Bug 1553023
| Summary: | [ovn]udp checksum of packet replied from dns server is error | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | haidong li <haili> | ||||
| Component: | openvswitch | Assignee: | Mark Michelson <mmichels> | ||||
| Status: | CLOSED ERRATA | QA Contact: | haidong li <haili> | ||||
| Severity: | high | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 7.5 | CC: | atragler, mmichels, tredaelli | ||||
| Target Milestone: | rc | ||||||
| Target Release: | --- | ||||||
| Hardware: | x86_64 | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2018-05-03 14:23:25 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 1560628 | ||||||
| Attachments: |
|
||||||
https://patchwork.ozlabs.org/patch/882655/ has been merged into OVS master and 2.9 branches and will fix this issue. I have tested on version ovs 2.9.0-15.el7.fdp, the issue is verified. test case: ovn-test-dns1 Job link: https://beaker.engineering.redhat.com/recipes/4994887#task70115235 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:1267 |
Created attachment 1405691 [details] pcap of server_ipv4 packet Description of problem: udp checksum of packet replied from dns server is error,so the client can't receive the translated address. Version-Release number of selected component (if applicable): ovs2.9 How reproducible: everytime Steps to Reproduce: The dns server can reply packet to correct address.But the guest doesn't ping the ip address translated by dns server.Packet responded by dns server is marked as error in wireshark,it seems the udp checksum is illegal. [root@localhost ~]# uname -a Linux localhost.localdomain 3.10.0-845.el7.x86_64 #1 SMP Mon Feb 5 07:43:47 EST 2018 x86_64 x86_64 x86_64 GNU/Linux [root@localhost ~]# [root@localhost ~]# cat /etc/resolv.conf ; generated by /usr/sbin/dhclient-script nameserver 2001:db8:102::254 [root@localhost ~]# [root@localhost ~]# ping -c10 abc.org 08:46:41.800846 IP6 2001:db8:102::12.50257 > 2001:db8:102::254.53: 34728+ A? abc.org. (25) 08:46:41.801712 IP6 2001:db8:102::254.53 > 2001:db8:102::12.50257: 34728- 1/0/0 A 172.16.102.11 (48) 08:46:46.806007 IP6 2001:db8:102::12.50257 > 2001:db8:102::254.53: 34728+ A? abc.org. (25) 08:46:46.806482 IP6 2001:db8:102::254.53 > 2001:db8:102::12.50257: 34728- 1/0/0 A 172.16.102.11 (48) 08:46:46.810917 IP6 fe80::2de:adff:fe01:101 > 2001:db8:102::254: ICMP6, neighbor solicitation, who has 2001:db8:102::254, length 32 08:46:46.811502 IP6 2001:db8:102::254 > fe80::2de:adff:fe01:101: ICMP6, neighbor advertisement, tgt is 2001:db8:102::254, length 32 08:46:51.811221 IP6 2001:db8:102::12.38529 > 2001:db8:102::254.53: 27956+ A? abc.org.localdomain. (37) 08:46:56.816346 IP6 2001:db8:102::12.38529 > 2001:db8:102::254.53: 27956+ A? abc.org.localdomain. (37) ping: abc.org: Name or service not known [root@localhost ~]# ping6 -c10 abc.org 08:48:39.284912 IP6 2001:db8:102::12.53408 > 2001:db8:102::254.53: 36782+ AAAA? abc.org. (25) 08:48:39.285432 IP6 2001:db8:102::254.53 > 2001:db8:102::12.53408: 36782- 1/0/0 AAAA 2001:db8:102::11 (60) 08:48:44.289996 IP6 2001:db8:102::12.53408 > 2001:db8:102::254.53: 36782+ AAAA? abc.org. (25) 08:48:44.290299 IP6 2001:db8:102::254.53 > 2001:db8:102::12.53408: 36782- 1/0/0 AAAA 2001:db8:102::11 (60) 08:48:44.298952 IP6 fe80::2de:adff:fe01:101 > 2001:db8:102::254: ICMP6, neighbor solicitation, who has 2001:db8:102::254, length 32 08:48:44.299438 IP6 2001:db8:102::254 > fe80::2de:adff:fe01:101: ICMP6, neighbor advertisement, tgt is 2001:db8:102::254, length 32 08:48:49.295221 IP6 2001:db8:102::12.45208 > 2001:db8:102::254.53: 10057+ AAAA? abc.org.localdomain. (37) 08:48:54.300322 IP6 2001:db8:102::12.45208 > 2001:db8:102::254.53: 10057+ AAAA? abc.org.localdomain. (37) ping: abc.org: Name or service not known [root@localhost ~]# Additional info: I have attached the pcap packet,please check it,thanks.