Re: Linux IPV6 TCP egress path device passed for LOCAL_OUT hook is incorrect

2020-12-03 Thread Preethi Ramachandra
Thanks David for the response. Our local kernel doesn’t have vrf_ip6_out_direct patch. I will pick this change from upstream to fix the firewall issue. Thanks, Preethi On 03/12/20, 5:42 AM, "David Ahern" wrote: [External Email. Be cautious of content] On 12/2/20 4:31 A

Linux IPV6 TCP egress path device passed for LOCAL_OUT hook is incorrect

2020-12-02 Thread Preethi Ramachandra
Hi David Ahren, In TCP egress path for ipv6 the device passed to NF_INET_LOCAL_OUT hook should be skb_dst(skb)->dev instead of dst->dev. https://elixir.bootlin.com/linux/latest/source/net/ipv6/ip6_output.c#L202 struct dst_entry *dst = skb_dst(skb); >>> This may return slave device. In this code

ICMPV6 param problem with new error code 3 for first fragment not having valid upper layer header

2020-05-11 Thread Preethi Ramachandra
As per is_ineligible implementation in net/ipv6/icmp.c. If the incoming icmp is an error or is truncated, responses will not be sent out. RFC8200 and RFC 7112 states the following: “If the first fragment does not include all headers through an Upper-Layer header, then that fragme

Query regarding IPV6 multipath (ECMP) routes in Linux

2019-04-15 Thread Preethi Ramachandra
Hi, I want to understand the IPV4 and IPV6 multipath(ECMP) routes behaviour in Linux. I tried configuring IPV4 and IPV6 multipath routes on Linux using ip route add command. Linux versions used in this testing are 1. Linux Kernel: 3.14.52-rt50-WR7.0.0.9_ovp 2. Linux Kernel: 4.8.28-WR2.2.1_s

Re: Query regarding IPV6 multipath (ECMP) routes in Linux

2019-04-15 Thread Preethi Ramachandra
+ Reji On 15/04/19, 3:02 PM, "Preethi Ramachandra" wrote: Hi, I want to understand the IPV4 and IPV6 multipath(ECMP) routes behaviour in Linux. I tried configuring IPV4 and IPV6 multipath routes on Linux using ip route add command. Linux versions used in th