On Tue, Jan 25, 2022, at 17:10, Mike Pattrick wrote:
> On Mon, Dec 27, 2021 at 8:27 AM Paolo Valerio <pvale...@redhat.com> wrote:
>>
>> Some sporadic false positive may be visible for the following tests:
>>
>> - conntrack - IPv6 HTTP
>> - conntrack - FTP over IPv6
>>
>> The failures show up randomly.
>> The reason appears to be source address used when performing the
>> request using wget:
>> -tcp,orig=(src=fc00::1,dst=fc00::2,sport=<cleared>,dport=<cleared>),reply=(src=fc00::2,dst=fc00::1,sport=<cleared>,dport=<cleared>),protoinfo=(state=<cleared>)
>> +tcp,orig=(src=fe80::f0eb:f8ff:fef0:138f,dst=fc00::2,sport=<cleared>,dport=<cleared>),reply=(src=fc00::2,dst=fe80::f0eb:f8ff:fef0:138f,sport=<cleared>,dport=<cleared>),protoinfo=(state=<cleared>)
>>
>> It seems that the problem can be addressed in multiple ways, but using
>> "nodad" seems to be safe enough to fix the issue that now, after
>> hundreds of attempts, is no longer present.
>>
>> Signed-off-by: Paolo Valerio <pvale...@redhat.com>
>> ---
>
> I wasn't able to reproduce the sporadic failures after 100 iterations
> of "conntrack - FTP over IPv6", but I still think this fix makes
> sense, and shouldn't break anything.
>
> Acked-by: Mike Pattrick <m...@redhat.com>
>

Hi Paolo,

I'm sorry, I don't understand the root cause of the failure.

Seeing the src IP switched from fc00:: to fe80::, and how the nodad flag
solves it, I am guessing that assigning fc00::1 on the veth failed due
to this address already being in use in the LAN?

How does it happen if all involved links are veths? Could it be that either 
other tests
are running in parallel with veths having the same IP? Or maybe something else
unrelated to OVS?

Nodad might make the link creation work, but I'm worried that it could make the
result unpredictable, i.e. making it less likely, and less easy to understand 
and debug
in the rare remaining times it triggers.

Best,
-- 
Gaetan Rivet
_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to