DoT not using TCP Fast Open

Paul paul14075 at gmail.com
Mon Jan 31 14:13:16 UTC 2022


In RHEL 8 I compiled 1.14.0 with --enable-tfo-client and
--enable-tfo-server.  However, Wireshark shows it's not even attempting to
use TFO on the DoT connections.

As far as I can tell the version of openssl used (1.1.1k) and the system
support TFO:

# cat /proc/sys/net/ipv4/tcp_fastopen
3

Why no TFO?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20220131/cecc4c6d/attachment.htm>


More information about the Unbound-users mailing list