Re: [mpls-linux-general] UDP traffic problem
Status: Beta
Brought to you by:
jleu
From: Chris R. <Chr...@nr...> - 2008-02-14 01:30:10
|
James I dont think the push is the problem. First, it can't be removed based on how the LER needs to be configured. Remembering my network configuration is LER_1<->LSR<->LER_2, below is the CLI's MPLS commands for each router. Also, another test using "iperf -u" works, although performance is very poor, so it seems only dns and traceroute using udp are not working. Iperf output: [LER_1]# iperf -u -c 10.128.0.237 (NOTE this is LER_1 interface) ------------------------------------------------------------ Client connecting to 10.128.0.237, UDP port 5001 Sending 1470 byte datagrams UDP buffer size: 109 KByte (default) ------------------------------------------------------------ [ 3] local 10.128.0.14 port 32800 connected with 10.128.0.237 port 5001 [ 3] 0.0-10.0 sec 1.25 MBytes 1.05 Mbits/sec [ 3] Sent 893 datagrams [ 3] WARNING: did not receive ack of last datagram after 10 tries. [LER_2]# iperf -u -s ------------------------------------------------------------ Server listening on UDP port 5001 Receiving 1470 byte datagrams UDP buffer size: 109 KByte (default) ------------------------------------------------------------ [ 3] local 10.128.0.10 port 5001 connected with 10.128.0.14 port 32800 LER_1 /usr/sbin/mpls nhlfe add key 0 instructions push gen 2000 nexthop eth0 ipv4 10.128.0.9 /usr/sbin/ip route add 0.0.0.0/0 via 10.128.0.9 mpls 0x2 /usr/sbin/mpls labelspace set dev eth0 labelspace 0 /usr/sbin/mpls ilm add label gen 1001 labelspace 0 /usr/sbin/mpls nhlfe add key 0 instructions nexthop eth1 ipv4 10.128.0.238 /usr/sbin/mpls xc add ilm_label gen 1001 ilm_labelspace 0 nhlfe_key 0x3 LER_2 /usr/sbin/mpls nhlfe add key 0 instructions push gen 1000 nexthop eth1 ipv4 10.128.0.13 /usr/sbin/ip route add 10.128.143.0/24 via 10.128.0.13 mpls 0x2 /usr/sbin/ip route add 10.128.0.8/30 via 10.128.0.13 mpls 0x2 /usr/sbin/ip route add 10.128.0.236/30 via 10.128.0.13 mpls 0x2 /usr/sbin/mpls labelspace set dev eth1 labelspace 0 /usr/sbin/mpls ilm add label gen 2001 labelspace 0 /usr/sbin/mpls nhlfe add key 0 instructions nexthop eth0 ipv4 10.128.0.226 /usr/sbin/mpls xc add ilm_label gen 2001 ilm_labelspace 0 nhlfe_key 0x3 LSR mpls labelspace set dev eth1 labelspace 0 mpls ilm add label gen 1000 labelspace 0 mpls nhlfe add key 0 instructions push gen 1001 nexthop eth1 ipv4 10.128.0.10 mpls xc add ilm_label gen 1000 ilm_labelspace 0 nhlfe_key 0x2 mpls labelspace set dev eth0 labelspace 0 mpls ilm add label gen 2000 labelspace 0 mpls nhlfe add key 0 instructions push gen 2001 nexthop eth0 ipv4 10.128.0.14 mpls xc add ilm_label gen 2000 ilm_labelspace 0 nhlfe_key 0x3 James R. Leu wrote: > On Wed, Feb 13, 2008 at 10:02:44AM -0500, Chris Robson wrote: > >> Not familiar with the PHP implementation, let me collect up the test >> configuration and send it to you for advice on what you want. A test >> update, the problem seems, so far, to only manifest itself with dns and >> traceroute. An "iperf -u -c [target_ip}" test does not have a problem. >> > > PHP config example: > > mpls nhlfe add key 0 instructions nexthop eth0 ipv4 192.168.1.1 > (notice no push in the instructions) > > Then bind it to a route or netfilter rule like normal. > > Can you try 'traceroute -I' which sends ICMP not UDP packets. > > >> James R. Leu wrote: >> >>> I haven't seen it, but I can look into it. Can you try routing traffic >>> through the same boxes, but use PHP (ie NHLFE without push) at each hop >>> to see if that breaks it too? >>> >>> On Tue, Feb 12, 2008 at 06:22:25PM -0500, Chris Robson wrote: >>> >>> >>>> Anyone notice udp traffic problems through a LER<->LSR<->LER LSP? For >>>> example, if I attempt to issue the command "traceroute -n [target-ip]" >>>> the traceroute will fail. If I add the TCP switch, aka "traceroute -n -T >>>> [target-ip]", the trace works fine. Also, any nslookups fail, again >>>> because the lookup request are udp packets. Wireshark is showing >>>> checksum errors on the traceroute packets but I'm not sure that is >>>> causing the problem as the error maybe misleading. >>>> >>>> >>>> James R. Leu wrote: >>>> >>>> >>>>> If the goal is to use NFS as root filesystem all one needs to do is create >>>>> a initrd with the NFS modules, it is not required to build a kernel >>>>> with NFS statically included. >>>>> >>>>> The key to allowing this to happen is you need to make sure your >>>>> /etc/fstab has an entry for the root filesystem that spells out what NFS >>>>> resource to use. >>>>> >>>>> For example: >>>>> >>>>> 172.16.1.1:/my/nfs/root / nfs defaults 0 0 >>>>> >>>>> Then install the MPLS enabled kernel RPM and as part of that it builds >>>>> an initrd, and now that you have a fstab that indicates where to get root >>>>> from it should build you a nfs enabled initrd. >>>>> >>>>> On Sun, Feb 10, 2008 at 05:12:44PM +0200, Adrian Popa wrote: >>>>> >>>>> >>>>>> James, the original problem was that he needs NFS compiled into the kernel >>>>>> in order to boot and the binary kernel you provide has it as a module... >>>>>> >>>>>> On Feb 9, 2008 6:07 AM, James R. Leu <jl...@mi...> wrote: >>>>>> >>>>>> >>>>>> >>>>>>> I haven't really been following along with your setup, so excuse me >>>>>>> if I'm asking questions that you already answered. >>>>>>> >>>>>>> Why are you install SRPMs as opposed to the binary RPMs? If you're >>>>>>> on a different distribution and compiling them by hand, please include the >>>>>>> commands you used to do the compilation and installation. >>>>>>> >>>>>>> On Fri, Feb 08, 2008 at 06:45:09PM +0530, Bhartendu Maheshwari wrote: >>>>>>> >>>>>>> >>>>>>>> Hello All, >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> I have compiled and installed 2.6.22 mpls enabled >>>>>>>> kernel(kernel-2.6.22.5-76.fc7.mpls.1.958.src.rpm), and also installed >>>>>>>> the following packages:- >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> ebtables-2.0.8-1.fc7.mpls.1.958b.src.rpm >>>>>>>> >>>>>>>> iproute-2.6.20-2.fc7.mpls.1.958b.src.rpm >>>>>>>> >>>>>>>> iptables-1.3.8-2.1.fc7.mpls.1.958.src.rpm >>>>>>>> >>>>>>>> But unable to find mpls utility to configure system, please let me know >>>>>>>> if I am missing any package or any patch. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> System Information:- >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> [root@localhost linux-2.6.22]# cat /var/log/dmesg | grep MPLS >>>>>>>> >>>>>>>> MPLS: version 1.958 >>>>>>>> >>>>>>>> MPLS: protocol driver interface - <jl...@mi...> >>>>>>>> >>>>>>>> MPLS: IPv4 over MPLS support >>>>>>>> >>>>>>>> MPLS: Ethernet over MPLS support >>>>>>>> >>>>>>>> [root@localhost linux-2.6.22]# sysctl -A|grep os >>>>>>>> >>>>>>>> kernel.ostype = Linux >>>>>>>> >>>>>>>> kernel.osrelease = 2.6.22.5 >>>>>>>> >>>>>>>> kernel.hostname = localhost.localdomain >>>>>>>> >>>>>>>> net.core.message_cost = 5 >>>>>>>> >>>>>>>> net.ipv4.route.error_cost = 1000 >>>>>>>> >>>>>>>> net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60 >>>>>>>> >>>>>>>> net.netfilter.nf_conntrack_tcp_timeout_close = 10 >>>>>>>> >>>>>>>> net.netfilter.nf_conntrack_tcp_loose = 1 >>>>>>>> >>>>>>>> dev.cdrom.info = Can close tray: 1 >>>>>>>> >>>>>>>> dev.cdrom.autoclose = 1 >>>>>>>> >>>>>>>> [root@localhost linux-2.6.22]# >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Kernel Configuration enabled are:- >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> 1. >>>>>>>> >>>>>>>> In Networking Options the following items will be compiled in kernel : >>>>>>>> >>>>>>>> <*> Multiprotocol Label Switching >>>>>>>> >>>>>>>> <*> MPLS: Virtual tunnel interface >>>>>>>> >>>>>>>> <*> 802.1d Ethernet Bridging >>>>>>>> >>>>>>>> <*> Bridge: MPLS support >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> 2. >>>>>>>> >>>>>>>> In Bridge: Netfilter configuration menu the following minimum options >>>>>>>> will be selected: >>>>>>>> >>>>>>>> <*> Ethernet Bridge tables (ebtables) support >>>>>>>> >>>>>>>> <*> ebt: broute table support >>>>>>>> >>>>>>>> <*> ebt: filter table support >>>>>>>> >>>>>>>> <*> ebt: nat table support >>>>>>>> >>>>>>>> <*> ebt: 802.3 filter support >>>>>>>> >>>>>>>> <*> ebt: MPLS target support >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> 3. >>>>>>>> >>>>>>>> In Networking Options select QoS and fair queueing >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Thanks & Regards >>>>>>>> >>>>>>>> Bhartendu M. >>>>>>>> >>>>>>>> >>>>>>>> Conexant E-mail Firewall (Conexant.Com) made the following annotations >>>>>>>> --------------------------------------------------------------------- >>>>>>>> ********************** Legal Disclaimer **************************** >>>>>>>> >>>>>>>> "This email may contain confidential and privileged material for the >>>>>>>> >>>>>>>> >>>>>>> sole use of the intended recipient. Any unauthorized review, use or >>>>>>> distribution by others is strictly prohibited. If you have received the >>>>>>> message in error, please advise the sender by reply email and delete the >>>>>>> message. Thank you." >>>>>>> >>>>>>> >>>>>>>> ********************************************************************** >>>>>>>> >>>>>>>> --------------------------------------------------------------------- >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> ------------------------------------------------------------------------- >>>>>>> >>>>>>> >>>>>>>> This SF.net email is sponsored by: Microsoft >>>>>>>> Defy all challenges. Microsoft(R) Visual Studio 2008. >>>>>>>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >>>>>>>> _______________________________________________ >>>>>>>> mpls-linux-general mailing list >>>>>>>> mpl...@li... >>>>>>>> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general >>>>>>>> >>>>>>>> >>>>>>> -- >>>>>>> James R. Leu >>>>>>> jl...@mi... >>>>>>> >>>>>>> ------------------------------------------------------------------------- >>>>>>> This SF.net email is sponsored by: Microsoft >>>>>>> Defy all challenges. Microsoft(R) Visual Studio 2008. >>>>>>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >>>>>>> _______________________________________________ >>>>>>> mpls-linux-general mailing list >>>>>>> mpl...@li... >>>>>>> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>> >>>>> ------------------------------------------------------------------------ >>>>> >>>>> ------------------------------------------------------------------------- >>>>> This SF.net email is sponsored by: Microsoft >>>>> Defy all challenges. Microsoft(R) Visual Studio 2008. >>>>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >>>>> ------------------------------------------------------------------------ >>>>> >>>>> _______________________________________________ >>>>> mpls-linux-general mailing list >>>>> mpl...@li... >>>>> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general >>>>> >>>>> >>>> -- >>>> Christopher Robson >>>> Senior Computer Scientist, GS-15 >>>> Naval Research Laboratory >>>> Center for Computational Science >>>> Networking, Code 5591 >>>> 4555 Overlook ave. >>>> Washington, D.C. 20375-5320 >>>> (COM) 202-404-3138 >>>> (VoIP) 2024043138@GIGEF >>>> (CHAT) Chris.Robson@GIGEF >>>> >>>> >>>> ------------------------------------------------------------------------- >>>> This SF.net email is sponsored by: Microsoft >>>> Defy all challenges. Microsoft(R) Visual Studio 2008. >>>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >>>> _______________________________________________ >>>> mpls-linux-general mailing list >>>> mpl...@li... >>>> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general >>>> >>>> >>> ------------------------------------------------------------------------ >>> >>> ------------------------------------------------------------------------- >>> This SF.net email is sponsored by: Microsoft >>> Defy all challenges. Microsoft(R) Visual Studio 2008. >>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >>> ------------------------------------------------------------------------ >>> >>> _______________________________________________ >>> mpls-linux-general mailing list >>> mpl...@li... >>> https://lists.sourceforge.net/lists/listinfo/mpls-linux-general >>> >>> >> -- >> Christopher Robson >> Senior Computer Scientist, GS-15 >> Naval Research Laboratory >> Center for Computational Science >> Networking, Code 5591 >> 4555 Overlook ave. >> Washington, D.C. 20375-5320 >> (COM) 202-404-3138 >> (VoIP) 2024043138@GIGEF >> (CHAT) Chris.Robson@GIGEF >> >> > > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > ------------------------------------------------------------------------ > > _______________________________________________ > mpls-linux-general mailing list > mpl...@li... > https://lists.sourceforge.net/lists/listinfo/mpls-linux-general > -- Christopher Robson Senior Computer Scientist, GS-15 Naval Research Laboratory Center for Computational Science Networking, Code 5591 4555 Overlook ave. Washington, D.C. 20375-5320 (COM) 202-404-3138 (VoIP) 2024043138@GIGEF (CHAT) Chris.Robson@GIGEF |