Date: Fri, 17 Mar 2023 07:23:59 +0100 From: Matthias Pfaller <leo@marco.de> To: stable@freebsd.org Subject: Re: Fwd: Kernel DHCP unpredictable/fails (PXE boot), userspace DHCP works just fine Message-ID: <0b95a502-eea0-46cc-5d0d-ec6e861ad51f@marco.de> In-Reply-To: <CAM2hQG-oDRsoccg3S1LykyUF=joWbdJz=GSPOnUroDRxjZ2_iQ@mail.gmail.com> References: <CAM2hQG-p=bfSh_nxuah9zcTBbz7HQ9pYyvOR2f6rC=CUGePKsg@mail.gmail.com> <CAM2hQG-oDRsoccg3S1LykyUF=joWbdJz=GSPOnUroDRxjZ2_iQ@mail.gmail.com>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
On 2023-03-16 21:44, Attila Nagy wrote:
> Hi,
>
> As this is super annoying, I'm willing to pay a $500 bounty for solving this issue
> (whomever is first, however I don't anticipate a big competition :) Having an invoice
> would be best, but I'm willing to accept individuals as well).
> I can't give remote access, but can run debug builds with serial console. stable/13
> branch.
>
> I have a bunch of netbooted machines, one set in a cluster is older (HP DL80 G9,
> 2x8C, Intel I350 -igb- NICs), the other set is newer (HP XL225n G10, AMD EPYC2x16C,
> BCM57412 -bnxt- NICs).
> All of these boot from the network, which is basically:
> - get IP and options with DHCP with the help of the NIC's PXE stack
> - get the loader and kernel, start it
> - do another round of DHCP from the kernel (bootp_subr.c)
> - mount the root via NFS and let everything work as usual
>
> The problem is that the newer machines take an indefinite time to boot. The older
> ones (with igb NIC) work reliably, they always boot fast.
> The process of getting an IP address via DHCP (bootpc_call from bootp_subr.c) either
> succeeds normally (in a few seconds), or takes a lot of time.
> Common (measured) times to boot range from 10s of minutes to anywhere between a few
> hours (1-6).
> Sometimes it just gets stuck and couldn't get past bootpc_call (getting the DHCP lease).
Do you have STP/RSTP enabled on the switch ports? When the link goes down when
switching from firmware mode to kernel mode, the port will go back to blocking. When
the dhcp requests don't make it to the dhcp server because of this and the link goes
down and up again while retrying (don't know if this happens) you will get the same
problem on the next try. As a simple test you could put a dumb unmanaged switch
between your core network and the server.
best regards, Matthias
[-- Attachment #2 --]
0 *H
010
`He 0 *H
G00
ZA]-%翞0
*H
01 0 UIT10U Bergamo10U Ponte San Pietro10U
Actalis S.p.A.1,0*U #Actalis Client Authentication CA G30
220915111330Z
230915111330Z010U leo@marco.de0"0
*H
0
Xy.l"SQW2VF.n
F̍)LV{_jzï4F} mE )Q,f۾ B3 RۼvM 4
v۠q"ق z-F2t8#-x 9
7 xí_t^yҲʉ_ˍM0w7Ֆg {`+aP;~Nõkz1 꿨AF?UuS8 00 U 0 0 U #0S} 2.2w0~+r0p0;+0/http://cacert.actalis.it/certs/actalis-autclig301+0%http://ocsp09.actalis.it/VA/AUTHCL-G30U 0 leo@marco.de0GU @0>0<+ 0200+$https://www.actalis.it/area-download0 U %0++0HU A0?0=;97http://crl09.actalis.it/Repository/AUTHCL-G3/getLastCRL0 U G[-:{HLb t
XyL 0U 0
*H
q,A ty;J/_Xde, sv<Ɗϴ8'wF.~5CyaڅM2VWJaL%Oy'l8>9%9!qzSԫPkB| mQ!̻̬b:(Ҿ4Uۙ8E>gȅ |el-Sח(M&;[!D<qz+6 ˃ճR ZV Hs7" VZF ]Wc:#՛4n)u"@> 'wrP
Y`צwù ZqtQzc`C4DA(
=+K-r|O >y:rvf:Ntl
p2}dR}FO2gҠu"|A+-:}
By4݈UC 37JD= ci)2$h=um^N öI:Oc3;qS9 hJ"88:` / 0m0U>= QCk0
*H
0k1 0 UIT10 U Milan1#0!U
Actalis S.p.A./033585209671'0%U Actalis Authentication Root CA0
200706084547Z
300922112202Z01 0 UIT10U Bergamo10U Ponte San Pietro10U
Actalis S.p.A.1,0*U #Actalis Client Authentication CA G30"0
*H
0
懖BU?"`_CIy /PF:Qaq)Z|z%PpD_p"P!PkV%) LlR^TN;pN/a`٥dy!l^$cCGZ
.Ky: +=C+ߺbmٌG+eH%U3m4)|Զ4'cto,. pt T55Ԅ dYL:z/a+ &Q xQLupr4:3oHFN$i0 pMJ}GSjuȵ4cg,KԬ"дӲR/2ly`!,fw` N&w&`lpSY\ qd&EGx UWPCN
y4]ELW;B($qH_, , )ŚI:C"&Z롽KE|ˆy3;~1Hx@gM֎1/ 00U 00 U #0R؈:ȟxf{8p60A+50301+0%http://ocsp05.actalis.it/VA/AUTH-ROOT0EU >0<0:U 0200+$https://www.actalis.it/area-download0 U %0++0U 00ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary0=;97http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL0 U S} 2.2w0U 0
*H
&Y
tUB;a WǦH"e Z)p|)Te{^fa?]1%x<,vlk1 w.}_oLf͛ݪј/~2XpޞŹ9ILvu9ۆSCnԎ)Ju# Zޘ(=/_.&B))">LI Ȳtޣ-!MPԲ>z7Hލo5QnfHͪT_7GfIVrGw{
R ZA#&}ZL=`\ۖI$:^Q5Wq7pԡ%w7!;3|ĹL D36/IT$KY } G/ bl#=(ҜjPh2`tB #'%of~E
x1210001 0 UIT10U Bergamo10U Ponte San Pietro10U
Actalis S.p.A.1,0*U #Actalis Client Authentication CA G3
ZA]-%翞0
`He -0 *H
1 *H
0 *H
1
230317062359Z0/ *H
1" y ÓBa@dۆHUڬt3%xp0l *H
1_0]0 `He*0 `He0
*H
0*H
0
*H
@0+0
*H
(0 +71001 0 UIT10U Bergamo10U Ponte San Pietro10U
Actalis S.p.A.1,0*U #Actalis Client Authentication CA G3
ZA]-%翞0 *H
101 0 UIT10U Bergamo10U Ponte San Pietro10U
Actalis S.p.A.1,0*U #Actalis Client Authentication CA G3
ZA]-%翞0
*H
%ՐS'+h)q(~F@uh3!ZkxY *8
ިD7$Ov%Oʢy8P(p_֚_U&`Ww*1=v\"n a6+6O;u<>]ǤTX^Kf_Xj!e[jV՚4'tN:/(4@dwP ܳsqMN~%͏E͎auyE<<Q"D
help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0b95a502-eea0-46cc-5d0d-ec6e861ad51f>