Thak you Dumitru!!! that's awesome, I recently hit that limitation again so happy to know it's implemented now :D
On Mon, Jan 9, 2023 at 3:00 PM Dumitru Ceara <dce...@redhat.com> wrote: > On 12/11/20 17:53, Miguel Angel Ajo wrote: > > > > Do we know if OVN Loadbalancers will forward ICMPs related to a load > > balancer connection, or who could I ask? > > > > Please note that > > - 172.30.23.156 is the VIP of my TCP load balancer, attached to a > router. > > - 10.129.2.2 is the gateway which will find the bigger than can transit > > packet and respond with the unreachable / need to frag packet > > - 10.134.0.46 is the client, behind the gateway, that connects > > to 172.30.23.156 on port 1234 > > > > At the start the client will be seen sending a 3200 packet to the VIP > > that works, but that's probably a reassembled packet after delivery, > since > > the path between the gateway and that client is a tunnel with <1500 MTU. > > > > 16:40:57.953197 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [S], > > seq 3131207079, win 26583, options [mss 8861,sackOK,TS val 2995034450 > > ecr 0,nop,wscale 7], length 0 > > 16:40:57.954352 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [S.], > > seq 1743781087, ack 3131207080, win 26547, options [mss 8861,sackOK,TS > > val 301081336 ecr 2995034450,nop,wscale 7], length 0 > > 16:40:57.955760 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [.], > > ack 1, win 208, options [nop,nop,TS val 2995034453 ecr 301081336], > length 0 > > 16:40:57.955827 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [F.], > > seq 3201, ack 1, win 208, options [nop,nop,TS val 2995034453 ecr > > 301081336], length 0 > > 16:40:57.956467 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [P.], > > seq 1:3201, ack 1, win 208, options [nop,nop,TS val 2995034453 ecr > > 301081336], length 3200 > > 16:40:57.956478 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [.], > > ack 1, win 208, options [nop,nop,TS val 301081339 ecr > > 2995034453,nop,nop,sack 1 {3201:3202}], length 0 > > 16:40:57.956507 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [.], > > ack 3202, win 258, options [nop,nop,TS val 301081339 ecr 2995034453], > > length 0 > > 16:40:57.957069 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [.], > > seq 1:1387, ack 1, win 208, options [nop,nop,TS val 2995034455 ecr > > 301081339], length 1386 > > 16:40:57.957097 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [.], > > ack 3202, win 258, options [nop,nop,TS val 301081340 ecr > > 2995034453,nop,nop,sack 1 {1:1387}], length 0 > > 16:40:57.960404 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.], > > seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081343 ecr > > 2995034453], length 3150 > > 16:40:57.960469 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [F.], > > seq 3151, ack 3202, win 258, options [nop,nop,TS val 301081343 ecr > > 2995034453], length 0 > > *16:40:57.960939 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>: > > ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556* > > 16:40:57.961017 IP 10.134.0.46.35443 > 172.30.23.156.1234: Flags [.], > > ack 1, win 208, options [nop,nop,TS val 2995034459 ecr > > 301081340,nop,nop,sack 1 {3151:3152}], length 0 > > 16:40:57.964937 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.], > > seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081348 ecr > > 2995034459], length 3150 > > *16:40:57.965003 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>: > > ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556* > > 16:40:58.169939 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.], > > seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081553 ecr > > 2995034459], length 3150 > > *16:40:58.170014 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>: > > ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556* > > 16:40:58.577939 IP 172.30.23.156.1234 > 10.134.0.46.35443: Flags [P.], > > seq 1:3151, ack 3202, win 258, options [nop,nop,TS val 301081961 ecr > > 2995034459], length 3150 > > *16:40:58.578015 IP 10.129.2.2 > 172.30.23.156 <http://172.30.23.156>: > > ICMP 10.134.0.46 unreachable - need to frag (mtu 1438), length 556* > > > > > > Thank you very much, and best regards, > > Miguel Ángel. > > Hi Miguel, > > It's been a long time since you posted this question but I think OVN > finally supports this properly (starting with 22.12): > > > https://github.com/ovn-org/ovn/commit/650f06b9f3e2b2f16df9bd9fd4987c702bde4956 > > Regards, > Dumitru > > -- Miguel Ángel Ajo @mangel_ajo <https://twitter.com/mangel_ajo> Office of CTO EDGE team. ex Submariner (ACM) and OpenStack networking
_______________________________________________ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss