Hi,
I've go very simple config for NAT44:
create interface rdma host-if enp1s0f0 name rdma-0
create sub-interfaces rdma-0 934
create sub-interfaces rdma-0 935
set interface ip address rdma-0.934 10.0.100.10/31
set interface ip address rdma-0.935 18.31.0.1/25
set interface state rdma-0 up
set interface state rdma-0.934 up
set interface state rdma-0.935 up
ip route add 10.0.0.0/8 via 10.0.100.11 rdma-0.934
ip route add 0.0.0.0/0 via 18.31.0.126 rdma-0.935
nat44 enable sessions 900000
set int nat44 in rdma-0.934 out rdma-0.935
nat44 add address 18.31.0.2-18.31.0.124
In case of server reboot or vpp process failure, nat doesn't work for
relatively long time period.
Moreover some servers starts working where others are not yet.
After 10-20 minutes it start work as expected.
Ping is working to private servers from vpp process.
Vpp is builded from source (vpp v21.10-rc0~361-g5aa06abf2) but work delay the
same in repo version.
VPP starts create some sessions but it simply not working from the PC side.
Below some outputs:
vpp# show nat44 sessions
NAT44 ED sessions:
-------- thread 0 vpp_main: 33 sessions --------
i2o 10.0.101.15 proto icmp port 45327 fib 0
o2i 18.31.0.19 proto icmp port 45327 fib 0
external host 91.233.219.251:45327
i2o flow: match: saddr 10.0.101.15 sport 45327 daddr 91.233.219.251
dport 45327 proto ICMP fib_idx 0 rewrite: saddr 18.31.0.19 daddr 91.233.219.251
icmp-id 45327 txfib 0
o2i flow: match: saddr 91.233.219.251 sport 45327 daddr 18.31.0.19 dport
45327 proto ICMP fib_idx 0 rewrite: daddr 10.0.101.15 icmp-id 45327 txfib 0
index 0
last heard 11.39
total pkts 9, total bytes 396
dynamic translation
i2o 10.0.101.15 proto icmp port 45329 fib 0
o2i 18.31.0.19 proto icmp port 45329 fib 0
external host 92.223.5.15:45329
i2o flow: match: saddr 10.0.101.15 sport 45329 daddr 92.223.5.15 dport
45329 proto ICMP fib_idx 0 rewrite: saddr 18.31.0.19 daddr 92.223.5.15 icmp-id
45329 txfib 0
o2i flow: match: saddr 92.223.5.15 sport 45329 daddr 18.31.0.19 dport
45329 proto ICMP fib_idx 0 rewrite: daddr 10.0.101.15 icmp-id 45329 txfib 0
index 1
last heard 11.39
total pkts 9, total bytes 396
dynamic translation
i2o 10.0.101.15 proto icmp port 45330 fib 0
o2i 18.31.0.19 proto icmp port 45330 fib 0
external host 92.223.6.32:45330
i2o flow: match: saddr 10.0.101.15 sport 45330 daddr 92.223.6.32 dport
45330 proto ICMP fib_idx 0 rewrite: saddr 18.31.0.19 daddr 92.223.6.32 icmp-id
45330 txfib 0
o2i flow: match: saddr 92.223.6.32 sport 45330 daddr 18.31.0.19 dport
45330 proto ICMP fib_idx 0 rewrite: daddr 10.0.101.15 icmp-id 45330 txfib 0
index 2
last heard 11.39
total pkts 9, total bytes 396
dynamic translation
...
PC
suser@influxdb-1:~$ ip add
2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP
group default qlen 1000
link/ether e6:74:6e:8a:29:ac brd ff:ff:ff:ff:ff:ff
inet 10.0.101.15/25 brd 10.0.101.127 scope global ens18
valid_lft forever preferred_lft forever
inet6 fe80::e474:6eff:fe8a:29ac/64 scope link
valid_lft forever preferred_lft forever
suser@influxdb-1:~$ ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
^C
--- 8.8.8.8 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 4092ms
suser@influxdb-1:~$
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#20180): https://lists.fd.io/g/vpp-dev/message/20180
Mute This Topic: https://lists.fd.io/mt/85790901/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
