some flows stuck in vrouter forever
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
R3.0 |
Fix Committed
|
High
|
Prabhjot Singh Sethi | |||
Trunk |
Fix Committed
|
High
|
Prabhjot Singh Sethi |
Bug Description
R3.0.2.0 Build 26 Ubuntu 14.04 Kilo
Between 10.1.1.3 and 10.1.1.4, was sending scapy traffic as below.
After few mins, it was stopped.
send(fuzz(
Later, it was seen that few flows were stuck in vrouter forever and not aged out
Many more flows were not aged out in agent as well
On nodel7, below flow without a reverse flow was stuck forever
==========
Index Source:
-------
817364<=>4193380 10.1.1.3:14283 6 (1)
(Gen: 6, K(nh):16, Action:F, Flags:, TCP:, S(nh):22, Stats:0/0, SPort 57301)
On nodel4, similar thing :
Index Source:
-------
2137948<=>3118804 10.1.1.3:2165 6 (1)
(Gen: 5, K(nh):16, Action:F, Flags:, TCP:, S(nh):16, Stats:0/0, SPort 49530)
2884188<=>1342742 10.1.1.4:42181 6 (1)
(Gen: 2, K(nh):16, Action:F, Flags:, TCP:, S(nh):22, Stats:0/0, SPort 61719)
-----------------
gcore of agent is in nodel7:
summary: |
- some flows stuck in agent and vrouter forever + some flows stuck in vrouter forever |
Changed in juniperopenstack: | |
milestone: | r3.0.1.0 → none |
Even without fuzzed scapy traffic, long term hping port-scan tests also seem to be resulting in this :
4186620<=>3691752 10.1.1.64:22 6 (1)
10. 1.1.17: 6202
(Gen: 156, K(nh):63, Action:F, Flags:, TCP:Sr, S(nh):63, Stats:0/0, SPort 55361)
4187784<=>2991652 10.1.1.76:22 6 (1)
10. 1.1.59: 6091
(Gen: 126, K(nh):78, Action:D(NoDstRt), Flags:, TCP:Sr, S(nh):2, Stats:0/0, SPort 50050)
4189732<=>4004520 10.1.1.76:22 6 (1)
10. 1.1.61: 3706
(Gen: 113, K(nh):58, Action:F, Flags:, TCP:Sr, S(nh):51, Stats:0/0, SPort 62374)
4190812<=>1732228 10.1.1.76:22 6 (1)
10. 1.1.59: 4999
(Gen: 114, K(nh):78, Action:F, Flags:, TCP:Sr, S(nh):51, Stats:0/0, SPort 54255)
4192020<=>2778592 10.1.1.76:22 6 (1)
10. 1.1.61: 4751
(Gen: 124, K(nh):58, Action:D(NoDstRt), Flags:, TCP:Sr, S(nh):2, Stats:0/0, SPort 54154)
4192500<=>3842844 10.1.1.79:22 6 (1)
10. 1.1.60: 4311
(Gen: 108, K(nh):16, Action:F, Flags:, TCP:Sr, S(nh):51, Stats:0/0, SPort 61081)
4196424<=>3064736 10.1.1.59:22 6 (1)
10. 1.1.20: 5430
(Gen: 67, K(nh):78, Action:F, Flags:, TCP:Sr, S(nh):78, Stats:0/0, SPort 56493)
4199000<=>2231804 10.1.1.94:22 6 (1)
10. 1.1.62: 5942
(Gen: 125, K(nh):83, Action:F, Flags:, TCP:Sr, S(nh):53, Stats:0/0, SPort 64109)