| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <185D2915-2506-47DA-BD07-451D5994CEDC@gmail.com>
Date: Wed, 2 Apr 2014 10:50:28 +0200
From: David Peall <dkpeall@...il.com>
To: linux-kernel@...r.kernel.org
Cc: eppdev <eppdev@...ervices.co.za>
Subject: PROBLEM: IP Virtual Server for IPv6 broken Kernel version 3.6.11+
[1.] One line summary of the problem:
IP Virtual Server has stopped working with IPv6 virtual services since kernel version 3.6.11.
[2.] Full description of the problem/report:
After upgrading a server I use as a load balancer none of my ipv6 services load anymore. I suspected the problem was the upgrade of keepalived from 1.2.2 to 1.2.7 but after compiling 1.2.12 form source it still didn’t work. I then looked at the IP Virtual Server and tried a number of kernels and eventual tracked down where it broke
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.11-raring/ seems to be where it broke
Working:
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.2.56-precise/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.3.8-quantal/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.4.85-quantal/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.5.7.32-quantal/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6-quantal/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.3-quantal/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.4-raring/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.5-raring/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.8-raring/ - works
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.10-raring/ - works
Broken:
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.11-raring/ - broken
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.13.8-trusty/ - broken
http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.14-trusty/ - broken
I get the following message when trying to list a virtual service:
ipvsadm -L -t [2001:xxxx:xxxx::xxx]:xxx
Resource temporarily unavailable
I initially though the problem was with keepalived and reported it here:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1300739
[3.] Keywords (i.e., modules, networking, kernel):
kernel, ipv6, ipvs
[4.] Kernel version (from /proc/version):
Linux version 3.6.11-030611-generic (root@...eisa) (gcc version 4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu5) ) #201212171335 SMP Mon Dec 17 18:36:00 UTC 2012
[5.] Output of Oops.. message (if applicable) with symbolic information
resolved (see Documentation/oops-tracing.txt)
N/A
[6.] A small shell script or example program which triggers the
problem (if possible)
[7.] Environment
[7.1.] Software (add the output of the ver_linux script here)
Ubuntu server 14.04
[7.2.] Processor information (from /proc/cpuinfo):
Virtual (KVM)
[7.3.] Module information (from /proc/modules):
[7.4.] Loaded driver and hardware information (/proc/ioports, /proc/iomem)
[7.5.] PCI information ('lspci -vvv' as root)
[7.6.] SCSI information (from /proc/scsi/scsi)
[7.7.] Other information that might be relevant to the problem
(please look in /proc and include all information that you
think to be relevant):
cat /proc/net/ip_vs
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
On kernel versions before 3.6.11 i get the following:
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP [2001:xxx:xxx::xxx]:xxxx lc persistent 1
-> [2001:xxx:xxx::x:xxx]:xxxx Route 1 0 0
[X.] Other notes, patches, fixes, workarounds:
Download attachment "smime.p7s" of type "application/pkcs7-signature" (4391 bytes)
Powered by blists - more mailing lists