-
Notifications
You must be signed in to change notification settings - Fork 751
Open
Description
Hello, I've been trying to setup DPVS in FNAT 2 arm mode on my lab, and I encountered issues for my DNS packets, error down below.
My infrastructure is as follows:
[Client: 10.80.1.3] ----- [DPVS [DPDK0: 10.80.0.11] ----- [DPDK1: 192.168.93.204] ] ----- [DNS RS: 192.168.93.220]
Here is the ipvs config:
# ./ipvsadm -ln
IP Virtual Server version 1.10.1 (size=0)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 10.80.1.11:53 rr
-> 192.168.93.220:53 FullNat 1 0 0
UDP 10.80.1.11:53 rr
-> 192.168.93.220:53 FullNat 1 0 0
If I do from my client dig google.com @10.80.1.11 A +tcp, I get my answer with no issues, but when I run dig google.com @10.80.1.11 A, My query comes out of dpvs completely modified. I activated forward2kni in order to debug and here is what i see:
# tcpdump -i dpdk0.kni
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on dpdk0.kni, link-type EN10MB (Ethernet), snapshot length 262144 bytes
15:51:36.812193 IP 10.80.1.3.26376 > 10.80.1.11.domain: 55811+ [1au] A? google.com. (51)
# tcpdump -i dpdk1.kni -n
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on dpdk1.kni, link-type EN10MB (Ethernet), snapshot length 262144 bytes
15:52:54.683360 IP 192.168.93.204 > 192.168.93.220: ip-proto-248 71
15:52:54.684018 IP 192.168.93.220 > 192.168.93.204: ICMP 192.168.93.220 protocol 248 unreachable, length 99
I was able to make the UDP DNS requests work using DPVS in DSR 1arm, is there an issue with the FNAT 2arm for UDP DNS requests ?
Metadata
Metadata
Assignees
Labels
No labels