On 12/11/20 17:53, Miguel Angel Ajo wrote:
>
> Do we know if OVN Loadbalancers will forward ICMPs related to a load
> balancer connection, or who could I ask?
>
> Please note that
> - 172.30.23.156 is the VIP of my TCP load balancer, attached to a router.
> - 10.129.2.2 is the gateway which will find the bigger than can transit
> packet and respond with the unreachable / need to frag packet
> - 10.134.0.46 is the client, behind the gateway, that connects
> to 172.30.23.156 on port 1234
>
> At the start the client will be seen sending a 3200 packet to the VIP
> that works, but that's probably a reassembled packet after delivery, since
> the path between the gateway and that client is a tunnel with <1500 MTU.
>
> 16:40:57.953197 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [S],
> seq 3131207079, win 26583, options [mss 8861,sackOK,TS val 2995034450
> ecr 0,nop,wscale 7], length 0
> 16:40:57.954352 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [S.],
> seq 1743781087, ack 3131207080, win 26547, options [mss 8861,sackOK,TS
> val 301081336 ecr 2995034450,nop,wscale 7], length 0
> 16:40:57.955760 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [.],
> ack 1, win 208, options [nop,nop,TS val 2995034453 ecr 301081336], length 0
> 16:40:57.955827 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [F.],
> seq 3201, ack 1, win 208, options [nop,nop,TS val 2995034453 ecr
> 301081336], length 0
> 16:40:57.956467 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [P.],
> seq 1:3201, ack 1, win 208, options [nop,nop,TS val 2995034453 ecr
> 301081336], length 3200
> 16:40:57.956478 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [.],
> ack 1, win 208, options [nop,nop,TS val 301081339 ecr
> 2995034453,nop,nop,sack 1 {3201:3202}], length 0
> 16:40:57.956507 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [.],
> ack 3202, win 258, options [nop,nop,TS val 301081339 ecr 2995034453],
> length 0
> 16:40:57.957069 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [.],
> seq 1:1387, ack 1, win 208, options [nop,nop,TS val 2995034455 ecr
> 301081339], length 1386
> 16:40:57.957097 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [.],
> ack 3202, win 258, options [nop,nop,TS val 301081340 ecr
> 2995034453,nop,nop,sack 1 {1:1387}], length 0
> 16:40:57.960404 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.],
> seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081343 ecr
> 2995034453], length 3150
> 16:40:57.960469 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [F.],
> seq 3151, ack 3202, win 258, options [nop,nop,TS val 301081343 ecr
> 2995034453], length 0
> *16:40:57.960939 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>:
> ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556*
> 16:40:57.961017 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [.],
> ack 1, win 208, options [nop,nop,TS val 2995034459 ecr
> 301081340,nop,nop,sack 1 {3151:3152}], length 0
> 16:40:57.964937 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.],
> seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081348 ecr
> 2995034459], length 3150
> *16:40:57.965003 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>:
> ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556*
> 16:40:58.169939 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.],
> seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081553 ecr
> 2995034459], length 3150
> *16:40:58.170014 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>:
> ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556*
> 16:40:58.577939 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.],
> seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081961 ecr
> 2995034459], length 3150
> *16:40:58.578015 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>:
> ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556*
>
>
> Thank you very much, and best regards,
> Miguel Ángel.
Hi Miguel,
It's been a long time since you posted this question but I think OVN
finally supports this properly (starting with 22.12):
https://github.com/ovn-org/ovn/commit/650f06b9f3e2b2f16df9bd9fd4987c702bde4956
Regards,
Dumitru
_______________________________________________
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
