Back to bug 787789

Who When What Removed Added
David Aquilina 2012-03-13 20:06:36 UTC Assignee sdake jfriesse
Lon Hohberger 2012-07-31 13:55:43 UTC Priority unspecified medium
Severity unspecified medium
Jan Friesse 2012-10-04 09:59:34 UTC Status NEW ASSIGNED
Jan Friesse 2012-10-09 07:30:53 UTC Status ASSIGNED POST
Doc Text Cause:
Input and output packets are blocked (by netfilter firewall).

Consequence:
Corosync stuck and never creates membership. It's not possible to use cluster.

Fix:
Main problem was hidden in fact that corosync rely on multicast loop (packets sent to mcast group are returned back to sender). Sadly, this packets are filtered by netfilter, and if policy is block they are blocked and never arrive back to corosync. Solution is to use sockpair unix dgram socket, used only for local loopback. So packets are sent to multicast group AND to this unix dgram. Multicast group loopback is disabled but packets are always delivered thru this unix socket to localhost.

Result:
In given scenario, single node cluster is created.
Jan Friesse 2012-10-09 09:06:12 UTC Status POST MODIFIED
Jan Friesse 2012-10-09 09:06:15 UTC Fixed In Version corosync-1.4.1-11.el6
errata-xmlrpc 2012-10-09 12:41:27 UTC Status MODIFIED ON_QA
Jaroslav Kortus 2012-11-28 16:09:05 UTC Status ON_QA VERIFIED
errata-xmlrpc 2013-02-07 00:18:17 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2013-02-21 07:50:03 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2013-02-21 02:50:03 UTC

Back to bug 787789