3.0.2-51:ICMP TTL Expire is being answered by vRouter underlay IP

Bug #1616430 reported by Sandeep Sridhar
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R3.0
Fix Committed
Medium
RAVI KIRAN
R3.1
Fix Committed
Medium
RAVI KIRAN
R3.2
Fix Committed
Medium
RAVI KIRAN
Trunk
Fix Committed
Medium
RAVI KIRAN

Bug Description

When VM1 does a traceroute to VM2, I see that the first set of 3 UDP packets with TTL = 1 is being answered by vRouter with its own IP address instead of GW IP Address.

VM2 = 40.40.40.3
VM1 = 30.30.30.3

ifcoroot@kingfisher:~# ifconfig vhost0
vhost0 Link encap:Ethernet HWaddr f8:bc:12:33:43:30
          inet addr:10.204.74.4 Bcast:10.204.74.255 Mask:255.255.255.0
          inet6 addr: fe80::fabc:12ff:fe33:4330/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:2395222 errors:0 dropped:8 overruns:0 frame:0
          TX packets:1746387 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1343437964 (1.3 GB) TX bytes:2055102562 (2.0 GB)

Please see below:

ubuntu@ubuntu:~$ traceroute 40.40.40.3
traceroute to 40.40.40.3 (40.40.40.3), 30 hops max, 60 byte packets
1 kingfisher.juniper.net (10.204.74.4) 3.588 ms 4.667 ms 3.547 ms
2 30.30.30.4 (30.30.30.4) 5.642 ms 5.580 ms 5.563 ms
3 40.40.40.3 (40.40.40.3) 5.406 ms 8.606 ms 8.576 ms

Please note, this is a service chain scenario and both VMs and vSRX are on the same compute.

I think for a customer VM, the underlay should not be visible and hence the VM should not see the IP-Fabric details.

Please fix it such that vRouter responds back with GW IP instead of its own IP.

Greetings,
Sandeep.

Tags: vrouter
information type: Proprietary → Public
tags: added: vrouter
Changed in juniperopenstack:
assignee: nobody → Hari Prasad Killi (haripk)
importance: Undecided → Medium
Changed in juniperopenstack:
assignee: Hari Prasad Killi (haripk) → RAVI KIRAN (ravibk)
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/25363
Submitter: RAVI KIRAN (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/25363
Committed: http://github.org/Juniper/contrail-controller/commit/e6883b061f84532d89f2d3f97a98c0cff32358ed
Submitter: Zuul
Branch: master

commit e6883b061f84532d89f2d3f97a98c0cff32358ed
Author: Ravi BK <email address hidden>
Date: Wed Oct 26 15:08:44 2016 +0530

Icmp ttl expire to be answered with gw ip

For traceroute requests from vm, when ttl expires for them, Agent diag
module should respond with gateway address of network. Currently,
agent is responding with its underlay Ip address. This is modified
by responding with gateway address for traceroute requests.

Change-Id: Iee194c4f46b38f5acc1b7618a7ce770a3cd058a4
Closes-Bug: #1616430

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.2

Review in progress for https://review.opencontrail.org/30237
Submitter: Hari Prasad Killi (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.1

Review in progress for https://review.opencontrail.org/30238
Submitter: Hari Prasad Killi (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.0

Review in progress for https://review.opencontrail.org/30239
Submitter: Hari Prasad Killi (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/30237
Committed: http://github.org/Juniper/contrail-controller/commit/070328c88bc03f7b000ee40723cd23883cfa2191
Submitter: Zuul (<email address hidden>)
Branch: R3.2

commit 070328c88bc03f7b000ee40723cd23883cfa2191
Author: Ravi BK <email address hidden>
Date: Wed Oct 26 15:08:44 2016 +0530

Icmp ttl expire to be answered with gw ip

For traceroute requests from vm, when ttl expires for them, Agent diag
module should respond with gateway address of network. Currently,
agent is responding with its underlay Ip address. This is modified
by responding with gateway address for traceroute requests.

Change-Id: Iee194c4f46b38f5acc1b7618a7ce770a3cd058a4
Closes-Bug: #1616430
(cherry picked from commit e6883b061f84532d89f2d3f97a98c0cff32358ed)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/30238
Committed: http://github.org/Juniper/contrail-controller/commit/3d17545a7404c99fb80f55fbe0ef82f0b61a6323
Submitter: Zuul (<email address hidden>)
Branch: R3.1

commit 3d17545a7404c99fb80f55fbe0ef82f0b61a6323
Author: Ravi BK <email address hidden>
Date: Wed Oct 26 15:08:44 2016 +0530

Icmp ttl expire to be answered with gw ip

For traceroute requests from vm, when ttl expires for them, Agent diag
module should respond with gateway address of network. Currently,
agent is responding with its underlay Ip address. This is modified
by responding with gateway address for traceroute requests.

Change-Id: Iee194c4f46b38f5acc1b7618a7ce770a3cd058a4
Closes-Bug: #1616430
(cherry picked from commit e6883b061f84532d89f2d3f97a98c0cff32358ed)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.0

Review in progress for https://review.opencontrail.org/30239
Submitter: Hari Prasad Killi (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/30239
Committed: http://github.org/Juniper/contrail-controller/commit/982670447f08013cf4e55926c01525ce60a283ad
Submitter: Zuul (<email address hidden>)
Branch: R3.0

commit 982670447f08013cf4e55926c01525ce60a283ad
Author: Ravi BK <email address hidden>
Date: Wed Oct 26 15:08:44 2016 +0530

Icmp ttl expire to be answered with gw ip

For traceroute requests from vm, when ttl expires for them, Agent diag
module should respond with gateway address of network. Currently,
agent is responding with its underlay Ip address. This is modified
by responding with gateway address for traceroute requests.

Change-Id: Iee194c4f46b38f5acc1b7618a7ce770a3cd058a4
Closes-Bug: #1616430
(cherry picked from commit e6883b061f84532d89f2d3f97a98c0cff32358ed)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.