RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1105189 - HTTP request generated by gPXE has wrong TCP flag (SYN & PSH) in first packet in session
Summary: HTTP request generated by gPXE has wrong TCP flag (SYN & PSH) in first packet...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: gpxe
Version: 6.5
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Alex Williamson
QA Contact: Virtualization Bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-06-05 14:31 UTC by Przemyslaw Sztoch
Modified: 2014-10-14 08:06 UTC (History)
8 users (show)

Fixed In Version: gpxe-0.9.7-6.11.el6
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-10-14 08:06:32 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2014:1574 0 normal SHIPPED_LIVE gpxe bug fix update 2014-10-14 01:27:29 UTC

Description Przemyslaw Sztoch 2014-06-05 14:31:10 UTC 
Description of problem:
HTTP request generated by gPXE has wrong TCP flag (SYN & PSH) in first packet in session. It is important, if we use firewall (ie. Juniper or Cisco). TCP packet flow is blocked and HTTP module integrated with gPXE is not working.

Version-Release number of selected component (if applicable):
gpxe-roms-qemu.noarch 0.9.7-6.10.el6

How reproducible:
Try use gPXE in KVM (libvirt) machine and use any command with http protocol.


Expected results:
Please, do not set PSH in first packet in TCP session to HTTP server.

Additional info:
http://comments.gmane.org/gmane.network.etherboot.user/6567

Fragment from my virsh domain XML definition:
<domain type='kvm'>
  <name>test</name>
  <memory unit='KiB'>4194304</memory>
  <vcpu placement='static'>2</vcpu>
  <os>
    <type arch='x86_64' machine='rhel6.4.0'>hvm</type>
    <boot dev='network'/>
    <bios useserial='yes'/>
  </os>
....
Comment 2 Ademar Reis 2014-06-05 17:12:19 UTC 
Przemyslaw, thank you for taking the time to enter a bug report with us. We appreciate the feedback and look to use reports such as this to guide our efforts at improving our products. That being said, we're not able to guarantee the timeliness or suitability of a resolution for issues entered here because this is not a mechanism for requesting support.

If this issue is critical or in any way time sensitive, please raise a ticket
through your regular Red Hat support channels to make certain  it receives the
proper attention and prioritization to assure a timely resolution.

For information on how to contact the Red Hat production support team, please
visit: https://www.redhat.com/support/process/production/#howto
Comment 3 Alex Williamson 2014-06-05 17:58:18 UTC 
Przemyslaw,

Can you please test whether the following package resolves this issue?

http://people.redhat.com/~alwillia/bz1105189/gpxe-roms-qemu-0.9.7-6.10.aw1.el6.noarch.rpm

This package is for testing purposes only.
Comment 4 Przemyslaw Sztoch 2014-06-06 07:54:51 UTC 
Alex,

It is the fastest bug fix in my RHEL history ;-)

HTTP works perfectly.

Thanks a lot. Issue is resolved.
Comment 8 Alex Williamson 2014-06-06 16:29:35 UTC 
(In reply to Przemyslaw Sztoch from comment #4)
> Alex,
> 
> It is the fastest bug fix in my RHEL history ;-)
> 
> HTTP works perfectly.
> 
> Thanks a lot. Issue is resolved.

Thanks for testing!
Comment 9 Jeff Nelson 2014-06-19 13:42:24 UTC 
Fix included in gpxe-0.9.7-6.11.el6
Comment 12 Qian Guo 2014-07-04 05:26:35 UTC 
Reproduce this bug with gpxe-roms-qemu-0.9.7-6.10.el6.noarch

Steps as comment 6
Cli:

# /usr/libexec/qemu-kvm -cpu host -rtc base=localtime,clock=host,driftfix=slew -M pc -nodefaults -nodefconfig -enable-kvm -name rhel6-64 -smp 4,cores=4,threads=1,sockets=1 -m 4G -boot menu=on  -netdev tap,id=hostnet0,script=/etc/qemu-ifup -device e1000,netdev=hostnet0,id=net0,mac=52:54:00:01:1a:10 -vnc :10 -vga std  -monitor stdio -S -device sga -serial stdio

From the tcpdump reslult, capture the 1st package

...
01:07:06.562908 IP (tos 0x0, ttl 64, id 7, offset 0, flags [none], proto TCP (6), length 56)
    10.66.10.247.1024 > 72.52.4.91.http: Flags [SP], cksum 0xf06d (correct), seq 784182161, win 4096, options [nop,nop,TS val 73266 ecr 0,mss 1460], length 0
...

Result:
The first package shows it is set with SYN and PSH, so this bug is reproduced.


Verify this bug with gpxe-roms-qemu-0.9.7-6.11.el6.noarch

cli:
# /usr/libexec/qemu-kvm -cpu host -rtc base=localtime,clock=host,driftfix=slew -M pc -nodefaults -nodefconfig -enable-kvm -name rhel6-64 -smp 4,cores=4,threads=1,sockets=1 -m 4G -boot menu=on  -netdev tap,id=hostnet0,script=/etc/qemu-ifup -device e1000,netdev=hostnet0,id=net0,mac=52:54:00:01:1a:10 -vnc :10 -vga std  -monitor stdio -S -device sga -serial stdio



From the tcpdump reslult, capture the 1st package

...
01:24:24.664232 IP (tos 0x0, ttl 64, id 7, offset 0, flags [none], proto TCP (6), length 56)
    10.66.10.247.1024 > 10.66.78.204.http: Flags [S], cksum 0x070b (correct), seq 1540886915, win 4096, options [nop,nop,TS val 92177 ecr 0,mss 1460], length 0
....

Result:
The first package shows it is set with SYN only, so this bug is verified.
Comment 14 errata-xmlrpc 2014-10-14 08:06:32 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1574.html
Note You need to log in before you can comment on or make changes to this bug.