Slow performance when you try to access resources on your Virtual Server 2005 host computer from a guest virtual machine
This problem may also cause actual non-virtual network connections to the host machine to be disconnected. You may see an event log entry that is similar to the following event log entry :
Event ID: 2025
Description: The server has detected an attempted Denial-of-Service attack from client \\computername, and has disconnected the connection.
Note If you have any network adapters that Virtual Server 2005 guests use, Microsoft recommends that you disable TCP segmentation offloading.
Method 1Enable local area network (LAN) routing on the host computer, and then move the virtual network to the Microsoft Loopback Adapter.
Note To perform this procedure, your host computer must be running Microsoft Windows Server 2003.
To enable LAN routing on the host computer, follow these steps:
- Click Start, point to Administrative Tools, and then click Routing and Remote Access.
- Right-click your server name.
- If remote access is already enabled, follow these steps:
- Click Properties, and then click the General tab.
- Make sure that the Router check box is selected, and then click OK.
- Click Configure and Enable Routing and Remote Access.
The Routing and Remote Access Server Setup Wizard starts.
- Click Next.
- On the Configuration page, click Custom configuration, and then click Next.
- On the Custom Configuration page, click to select the LAN routing check box.
- Click Next, and then click Finish.
- Click Yes if you are prompted to start the Routing and Remote Access service.
Method 2Disable TCP task offloading in the registry of the host computer. To do this, follow these steps.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
- Click Start, click Run, type regedit, and then click OK.
- Locate and then click the following registry subkey:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
- Click Edit, point to New, and then click DWORD Value.
- Type DisableTaskOffload as the entry name, and then press ENTER.
- Right-click DisableTaskOffload, and then click Modify.
- In the Value data box, type a value of 1, and then click OK.
- Quit Registry Editor.
- Restart your computer.
Method 3If you do not want to disable TCP segmentation offloading on the whole system, and you want to only disable TCP segmentation offloading on the network adapters that Virtual Server 2005 guests use, you must not add the DisableTaskOffload registry entry that is described in Method 2. Instead, you can disable the task offload properties on the Advanced tab of the Properties dialog box of the network adapter.
Warning When you disable the task offload properties, guest virtual machines that are attached to the same virtual network may temporarily disconnect from the virtual network.
To disable the task offload properties, follow these steps:
- Click Start, click Run, type ncpa.cpl, and then click OK.
- Right-click your network adapter, and then click Properties.
- Click the General tab, and then click Configure.
- Click the Advanced tab.
- In the Property box, click the Offload TCP Segmentation property.
- In the Value list, click Off, and then click OK.
- If you also have the following task offload properties in the Property box, you must repeat step 5 to step 6 to disable these properties:
- Offload Receive IP Checksum
- Offload Receive TCP Checksum
- Offload Transmit IP Checksum
- Offload Transmit TCP Checksum
Article ID: 888750 - Last Review: 11/02/2007 14:14:32 - Revision: 3.2
- kbbug kbtshoot KB888750