Re: [vpp-dev] core fump issue whren reload nginx #vpp-dev #vppcom
Hi, Hard to say what happens there but it might be that ldp/vls (the shims on top of vcl) do not handle properly whatever nginx does when it tries to reload. In particular, if it involves an exec syscall, we probably lose state and can’t recover. As for the leak, what version of vpp/vcl are you using? Can you try with something recent like 22.02? Regards, Florin > On Mar 10, 2022, at 7:41 PM, first_se...@163.com wrote: > > hello ，sir, I have one question： > I used nginx as proxy with vcl, core dump was happened when i > reloadnginx with nginx -s reload。and i dgb the core file,the inforamtion > means Core was generated by `nginx: worker process is shutting'. > Program terminated with signal SIGSEGV, Segmentation fault. and the stack > show vppcom_session_disconnect (session_handle=) at > /home/from_root/workspace/vpp/src/vcl/vppcom.c and > listen_session->n_accepted_sessions--; > like this > <1646969309.png> > on the other hand，i found RAM of nginx workers always increase when wrk every > time and not decrease when finished wrk. > at the time that beyound the totle memory。it also happens core dump and gdb > cannot show useful information.like this > <企业微信截图_16469 701207851.png><企业微信截图_16469 69760375.png> > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21004): https://lists.fd.io/g/vpp-dev/message/21004 Mute This Topic: https://lists.fd.io/mt/89703782/21656 Mute #vppcom:https://lists.fd.io/g/vpp-dev/mutehashtag/vppcom Mute #vpp-dev:https://lists.fd.io/g/vpp-dev/mutehashtag/vpp-dev Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] VPP interface configured under VRF is recognized as default VRF interface on FRR #vpp-dev
Thanks Matt and Pim. When I added routes in kernal table it started working under vrf Thanks and regards, Suresh V -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21002): https://lists.fd.io/g/vpp-dev/message/21002 Mute This Topic: https://lists.fd.io/mt/89678481/21656 Mute #vpp-dev:https://lists.fd.io/g/vpp-dev/mutehashtag/vpp-dev Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] VPP interface configured under VRF is recognized as default VRF interface on FRR #vpp-dev
Hi Suresh, The linux-cp/linux-nl plugins will not automatically manage assignments of interfaces to a VRF/table, but you can use iproute2 commands to create a VRF and move the tap to it. Using table 1 and host interface lo5007 from your example, these commands would associate that interface with the kernel's table 1: ip link add dev vrf1 type vrf table 1 ip link set dev vrf1 up ip link set dev lo5007 master vrf1 Routes added to the kernel's table 1 will be propagated to VPP's table 1 by linux-nl. -Matt On Wed, Mar 9, 2022 at 8:27 PM suresh vuppala wrote: > HI VPP dev, > > I have a loop configured under a vrf 1 in VPP. I need this interface to > write into linux so it can be read by FRR as interface in vrf 1. I have > configured as below but FRR still sees lo5007 in default vrf. > > ip table add 1 > > set interface ip table loop5007 *1* > > lcp create loop5007 host-if lo5007 > > > FRR# show int br > > Interface Status VRF Addresses > > - -- --- - > > > > lo up default > > lo5007 up * default * 192.168.7.9/24 > > lo5008 up *default *192.168.6.9/24 > > Can you please help here to config loop on VPP so FRR recognizes it as vrf > interface > > Thanks, > Suresh > > > > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21001): https://lists.fd.io/g/vpp-dev/message/21001 Mute This Topic: https://lists.fd.io/mt/89678481/21656 Mute #vpp-dev:https://lists.fd.io/g/vpp-dev/mutehashtag/vpp-dev Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
回复: Re: [vpp-dev] route between two vrfs does not work
Hi Filip, There comes another issue, traffic from VRF1's other interface could not be out from VRF1 interface with public ip address. how can i make this work ? add my cli command in previous message below Thanks. haiyan...@ilinkall.cn 发件人： 李海艳 发送时间： 2022-03-09 11:03 收件人： Filip Varga -X (fivarga - PANTHEON TECH SRO at Cisco); vpp-dev 主题： Re: RE: [vpp-dev] route between two vrfs does not work Hi Filip, Great thanks, that did work. Now VRF2 can reach internet through VRF1's outside interface. haiyan...@ilinkall.cn From: Filip Varga -X (fivarga - PANTHEON TECH SRO at Cisco) Date: 2022-03-09 05:01 To: haiyan...@ilinkall.cn; vpp-dev Subject: RE: [vpp-dev] route between two vrfs does not work Hi Haiyan, VRF for nat44-ed and nat44-ei works as follows: Scenario 2 VRF’s. VRF1 can reach the internet, VRF2 can’t. 1) Enable nat44-ed plugin. lhy: nat44 forwarding enable 2) VRF1: Configure public facing interface to be used as outside interface for nat44-ed plugin. lhy: set interface nat44 out G0 output-feature VRF2: Configure one or all interface (that you want to be able to communicate with public IP addresses) as inside interface[s] for nat44-ed plugin. lhy: set interface nat44 in tap300 lhy: set interface ip table tap300 VRF2 3) Configure nat44-ed address range for VRF2. lhy: nat44 add address tenant-vrf VRF2 tenant-vrf parameter is used to tell nat for which source VRF the address should be used for translation. So in this scenario we need it to be VRF2. Best regards, Filip Varga From: vpp-dev@lists.fd.io On Behalf Of haiyan...@ilinkall.cn Sent: Tuesday, March 8, 2022 1:06 AM To: vpp-dev Subject: [vpp-dev] route between two vrfs does not work Dear all my test uses two vrfs in vpp： vrf A: interface(G0) with pulic ip address(172.16.0.73/24) exists，and i also did "nat44 add address xxx tenant-vrf A"/"set interface nat44 out G0 output-feature"/"nat44 forwarding enable" vrf B: there is no public ip address, so need to access the internet through vfr A interface G0, so i did "ip route add 172.16.0.47/32 table B via 0.0.0.0 next-hop-table A",but that does not work. do I missing something or any suggestion ? detail configurations shows below： vpp# show version vpp v20.01-natt~82-g061bec7 built by root on localhost.localdomain at 2022年 03月 07日 星期一 16:04:34 CST vpp# vpp# vpp# show nat natnat44 nat64 nat66 vpp# show interface addr G0 (up): L3 172.16.0.73/24 ip4 table-id 1 fib-idx 1 G1 (up): L2 bridge bd-id 1 idx 1 shg 0 local0 (dn): loop21 (up): L2 bridge bd-id 1 idx 1 shg 0 bvi L3 192.168.1.1/24 tap10 (up): L3 10.10.1.1/24 ip4 table-id 1 fib-idx 1 tap20 (up): L2 bridge bd-id 1 idx 1 shg 0 vpp# vpp# show ip fib ipv4-VRF:0, fib_index:0, flow hash:[src dst sport dport proto ] locks:[src:plugin-hi:2, src:adjacency:1, src:default-route:1, ] 0.0.0.0/0 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:1 buckets:1 uRPF:0 to:[101:8484]] [0] [@0]: dpo-drop ip4 0.0.0.0/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:2 buckets:1 uRPF:1 to:[0:0]] [0] [@0]: dpo-drop ip4 172.16.0.47/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:33 buckets:1 uRPF:38 to:[2220:186480]] [0] [@13]: dst-address,unicast lookup in ipv4-VRF:1 192.168.1.0/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:27 buckets:1 uRPF:32 to:[0:0]] [0] [@0]: dpo-drop ip4 192.168.1.0/24 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:26 buckets:1 uRPF:31 to:[10:960]] [0] [@4]: ipv4-glean: loop21: mtu:9000 dead00150806 192.168.1.1/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:29 buckets:1 uRPF:36 to:[10:900]] [0] [@2]: dpo-receive: 192.168.1.1 on loop21 192.168.1.200/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:30 buckets:1 uRPF:35 to:[5:480] via:[22:1848]] [0] [@5]: ipv4 via 192.168.1.200 loop21: mtu:9000 8a48fe5830d9dead00150800 192.168.1.255/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:28 buckets:1 uRPF:34 to:[0:0]] [0] [@0]: dpo-drop ip4 224.0.0.0/4 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:4 buckets:1 uRPF:3 to:[0:0]] [0] [@0]: dpo-drop ip4 240.0.0.0/4 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:3 buckets:1 uRPF:2 to:[0:0]] [0] [@0]: dpo-drop ip4 255.255.255.255/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:5 buckets:1 uRPF:4 to:[0:0]] [0] [@0]: dpo-drop ip4 ipv4-VRF:1, fib_index:1, flow hash:[src dst sport dport proto ] locks:[src:CLI:3, src:plugin-low:1, src:adjacency:8, src:recursive-resolution:1, ] 0.0.0.0/0 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:9 buckets:1 uRPF:20 to:[10:2415]] [0] [@5]: ipv4 via 172.16.0.1 G0: mtu:9000 8446fe747dd4a0369f75ba8a0800 0.0.0.0/32 unicast-ip4-chain [@0]: dpo-load-balance: [proto:ip4 index:10 buckets:1 uRPF:8 to:[0:0]] [0] [@0]: dpo-drop ip4
Re: [vpp-dev] VPP interface configured under VRF is recognized as default VRF interface on FRR #vpp-dev
Hoi, Multiple VPP tables (and relatedly in Linux, multiple network namespaces) are not supported in Linux Control Plane plugin. groet, Pim On Thu, Mar 10, 2022 at 3:27 AM suresh vuppala wrote: > HI VPP dev, > > I have a loop configured under a vrf 1 in VPP. I need this interface to > write into linux so it can be read by FRR as interface in vrf 1. I have > configured as below but FRR still sees lo5007 in default vrf. > > ip table add 1 > > set interface ip table loop5007 *1* > > lcp create loop5007 host-if lo5007 > > > FRR# show int br > > Interface Status VRF Addresses > > - -- --- - > > > > lo up default > > lo5007 up * default * 192.168.7.9/24 > > lo5008 up *default *192.168.6.9/24 > > Can you please help here to config loop on VPP so FRR recognizes it as vrf > interface > > Thanks, > Suresh > > > > > > -- Pim van Pelt PBVP1-RIPE - http://www.ipng.nl/ -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20999): https://lists.fd.io/g/vpp-dev/message/20999 Mute This Topic: https://lists.fd.io/mt/89678481/21656 Mute #vpp-dev:https://lists.fd.io/g/vpp-dev/mutehashtag/vpp-dev Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] about in/out arguments in "set interface nat44 .."command
Dear all if only want traffic from interface A to interface B done with nat44, others will be directly out from interface B, is this possible? I did the following command in vpp, but did not work nat44 forwarding enable nat44 add address set interface nat44 in A out B Thanks haiyan...@ilinkall.cn -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20998): https://lists.fd.io/g/vpp-dev/message/20998 Mute This Topic: https://lists.fd.io/mt/89682456/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
