From nobody Fri Dec 12 22:25:29 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dSkYP6MVlz6KQG5 for ; Fri, 12 Dec 2025 22:25:29 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dSkYP5qgqz3f9d for ; Fri, 12 Dec 2025 22:25:29 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765578329; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=x5b9H3ZTE1ilLPOYAPQPGWzq++W+2XSekrqXzsaxw/M=; b=bfCszO5iav2lvN24nuOQ8XFSEq7W//O9EaO2qBFSYsgvkxMJoPnP0p24YCsMWM6ltjGL9W wjL2KazJgO0K/psCcTnDqPtUWGtoZmFpieGx1JeUMm7xkkd4CboB/Omfv01EdSI6Cg4XR0 wMY2158e4ESDwRcgQTgX8fbxrs/umnQBYkweDDsT8HBFOccTvJXpW0zEd+luPDxD2gDhPw W/GvkcerIXRvXhzgd+rigsNaDnaptn6PhrI8ypQS0245GvMHjhEKnNTnmDb41PBZW9vDhZ DdGpuD7V9/e+kuvn6zReRKFTlm0vmbcd8VmJbbqhGyCulrIM+7hdBqXNSPkvmg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765578329; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=x5b9H3ZTE1ilLPOYAPQPGWzq++W+2XSekrqXzsaxw/M=; b=Gq34pIWEtAe3TKAQZADqZBz9shDAfCqe/KJwmyt8MLGZc5iPGkiforKxW3KkNgcXGDNnPP BIuDRerYwTs3iCxJVHDgh/g3Q1/6Hu3/JxJfBkgBc58l4W5AH4fWBGckPDQB0ZCavejexI VcR/PB+qdEGJiidTjymUmunWHstTQie0YIBSG7DR13kHNGGK8xP4tOmGaAz5VFNYor9VeE 0u2x7VEz7J+Dp8Fsh+kVTVyM8Y+LsvSXGnc2ubYbzozksFpDVXPSHXMAS7FiAGxvicI15s LzgoTDieFquQ/rZMGPyHnG5EOu1dJbJQLZIjw1iwvacMMG7ayu2ExcVoYRjUyg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1765578329; a=rsa-sha256; cv=none; b=BUFZHQVTKToEI9BN1TMIUtAkv4veds2Tk3BqdhL+xxUQXty/JALLQVPVYYhGVX+V2WW0Je JSm0vXV5qz+Tdhr4CJs0b3CETEuU3GYDcWLi+OM6/PJ97/t3lpMNucb4KB7p/A+H0cCbL1 B9m6Wz7gGWj3sFPTm9bcn5fyuc4s/yGh1Cng//U1rM/fJu5F/IjRzWNfcwhzXrMal2hx4N OAO66JR4ajHzjiTIo2IFsUWpmBZ+MlXYOEI/c3jeFPEVAGzvQUuGGoY53v2dwxImgOtxTb G+ZBKlJjrgToV2R7S+2uEX5OCTDat2ZvuctxNuoXgMjTzRr47Xiae09ayoMOQA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dSkYP5PnDzcd5 for ; Fri, 12 Dec 2025 22:25:29 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5BCMPTFE066698 for ; Fri, 12 Dec 2025 22:25:29 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5BCMPTsf066697 for net@FreeBSD.org; Fri, 12 Dec 2025 22:25:29 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 291420] [epair] Bad UDP packet checksum with epair(4) and txcsum enabled Date: Fri, 12 Dec 2025 22:25:29 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.3-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: leper4@protonmail.com X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D291420 leper changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |leper4@protonmail.com --- Comment #22 from leper --- I encountered the same problem with a slightly different setup that does not involve bge, and then reproduced it on 15.0-RELEASE in a VM with only vtnet, epair, bridge, tap devices involved. A bridge with two vnet jails attached to it. One jail running unbound. The second jail running bhyve and an Ubuntu VM with the vm jail's networking se= tup being another bridge of the vnet epair and the tap. The host handles routing for the bridge network for outside connectivity. The VM cannot use the unbound server running in the dns jail for DNS, the U= DP packets have just a partial checksum (according to Wireshark, and it just n= ot working). The VM can use external DNS servers just fine. If one disables tx= csum on the dns jails epair interface it starts working. At least ICMP between the VM and the DNS jail works fine regardless of the txcsum setting. As does DNS from the jail running bhyve. (Out of curiosity I tried if adding the patches for txcsum support for tap devices ( review D51289, review D51291, review D51688) would make a differe= nce (but still on 14-stable) and that also did not change anything.) If it is useful I could provide this test VM image. Host network ``` bridge0: flags=3D1008843 m= etric 0 mtu 1500 options=3D10 ether 58:9c:fc:10:95:97 inet 172.16.0.1 netmask 0xfff00000 broadcast 172.31.255.255 id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200 root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0 bridge flags=3D0<> member: e0a_vmjail flags=3D143 port 7 priority 128 path cost 2000 vlan protocol 802.1q member: e0a_dns flags=3D143 port 4 priority 128 path cost 2000 vlan protocol 802.1q groups: bridge nd6 options=3D3 e0a_dns: flags=3D1008943 metric 0 mtu 1500 description: vnet0 host interface for Bastille jail dns options=3D60000b ether 58:9c:fc:7f:2f:6a hwaddr 58:9c:fc:10:c5:5f groups: epair media: Ethernet 10Gbase-T (10Gbase-T ) status: active nd6 options=3D29 e0a_vmjail: flags=3D1008943 me= tric 0 mtu 1500 description: vnet0 host interface for Bastille jail vmjail options=3D20000b ether 58:9c:fc:6c:b0:ca hwaddr 58:9c:fc:10:67:eb groups: epair media: Ethernet 10Gbase-T (10Gbase-T ) status: active nd6 options=3D29 ``` vmjail network: ``` vnet0: flags=3D1008943 metric 0 mtu 1500 description: jail interface for bridge0 options=3D20000b ether 58:9c:fc:6c:b0:cb hwaddr 58:9c:fc:10:13:af groups: epair media: Ethernet 10Gbase-T (10Gbase-T ) status: active nd6 options=3D29 bridge1: flags=3D1008843 m= etric 0 mtu 1500 options=3D10 ether 9a:e7:95:53:f9:56 inet 172.16.0.2 netmask 0xffffff00 broadcast 172.16.0.255 id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200 root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0 bridge flags=3D0<> member: tap0 flags=3D143 port 11 priority 128 path cost 2000000 vlan protocol 802.1q member: vnet0 flags=3D143 port 8 priority 128 path cost 2000 vlan protocol 802.1q groups: bridge vm-switch viid-4c918@ nd6 options=3D9 tap0: flags=3D1008943 metric 0 mtu 1500 description: vmnet/linvm/0/public options=3D80000 ether 0e:79:d9:96:d3:03 groups: tap vm-port media: Ethernet 1000baseT status: active nd6 options=3D29 Opened by PID 10785 ``` --=20 You are receiving this mail because: You are on the CC list for the bug.=