Subject: Re: [PATCH net] tcp: secure_seq: add back ports to TS offset

From: Florian Westphal <[email-masked]>
Date: Mon, 8 Jun 2026 14:11:28 +0200

Eric Dumazet <[email-masked]> wrote:
> > Is this performance degradation an expected side-effect of the security fix,
> > or is there any sysctl param we should tune when `--random-fully` is
> > required for high-concurrency short connections?
> 
> Hi Tangxin
> 
> I do not know why that patch would affect MASQUERADE performance.
> 
> Pablo, Florian, do you have an idea?

tcpdump would help.  Willy could be right, tcpdump would confirm
increase in retries.