[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-8326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15649997#comment-15649997
 ] 

ASF subversion and git services commented on CLOUDSTACK-8326:
-------------------------------------------------------------

Commit fa56d0b3e6b8bf62396a820a84621c9eb8707a42 in cloudstack's branch 
refs/heads/4.9 from [~widodh]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=fa56d0b ]

CLOUDSTACK-8326: Always fill UDP checksums in DHCP replies in VR

In some cases the UDP checksums in packets from DHCP servers are
incorrect. This is a problem for some DHCP clients that ignore
packets with bad checksums. This patch inserts an iptables rule
to ensure DHCP servers always send packets with correct checksums.

Due to this bug DHCP offers are sometimes not accepted by Instances.

The end-result without this fix is no connectivity for the Instance
due to the lack of a IPv4 address.

This is also commited in OpenStack:
- https://github.com/projectcalico/felix/issues/40
- https://review.openstack.org/148718
- https://bugzilla.redhat.com/show_bug.cgi?id=910619

Signed-off-by: Wido den Hollander <w...@widodh.nl>


> Bug in cloudstack virtual router (KVM) in Simple zone with public ips / DHCP 
> Debian Wheezy specific
> ---------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-8326
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8326
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>          Components: KVM, Virtual Router
>    Affects Versions: 4.3.2
>         Environment: Ubuntu 12.04.5 for Host
> Debian Squeeze for VR
>            Reporter: Ivan A Kudryavtsev
>            Assignee: Wido den Hollander
>             Fix For: Future, 4.10.0.0, 4.9.2.0
>
>
> I've found bug in DHCP component of VR 4.3.2. The bug is completely described 
> at:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717217
> DHCP responses with bad checksum. As a result, dhcp client unable to get 
> lease: "dhcpd: 5 bad udp checksums in 5 packets"
> Hotfix is:
> iptables -A POSTROUTING -t mangle -p udp --dport bootpc -j CHECKSUM 
> --checksum-fill
> on VR.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to