Hacker News new | ask | show | jobs
Network performance regressions from TCP SACK vulnerability fixes (databricks.com)
31 points by rxin 2517 days ago
3 comments
xyzzy_plugh 2516 days ago
The article includes no details on what kernel patch they applied, what kernel version is in their AMI, or if they even have SACK enabled.

Guess you're on your own, Team Databricks!

link
rxin 2516 days ago
We posted more details just now. Will share more next week too.
link
rxin 2516 days ago
More coming next week. We believe we got to the bottom of this last night.
link
outworlder 2516 days ago
If true, this is unfortunate for anyone who was forced to apply their workaround in their systems, due to them being flagged by some "compliance" tool, even though they are not even accessible externally.
link
ryacko 2516 days ago
Regressions should be expected, because the unpatched code would have less checks to ensure correct operation.
link