From efb768464c2beda1fbac99743b098922179a7694 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Fri, 14 Oct 2011 11:27:44 -0700
Subject: [PATCH] Add FAQ 97a

---
 docs/FAQ.xml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index db6846f08..8d83f8612 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -2256,6 +2256,36 @@ eth0		External	50mbit:200kb			5.0mbit:100kb:200ms:100mbit:<emphasis
 
       <programlisting><emphasis role="bold">ethtool -k eth<emphasis>N</emphasis> tso off gso off</emphasis></programlisting>
     </section>
+
+    <section>
+      <title>(FAQ 97a) I enable Shorewall traffic shaping and now my download
+      rate is way below what I specified</title>
+
+      <para><emphasis role="bold">Answer</emphasis>: This is likely due to
+      Generic Receive Offload (GRO) being enabled in the network adapter. To
+      verify, install the <firstterm>ethtool</firstterm> package and use the
+      -k command:</para>
+
+      <programlisting>root@gateway:/etc/shorewall# ethtool -k eth1
+Offload parameters for eth1:
+rx-checksumming: on
+tx-checksumming: on
+scatter-gather: on
+tcp-segmentation-offload: on
+udp-fragmentation-offload: off
+generic-segmentation-offload: on
+generic-receive-offload: <emphasis role="bold">on</emphasis>
+large-receive-offload: off
+ntuple-filters: off
+receive-hashing: off
+root@gateway:/etc/shorewall# 
+</programlisting>
+
+      <para>To work around the issue, use this command:</para>
+
+      <programlisting><emphasis role="bold">ethtool -k eth</emphasis>N <emphasis
+          role="bold">gro off</emphasis></programlisting>
+    </section>
   </section>
 
   <section id="About">