The FDP team is no longer accepting new bugs in Bugzilla. Please report your issues under FDP project in Jira. Thanks.
Bug 2137754 - [CT] Inner header of ICMP related traffic does not get DNATed
Summary: [CT] Inner header of ICMP related traffic does not get DNATed
Keywords:
Status: VERIFIED
Alias: None
Product: Red Hat Enterprise Linux Fast Datapath
Classification: Red Hat
Component: openvswitch3.0
Version: FDP 22.E
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: ---
Assignee: Ales Musil
QA Contact: Jiying Qiu
URL:
Whiteboard:
Depends On:
Blocks: 2126083
TreeView+ depends on / blocked
 
Reported: 2022-10-26 06:16 UTC by Ales Musil
Modified: 2023-07-13 07:25 UTC (History)
6 users (show)

Fixed In Version: openvswitch3.0-3.0.0-31.el9fdp
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
Reproducer (3.01 KB, application/x-shellscript)
2022-10-26 06:16 UTC, Ales Musil 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FD-2405 0 None None None 2022-10-26 06:39:57 UTC

Description Ales Musil 2022-10-26 06:16:57 UTC 
Created attachment 1920425 [details]
Reproducer

Description of problem:
When we have a ICMP related message from different source address the inner header does not get DNATed. 

How reproducible:
100%

Steps to Reproduce:
1. Run the reproducer script


Actual results:
06:09:43.044558 00:00:00:00:20:00 > 00:00:00:00:10:20, ethertype IPv4 (0x0800), length 70: (tos 0x0, ttl 255, id 287, offset 0, flags [none], proto ICMP (1), length 56)
    192.168.20.1 > 192.168.10.20: ICMP 192.168.20.10 unreachable - need to frag (mtu 1400), length 36
	(tos 0x0, ttl 10, id 0, offset 0, flags [DF], proto UDP (17), length 28)
    192.168.20.20.2 > 192.168.20.10.1: UDP, length 0


Expected results:
06:09:43.044558 00:00:00:00:20:00 > 00:00:00:00:10:20, ethertype IPv4 (0x0800), length 70: (tos 0x0, ttl 255, id 287, offset 0, flags [none], proto ICMP (1), length 56)
    192.168.20.1 > 192.168.10.20: ICMP 192.168.20.10 unreachable - need to frag (mtu 1400), length 36
	(tos 0x0, ttl 10, id 0, offset 0, flags [DF], proto UDP (17), length 28)
    192.168.10.20.2 > 192.168.20.10.1: UDP, length 0
Comment 1 Ales Musil 2022-10-27 09:16:04 UTC 
Patch posted: https://patchwork.ozlabs.org/project/openvswitch/patch/20221027091413.173848-1-amusil@redhat.com/
Comment 3 Ales Musil 2023-05-16 13:06:54 UTC 
Sorry the BZ was originally opened for wrong component. The fix is in, there is also 2.17 clone: https://bugzilla.redhat.com/show_bug.cgi?id=2178200
Comment 4 Jiying Qiu 2023-05-18 03:39:34 UTC 
Verified on openvswitch3.0-3.0.0-31.el9fdp.x86_64. Use the reproducer attached.


23:28:08.107642 00:00:00:00:20:00 > 00:00:00:00:10:20, ethertype IPv4 (0x0800), length 70: (tos 0x0, ttl 255, id 287, offset 0, flags [none], proto ICMP (1), length 56)
    192.168.20.1 > 192.168.10.20: ICMP 192.168.20.10 unreachable - need to frag (mtu 1400), length 36
	(tos 0x0, ttl 10, id 0, offset 0, flags [DF], proto UDP (17), length 28)
    192.168.10.20.2 > 192.168.20.10.1: UDP, length 0
Note You need to log in before you can comment on or make changes to this bug.