From owner-freebsd-stable@FreeBSD.ORG Wed Dec 19 15:02:53 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 28EC3FCD for ; Wed, 19 Dec 2012 15:02:53 +0000 (UTC) (envelope-from h.schmalzbauer@omnilan.de) Received: from host.omnilan.net (s1.omnilan.net [62.245.232.135]) by mx1.freebsd.org (Postfix) with ESMTP id 773D28FC0A for ; Wed, 19 Dec 2012 15:02:49 +0000 (UTC) Received: from titan.inop.wdn.omnilan.net (titan.inop.wdn.omnilan.net [172.21.3.1]) (authenticated bits=0) by host.omnilan.net (8.13.8/8.13.8) with ESMTP id qBJF76QJ064671 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 19 Dec 2012 16:07:07 +0100 (CET) (envelope-from h.schmalzbauer@omnilan.de) Message-ID: <50D1D717.1010203@omnilan.de> Date: Wed, 19 Dec 2012 16:02:47 +0100 From: Harald Schmalzbauer Organization: OmniLAN User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; de-DE; rv:1.9.2.8) Gecko/20100906 Lightning/1.0b2 Thunderbird/3.1.2 MIME-Version: 1.0 To: =?ISO-8859-1?Q?G=F6ran_L=F6wkrantz?= Subject: Re: FIB and jail regression [Was: can't reach jails own ipv4 from inside anymore] References: <50D1A2B2.6040204@omnilan.de> <50D1AB6A.402@omnilan.de> <50D1B7A2.5090909@omnilan.de> <7CCE5A5478927C3E39258898@[172.16.2.50]> In-Reply-To: <7CCE5A5478927C3E39258898@[172.16.2.50]> X-Enigmail-Version: 1.1.2 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig3B3D57B102CC94FA758799F4" Cc: freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 15:02:53 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig3B3D57B102CC94FA758799F4 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable schrieb G=F6ran L=F6wkrantz am 19.12.2012 14:44 (localtime): > > > --On December 19, 2012 13:48:34 +0100 Harald Schmalzbauer > wrote: > >> schrieb Harald Schmalzbauer am 19.12.2012 12:56 (localtime): >>> ... >>>> >>>> I have more oddities I wanted to check with jails and lagg-interface= s >>>> together with VLANs, but I have no idea why I can't connect from one= >>>> jail to it's own IP(v4) anymore! >>> Found out that defining a different FIB causes that behaviour in 9.1.= >>> But using a different FIB doesn't caus the same in 8.2! >> >> Easiest way to reproduce: >> >> Just do a ping on the host (not jail) >> >> setfib 0 ping anyLocalIP -> works >> setfib 1 ping anyLocalIP -> doesn't work >> >> Anybody with 9.1 and ROUTINGTABLES in custom kernel out there who can'= t >> confirm that? >> >> Turned out that 9.0-stable from Feb. 2012 doesn't show that problem. >> So this problem seems to be introdued between 9.0 and 9.1. >> Thanks, >> >> -Harry >> >> > Works for me: > # uname -a > FreeBSD 9.1-PRERELEASE r243951: Fri Dec 7 02:29:14 CET 2012 > # sysctl -a | grep fib > net.my_fibnum: 0 > net.add_addr_allfibs: 1 > net.fibs: 2 > > # ifconfig sis1 > sis1: flags=3D8843 metric 0 mtu= > 1500 > options=3D83808 > ... > inet 176.57.193.193 netmask 0xfffffff0 broadcast 176.57.193.207 > .... > media: Ethernet autoselect (100baseTX ) > status: active > > # setfib 0 ping 176.57.193.193 > PING 176.57.193.193 (176.57.193.193): 56 data bytes > 64 bytes from 176.57.193.193: icmp_seq=3D0 ttl=3D64 time=3D0.497 ms > 64 bytes from 176.57.193.193: icmp_seq=3D1 ttl=3D64 time=3D0.481 ms > ^C > --- 176.57.193.193 ping statistics --- > 2 packets transmitted, 2 packets received, 0.0% packet loss > round-trip min/avg/max/stddev =3D 0.481/0.489/0.497/0.008 ms > # setfib 1 ping 176.57.193.193 > PING 176.57.193.193 (176.57.193.193): 56 data bytes > 64 bytes from 176.57.193.193: icmp_seq=3D0 ttl=3D64 time=3D0.912 ms > 64 bytes from 176.57.193.193: icmp_seq=3D1 ttl=3D64 time=3D0.650 ms > ^C > --- 176.57.193.193 ping statistics --- > 2 packets transmitted, 2 packets received, 0.0% packet loss > round-trip min/avg/max/stddev =3D 0.650/0.781/0.912/0.131 ms > > I have no kernel with both VIMAGE and ROUTINGTABLES so can test that, > this has ROUTINGTABLES 2 I don't have vimage either. Thanks a lot for your feedback! That brought one more perception: The problem only affects alias addresse= s! I took a different machine and also couldn't reproduce the problem first.= The I added an additional inet alias -> The problem initially described occurs. That's why my jail setu stopped working -> all Addresses ar alias adderss= es. Any help highly appreziated! -Harry --------------enig3B3D57B102CC94FA758799F4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) iEYEARECAAYFAlDR1xcACgkQLDqVQ9VXb8gyqgCgvEPkPltZ8DE1Z0OQQHvDGQQt Rj0AnjGjrg7gs65o5lGfho5x2/Tkakb6 =hEt6 -----END PGP SIGNATURE----- --------------enig3B3D57B102CC94FA758799F4--