When a nc connection is established on client side, the client (using -z) was immediately closing the connection (sending FIN/ACK). As a result, the server was either sending ACK and FIN/ACK, or was also sometimes only sending FIN/ACK. Only ACK (and neither SYN/ACK nor FIN/ACK) causes the connection to be committed in conntrack. Fix this by having the client send a Packet, then wait some time before sending FIN/ACK.
Reported-at: https://issues.redhat.com/browse/FDP-1026 Signed-off-by: Xavier Simonart <[email protected]> --- tests/system-ovn.at | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/tests/system-ovn.at b/tests/system-ovn.at index df5bd716d..16848ec4a 100644 --- a/tests/system-ovn.at +++ b/tests/system-ovn.at @@ -6505,7 +6505,7 @@ NS_CHECK_EXEC([bob1], [ip r d default via 172.16.0.2 dev bob1], [0]) NS_CHECK_EXEC([bob1], [ip r a default via 172.16.0.3 dev bob1], [0]) NETNS_DAEMONIZE([bob1], [nc -l -k 8080], [bob1.pid]) -NS_CHECK_EXEC([alice1], [nc -z 172.16.0.1 8080], [0]) +NS_CHECK_EXEC([alice1], [(echo "Packet 1"; sleep 1; echo "Packet 2") | nc 172.16.0.1 8080], [0]) NS_CHECK_EXEC([alice1], [ping -q -c 3 -i 0.3 -w 2 172.16.0.1 | FORMAT_PING], \ [0], [dnl 3 packets transmitted, 3 received, 0% packet loss, time 0ms @@ -6522,7 +6522,7 @@ check ovn-nbctl --policy="src-ip" lr-route-del R1 10.0.0.0/24 20.0.0.3 check ovn-nbctl --wait=hv sync AT_CHECK([ovs-appctl dpctl/flush-conntrack]) NETNS_DAEMONIZE([bob1], [nc -l -k 8081], [bob2.pid]) -NS_CHECK_EXEC([alice1], [nc -z 172.16.0.1 8081], [0]) +NS_CHECK_EXEC([alice1], [(echo "Packet 1"; sleep 1; echo "Packet 2") | nc 172.16.0.1 8081], [0]) NS_CHECK_EXEC([alice1], [ping -q -c 3 -i 0.3 -w 2 172.16.0.1 | FORMAT_PING], \ [0], [dnl 3 packets transmitted, 3 received, 0% packet loss, time 0ms @@ -6737,7 +6737,7 @@ test $(ovs-ofctl dump-flows br-int | grep -c 'table=OFTABLE_ECMP_NH, n_packets') AT_CHECK([ovs-appctl dpctl/flush-conntrack]) NETNS_DAEMONIZE([bob1], [nc -6 -l -k 8080], [bob1.pid]) -NS_CHECK_EXEC([alice1], [nc -6 -z fd07::1 8080], [0]) +NS_CHECK_EXEC([alice1], [(echo "Packet 1"; sleep 1; echo "Packet 2") | nc -6 fd07::1 8080], [0]) NS_CHECK_EXEC([alice1], [ping -q -c 3 -i 0.3 -w 2 fd07::1 | FORMAT_PING], \ [0], [dnl 3 packets transmitted, 3 received, 0% packet loss, time 0ms @@ -6754,7 +6754,7 @@ check ovn-nbctl --policy="src-ip" lr-route-del R1 fd01::/126 fd02::3 check ovn-nbctl --wait=hv sync AT_CHECK([ovs-appctl dpctl/flush-conntrack]) NETNS_DAEMONIZE([bob1], [nc -6 -l -k 8081], [bob2.pid]) -NS_CHECK_EXEC([alice1], [nc -6 -z fd07::1 8081], [0]) +NS_CHECK_EXEC([alice1], [(echo "Packet 1"; sleep 1; echo "Packet 2") | nc -6 fd07::1 8081], [0]) NS_CHECK_EXEC([alice1], [ping -q -c 3 -i 0.3 -w 2 fd07::1 | FORMAT_PING], \ [0], [dnl 3 packets transmitted, 3 received, 0% packet loss, time 0ms -- 2.47.1 _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
