Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
?Hi Matus, Yeah, I've seen that. Gotcha, thanks! I'll spend some time looking at it and see what I can do. Thanks! Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Sent: Monday, December 10, 2018 12:45 PM To: John Biscevic; vpp-dev@lists.fd.io Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi, It is yet-to-be-implemented feature, deterministic mode is PoC code, it has only some basic functionality Matus From: John Biscevic Sent: Monday, December 10, 2018 12:40 PM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Is there some functional reasoning behind this, or is it a yet-to-be-implemented feature? ?Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net<mailto:john.bisce...@bahnhof.net> From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Monday, December 10, 2018 10:46 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi, Deterministic mode doesn't support fragments. Matus From: John Biscevic mailto:john.bisce...@bahnhof.net>> Sent: Monday, December 10, 2018 10:36 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability ?Hi Matus! I've picked this up again for testing and verifying. I am running it in deterministic mode now, and it's still displaying the same issue. Do you by any chance have the commit at hand? Is the fix only applied to dynamic NAT and not deterministic? Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net<mailto:john.bisce...@bahnhof.net> From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> on behalf of JB mailto:john.bisce...@bahnhof.net>> Sent: Friday, October 19, 2018 3:19 PM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco); vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Brilliant, thanks! John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 2:27 PM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, Fix in master and stable/1810 branch Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Friday, October 19, 2018 9:14 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11542): https://lists.fd.io/g/vpp-dev/message/11542 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi, It is yet-to-be-implemented feature, deterministic mode is PoC code, it has only some basic functionality Matus From: John Biscevic Sent: Monday, December 10, 2018 12:40 PM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Is there some functional reasoning behind this, or is it a yet-to-be-implemented feature? Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net<mailto:john.bisce...@bahnhof.net> From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Monday, December 10, 2018 10:46 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi, Deterministic mode doesn’t support fragments. Matus From: John Biscevic mailto:john.bisce...@bahnhof.net>> Sent: Monday, December 10, 2018 10:36 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus! I've picked this up again for testing and verifying. I am running it in deterministic mode now, and it's still displaying the same issue. Do you by any chance have the commit at hand? Is the fix only applied to dynamic NAT and not deterministic? Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net<mailto:john.bisce...@bahnhof.net> From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> on behalf of JB mailto:john.bisce...@bahnhof.net>> Sent: Friday, October 19, 2018 3:19 PM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco); vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Brilliant, thanks! John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 2:27 PM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, Fix in master and stable/1810 branch Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Friday, October 19, 2018 9:14 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11541): https://lists.fd.io/g/vpp-dev/message/11541 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi Matus, Is there some functional reasoning behind this, or is it a yet-to-be-implemented feature? ?Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Sent: Monday, December 10, 2018 10:46 AM To: John Biscevic; vpp-dev@lists.fd.io Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi, Deterministic mode doesn't support fragments. Matus From: John Biscevic Sent: Monday, December 10, 2018 10:36 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability ?Hi Matus! I've picked this up again for testing and verifying. I am running it in deterministic mode now, and it's still displaying the same issue. Do you by any chance have the commit at hand? Is the fix only applied to dynamic NAT and not deterministic? Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net<mailto:john.bisce...@bahnhof.net> From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> on behalf of JB mailto:john.bisce...@bahnhof.net>> Sent: Friday, October 19, 2018 3:19 PM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco); vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Brilliant, thanks! John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 2:27 PM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, Fix in master and stable/1810 branch Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Friday, October 19, 2018 9:14 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11540): https://lists.fd.io/g/vpp-dev/message/11540 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi, Deterministic mode doesn’t support fragments. Matus From: John Biscevic Sent: Monday, December 10, 2018 10:36 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus! I've picked this up again for testing and verifying. I am running it in deterministic mode now, and it's still displaying the same issue. Do you by any chance have the commit at hand? Is the fix only applied to dynamic NAT and not deterministic? Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net<mailto:john.bisce...@bahnhof.net> From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> on behalf of JB mailto:john.bisce...@bahnhof.net>> Sent: Friday, October 19, 2018 3:19 PM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco); vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Brilliant, thanks! John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 2:27 PM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, Fix in master and stable/1810 branch Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Friday, October 19, 2018 9:14 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11537): https://lists.fd.io/g/vpp-dev/message/11537 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
?Hi Matus! I've picked this up again for testing and verifying. I am running it in deterministic mode now, and it's still displaying the same issue. Do you by any chance have the commit at hand? Is the fix only applied to dynamic NAT and not deterministic? Kind regards, John Biscevic Systems Architect, Bahnhof AB Mobile: +46 76 111 01 24 E-mail: john.bisce...@bahnhof.net From: vpp-dev@lists.fd.io on behalf of JB Sent: Friday, October 19, 2018 3:19 PM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco); vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Brilliant, thanks! John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Sent: Friday, October 19, 2018 2:27 PM To: John Biscevic; vpp-dev@lists.fd.io Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, Fix in master and stable/1810 branch Matus From: vpp-dev@lists.fd.io On Behalf Of JB Sent: Friday, October 19, 2018 9:14 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11536): https://lists.fd.io/g/vpp-dev/message/11536 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi Matus, Brilliant, thanks! John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Sent: Friday, October 19, 2018 2:27 PM To: John Biscevic; vpp-dev@lists.fd.io Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, Fix in master and stable/1810 branch Matus From: vpp-dev@lists.fd.io On Behalf Of JB Sent: Friday, October 19, 2018 9:14 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10879): https://lists.fd.io/g/vpp-dev/message/10879 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi John, Fix in master and stable/1810 branch Matus From: vpp-dev@lists.fd.io On Behalf Of JB Sent: Friday, October 19, 2018 9:14 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10878): https://lists.fd.io/g/vpp-dev/message/10878 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi Matus, Much appreciated, glad you found it! Thanks, John From: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Sent: Friday, October 19, 2018 8:00 AM To: John Biscevic; vpp-dev@lists.fd.io Subject: RE: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10875): https://lists.fd.io/g/vpp-dev/message/10875 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi John, There is bug in NAT code for ICMP fragments. I will fix it as soon as possible. Thanks, Matus From: vpp-dev@lists.fd.io On Behalf Of JB Sent: Thursday, October 18, 2018 12:48 PM To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability Hi Ole, I've added a relevant packet trace. Is that adequate? Thanks, John -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10874): https://lists.fd.io/g/vpp-dev/message/10874 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hi there, Would you be able to enable packet tracing in VPP and post that? Cheers, Ole > On 18 Oct 2018, at 10:12, JB wrote: > > Hello, > > We've got a NAT44 setup configured with separate local and outside linknets, > where the internal NAT pool resides on a different subnet and is translated > to an outside different subnet. > > When sending, in this case ICMP packets of size 1500 bytes, to 8.8.8.8 we get > no response back from the target. However, if we decrease size to 1472, it > works. 1500 is including headers (total packet size is 1500). > > When sending packets of size 1500 towards 8.8.8.8, the initial returning > packet is 1468 and marked as fragmented with more fragments to come. > When sending packets of size 1472 towards 8.8.8.8 all the returning packets > are of size 1472 > > The result of sending packets of size 1500 towards 8.8.8.8 is that we get > them back fragmented, and for some reason, not received correctly by the > internal device, whether not passed through out2in properly or not > reassembled properly. > > Please feel free to attempt reproducing the above and let me know if you need > more info. Any thoughts? -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > > View/Reply Online (#10864): https://lists.fd.io/g/vpp-dev/message/10864 > Mute This Topic: https://lists.fd.io/mt/27400627/675193 > Mute #vpp_stability: > https://lists.fd.io/mk?hashtag=vpp_stability=1480722 > Group Owner: vpp-dev+ow...@lists.fd.io > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [otr...@employees.org] > -=-=-=-=-=-=-=-=-=-=-=- -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10865): https://lists.fd.io/g/vpp-dev/message/10865 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] Packet error-drop with fragmented packets through NAT #vpp_stability
Hello, We've got a NAT44 setup configured with separate local and outside linknets, where the internal NAT pool resides on a different subnet and is translated to an outside different subnet. When sending, in this case ICMP packets of size 1500 bytes, to 8.8.8.8 we get no response back from the target. However, if we decrease size to 1472, it works. 1500 is including headers (total packet size is 1500). When sending packets of size 1500 towards 8.8.8.8, the initial returning packet is 1468 and marked as fragmented with more fragments to come. When sending packets of size 1472 towards 8.8.8.8 all the returning packets are of size 1472 The result of sending packets of size 1500 towards 8.8.8.8 is that we get them back fragmented, and for some reason, not received correctly by the internal device, whether not passed through out2in properly or not reassembled properly. Please feel free to attempt reproducing the above and let me know if you need more info. Any thoughts? -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10864): https://lists.fd.io/g/vpp-dev/message/10864 Mute This Topic: https://lists.fd.io/mt/27400627/21656 Mute #vpp_stability: https://lists.fd.io/mk?hashtag=vpp_stability=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
