sep/2014 12:23:28][3560] {https} GET request for URI /webmail/translations/ru_login.js?v=8.3.2.3100
[07/Sep/2014 12:23:28][3560] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:28][3560] {https} Found dispatcher for url /webmail/translations/ru_login.js?v=8.3.2.3100 with service id 80.
[07/Sep/2014 12:23:28][3560] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:28][3560] {https} Request finished in 0.00 s, received 476 bytes, sent 1332 bytes
[07/Sep/2014 12:23:28][5564] {https} GET request for URI /weblib/int/login/connect/logo.png?v=8.3.2.3100
[07/Sep/2014 12:23:28][5564] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:28][5564] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:28][5564] {https} Request finished in 0.00 s, received 477 bytes, sent 3893 bytes
[07/Sep/2014 12:23:29][4224] {https} GET request for URI /webmail/lib/ext4/ext-all.js?v=8.3.2.3100
[07/Sep/2014 12:23:29][4224] {https} User-Agent header: Opera/9.80 (X11; Linux zbov) Presto/2.11.355 Version/12.10
[07/Sep/2014 12:23:29][4224] {https} Found dispatcher for url /webmail/lib/ext4/ext-all.js?v=8.3.2.3100 with service id 80.
[07/Sep/2014 12:23:29][4224] {https} Response: HTTP/1.1 200 OK
[07/Sep/2014 12:23:30][4224] {https} Request finished in 0.84 s, received 471 bytes, sent 339957 bytes
[07/Sep/2014 12:23:43][3340] {https} Task 275 handler END
[07/Sep/2014 12:23:43][3560] {https} Task 272 handler END
[07/Sep/2014 12:23:43][5564] {https} Task 273 handler END
[07/Sep/2014 12:23:45][4224] {https} Task 274 handler END[/more]
Из лога видно два стандартных редиректа с главной страницы и то, что каждый файл страницы отдаётся очень медленно.