Throughput is very important benchmark of UTM Security Device.
Recently, I received an issue. If the packets of tcp stream are out of order or lost, UTM throught will be decresed much.
How To slove this problem? Fast retransmit.
Please refer to RFC2001
Root cause:
Device needs sequenced packets and compared with its signature. But remote end can not know which packet has been lost immediately. So device needs to send faked TCP ACK to inform remote end. If remote end receives duplicated ACK more than three times, it knows which packet has been lost and sends it quickly. Throughput enhances.