Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Description of problem: ftp can work even if alg is not configured Version-Release number of selected component (if applicable): ovs_version: "2.8.0" [root@dell-per730-18 conntrack_dpdk]# uname -a Linux dell-per730-18.rhts.eng.pek2.redhat.com 3.10.0-693.el7.gcov.x86_64 #1 SMP Tue Jul 11 01:39:56 EDT 2017 x86_64 x86_64 x86_64 GNU/Linux [root@dell-per730-18 conntrack_dpdk]# How reproducible: everytime topo: the ip of vm is 10.167.45.1, ip of remote host's nic is 10.167.45.2. Remote try to use ftp to connect 10.167.45.1 directly. 10.167.45.1 10.167.45.2 +--------+ +------+ | vm--ovs+------------+remote| +--------+ +------+ Steps to Reproduce: 1.create ovs in host,add dpdk0 and vhost to ovs. create guest with vhost0 2.configure flows on ovs 3.ftp from remote to local. Actual results: ftp can work even if alg is not configured Expected results: ftp can't work if alg is not configured log: [root@dell-per730-18 conntrack_dpdk]# dpdk-devbind -s Network devices using DPDK-compatible driver ============================================ 0000:06:00.0 '82599ES 10-Gigabit SFI/SFP+ Network Connection' drv=vfio-pci unused=ixgbe Network devices using kernel driver =================================== 0000:01:00.0 'NetXtreme BCM5720 Gigabit Ethernet PCIe' if=em1 drv=tg3 unused=vfio-pci 0000:01:00.1 'NetXtreme BCM5720 Gigabit Ethernet PCIe' if=em2 drv=tg3 unused=vfio-pci 0000:02:00.0 'NetXtreme BCM5720 Gigabit Ethernet PCIe' if=em3 drv=tg3 unused=vfio-pci 0000:02:00.1 'NetXtreme BCM5720 Gigabit Ethernet PCIe' if=em4 drv=tg3 unused=vfio-pci 0000:04:00.0 'MT26448 [ConnectX EN 10GigE, PCIe 2.0 5GT/s]' if=p6p2,p6p1 drv=mlx4_core unused=vfio-pci 0000:06:00.1 '82599ES 10-Gigabit SFI/SFP+ Network Connection' if=p7p2 drv=ixgbe unused=vfio-pci Other network devices ===================== <none> Crypto devices using DPDK-compatible driver =========================================== <none> Crypto devices using kernel driver ================================== <none> Other crypto devices ==================== <none> [root@dell-per730-18 conntrack_dpdk]# [root@dell-per730-18 conntrack_dpdk]# virsh console g1 Connected to domain g1 Escape character is ^] [root@localhost ~]# ip add 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:00:00:01:03:01 brd ff:ff:ff:ff:ff:ff inet6 fe80::200:ff:fe01:301/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:00:00:01:04:01 brd ff:ff:ff:ff:ff:ff inet 10.167.45.1/24 scope global eth1 valid_lft forever preferred_lft forever inet6 2001:db8:ffff:45::1/64 scope global valid_lft forever preferred_lft forever [root@localhost ~]# [root@dell-per730-18 conntrack_dpdk]# ovs-ofctl show ovs-ofctl: 'show' command requires at least 1 arguments [root@dell-per730-18 conntrack_dpdk]# ovs-vsctl show 0b1eb18c-370c-417f-a954-6dbddfb8c81c Bridge "ovsbr0" Port "vhost1" Interface "vhost1" type: dpdkvhostuser options: {n_rxq="1"} Port "ovsbr0" Interface "ovsbr0" type: internal Port "dpdk0" Interface "dpdk0" type: dpdk options: {dpdk-devargs="0000:06:00.0", n_rxq="1"} Port "vhost0" Interface "vhost0" type: dpdkvhostuser options: {n_rxq="1"} Port "vhost2" Interface "vhost2" type: dpdkvhostuser options: {n_rxq="1"} ovs_version: "2.8.0" [root@dell-per730-18 conntrack_dpdk] [root@dell-per730-18 conntrack_dpdk]# ovs-ofctl dump-flows ovsbr0 cookie=0x0, duration=437.023s, table=0, n_packets=146, n_bytes=32781, priority=100,ct_state=-trk,ip actions=ct(table=1) cookie=0x0, duration=437.027s, table=0, n_packets=27, n_bytes=1630, priority=10,arp actions=NORMAL cookie=0x0, duration=437.030s, table=0, n_packets=778, n_bytes=98411, priority=1 actions=drop cookie=0x0, duration=437.019s, table=1, n_packets=2, n_bytes=148, ct_state=+new+trk,tcp,in_port=dpdk0,tp_dst=21 actions=ct(commit),output:vhost0 cookie=0x0, duration=437.016s, table=1, n_packets=2, n_bytes=148, ct_state=+new+rel+trk,ip,in_port=dpdk0 actions=ct(commit),output:vhost0 cookie=0x0, duration=437.012s, table=1, n_packets=0, n_bytes=0, ct_state=+new+rel+trk,ip,in_port=vhost0 actions=ct(commit),output:dpdk0 cookie=0x0, duration=437.008s, table=1, n_packets=30, n_bytes=2076, ct_state=+est+trk,ip,in_port=dpdk0 actions=output:vhost0 cookie=0x0, duration=437.004s, table=1, n_packets=32, n_bytes=2729, ct_state=+est+trk,ip,in_port=vhost0 actions=output:dpdk0 [root@dell-per730-18 conntrack_dpdk]# [root@dell-per730-18 conntrack_dpdk]# ovs-appctl dpctl/dump-conntrack tcp,orig=(src=10.167.45.2,dst=10.167.45.1,sport=53774,dport=21),reply=(src=10.167.45.1,dst=10.167.45.2,sport=21,dport=53774),protoinfo=(state=ESTABLISHED) tcp,orig=(src=10.167.45.2,dst=10.167.45.1,sport=39075,dport=48030),reply=(src=10.167.45.1,dst=10.167.45.2,sport=48030,dport=39075),protoinfo=(state=TIME_WAIT) [root@dell-per730-18 conntrack_dpdk]# remote: [root@dell-per730-20 conntrack_dpdk]# ftp 10.167.45.1 Connected to 10.167.45.1 (10.167.45.1). 220 (vsFTPd 3.0.2) Name (10.167.45.1:root): anonymous 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 227 Entering Passive Mode (10,167,45,1,187,158). 150 Here comes the directory listing. drwxr-xr-x 2 0 0 6 Mar 23 14:01 pub 226 Directory send OK. ftp> ftp> ftp> exit Additional info: