netdev - Re: IPv6 regression introduced by commit 3b6761d18bc11f2af2a6fc494e9026d39593f22c

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 9 Mar 2020 11:47:31 +0100
From:   Alarig Le Lay <alarig@...rdarmor.fr>
To:     Fabian Grünbichler <f.gruenbichler@...xmox.com>
Cc:     David Ahern <dsahern@...il.com>,
        Vincent Bernat <bernat@...ian.org>, jack@...ilfillan.uk,
        netdev@...r.kernel.org
Subject: Re: IPv6 regression introduced by commit
 3b6761d18bc11f2af2a6fc494e9026d39593f22c

On lun.  9 mars 09:59:30 2020, Fabian Grünbichler wrote:
> On March 9, 2020 3:15 am, David Ahern wrote:
> > On 3/8/20 4:57 AM, Alarig Le Lay wrote:
> >> On sam.  7 mars 17:52:10 2020, David Ahern wrote:
> >> I have the problem with 5.3 (proxmox 6), so unless FIB handling has been
> >> changed since then, I doubt that it will works, but I will try on
> >> Monday.
> >> 
> > 
> > a fair amount of changes went in through 5.4 including improvements to
> > neighbor handling. 5.4 (I think) also had changes around dumping the
> > route cache.
> 
> FWIW, there is a 5.4-based kernel preview package available in the 
> pvetest repository for Proxmox VE 6.x:
> 
> http://download.proxmox.com/debian/pve/dists/buster/pvetest/binary-amd64/pve-kernel-5.4.22-1-pve_5.4.22-1_amd64.deb

Thanks for the kernel!

I’m still having some issues with 5.4:
root@...3:~# ip -6 -ts monitor neigh | grep -P 'INCOMPLETE|FAILED'
[2020-03-09T11:35:51.276329] 2a00:5884:0:6::2 dev vmbr12  router FAILED
[2020-03-09T11:36:03.308359] fe80::5287:89ff:fef0:ce81 dev vmbr12  router FAILED
[2020-03-09T11:36:21.996250] 2a00:5884:0:6::1 dev vmbr12  router FAILED
[2020-03-09T11:36:32.524389] 2a00:5884:0:6::1 dev vmbr12  router FAILED
[2020-03-09T11:36:34.800303] 2a00:5884:0:6::2 dev vmbr12  router FAILED
[2020-03-09T11:36:36.588333] 2a00:5884:0:6::1 dev vmbr12  router FAILED
[2020-03-09T11:36:41.196351] 2a00:5884:0:6::1 dev vmbr12  router FAILED

And BGP sessions are flapping as well:
root@...3:~# birdc6 sh pr | grep bgp
ibgp_asbr01_ipv6 BGP      master   up     11:40:28    Established
ibgp_asbr02_ipv6 BGP      master   up     11:41:09    Established
root@...3:~# ps -o lstart -p $(pgrep bird6)
                 STARTED
Mon Mar  9 11:14:44 2020


You don’t build linux-perf? I can only find it on the debian repo but
not on the proxmox one nor
http://download.proxmox.com/debian/pve/dists/buster/pvetest/binary-amd64/

root@...3:~# apt search linux-perf
Sorting... Done
Full Text Search... Done
linux-perf/stable 4.19+105+deb10u3 all
  Performance analysis tools for Linux (meta-package)

linux-perf-4.19/stable 4.19.98-1 amd64
  Performance analysis tools for Linux 4.19

root@...3:~# apt policy linux-perf/stable
N: Unable to locate package linux-perf/stable
root@...3:~# apt policy linux-perf
linux-perf:
  Installed: (none)
  Candidate: 4.19+105+deb10u3
  Version table:
     4.19+105+deb10u3 500
        500 http://mirror.grifon.fr/debian buster/main amd64 Packages
root@...3:~# apt policy linux-perf-4.19
linux-perf-4.19:
  Installed: (none)
  Candidate: 4.19.98-1
  Version table:
     4.19.98-1 500
        500 http://mirror.grifon.fr/debian buster/main amd64 Packages
     4.19.67-2+deb10u2 500
        500 http://mirror.grifon.fr/debian-security buster/updates/main amd64 Packages
root@...3:~#

Regards,
-- 
Alarig