On Fri, Jun 14, 2019 at 8:44 AM Jason Baron <jbaron@xxxxxxxxxx> wrote: > > > > > The inconsistencies coming from kernel version skew with some servers > being on the old hash and some on the newer one? Or is there another > source for the inconsistency you are referring to? > The servers still using the old crypto hash, and the new servers using the new siphash, will generate different fastopen cookies, even if fed with the same key (shared secret among all the server farm)