Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-19 Thread Steffen Klassert
On Tue, May 16, 2017 at 03:05:40PM -0400, Don Bowman wrote: > On 3 May 2017 at 04:14, Steffen Klassert wrote: > > On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: > >> On 28 April 2017 at 03:13, Steffen Klassert > >> wrote: >

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-19 Thread Steffen Klassert
On Tue, May 16, 2017 at 03:05:40PM -0400, Don Bowman wrote: > On 3 May 2017 at 04:14, Steffen Klassert wrote: > > On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: > >> On 28 April 2017 at 03:13, Steffen Klassert > >> wrote: > >> > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-16 Thread Don Bowman
On 3 May 2017 at 04:14, Steffen Klassert wrote: > On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: >> On 28 April 2017 at 03:13, Steffen Klassert >> wrote: >> > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: >>

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-16 Thread Don Bowman
On 3 May 2017 at 04:14, Steffen Klassert wrote: > On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: >> On 28 April 2017 at 03:13, Steffen Klassert >> wrote: >> > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: >> >> On 27 April 2017 at 04:42, Steffen Klassert >> >> wrote:

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-03 Thread Steffen Klassert
On Fri, Apr 28, 2017 at 09:46:42AM -0700, Eric Dumazet wrote: > On Fri, 2017-04-28 at 09:13 +0200, Steffen Klassert wrote: > > encap type espinudp sport 4500 dport 4500 addr 0.0.0.0 > > > > Ok, this is espinudp. This information was important. > > > This is not a GRO issue as I thought,

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-03 Thread Steffen Klassert
On Fri, Apr 28, 2017 at 09:46:42AM -0700, Eric Dumazet wrote: > On Fri, 2017-04-28 at 09:13 +0200, Steffen Klassert wrote: > > encap type espinudp sport 4500 dport 4500 addr 0.0.0.0 > > > > Ok, this is espinudp. This information was important. > > > This is not a GRO issue as I thought,

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-03 Thread Steffen Klassert
On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: > On 28 April 2017 at 03:13, Steffen Klassert > wrote: > > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: > >> On 27 April 2017 at 04:42, Steffen Klassert > >>

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-03 Thread Steffen Klassert
On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: > On 28 April 2017 at 03:13, Steffen Klassert > wrote: > > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: > >> On 27 April 2017 at 04:42, Steffen Klassert > >> wrote: > >> > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-01 Thread Joseph Salisbury
On 04/27/2017 06:29 PM, Don Bowman wrote: > On 26 April 2017 at 15:06, Joseph Salisbury > wrote: >> Hi Don, >> >> Can you see if this bug started happening in v4.11-rc3? Since your >> running Ubuntu, a kernel is already available here: >>

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-01 Thread Joseph Salisbury
On 04/27/2017 06:29 PM, Don Bowman wrote: > On 26 April 2017 at 15:06, Joseph Salisbury > wrote: >> Hi Don, >> >> Can you see if this bug started happening in v4.11-rc3? Since your >> running Ubuntu, a kernel is already available here: >> http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.11-rc3/

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-29 Thread Don Bowman
On 28 April 2017 at 03:13, Steffen Klassert wrote: > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: >> On 27 April 2017 at 04:42, Steffen Klassert >> wrote: >> > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: >>

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-29 Thread Don Bowman
On 28 April 2017 at 03:13, Steffen Klassert wrote: > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: >> On 27 April 2017 at 04:42, Steffen Klassert >> wrote: >> > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: >> >> (Cc'ing netdev and IPSec maintainers) >> >> >> >> On

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-28 Thread Eric Dumazet
On Fri, 2017-04-28 at 09:13 +0200, Steffen Klassert wrote: > encap type espinudp sport 4500 dport 4500 addr 0.0.0.0 > > Ok, this is espinudp. This information was important. > This is not a GRO issue as I thought, the TX side is already broken. > > Could you please try the patch below?

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-28 Thread Eric Dumazet
On Fri, 2017-04-28 at 09:13 +0200, Steffen Klassert wrote: > encap type espinudp sport 4500 dport 4500 addr 0.0.0.0 > > Ok, this is espinudp. This information was important. > This is not a GRO issue as I thought, the TX side is already broken. > > Could you please try the patch below?

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-28 Thread Steffen Klassert
On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: > On 27 April 2017 at 04:42, Steffen Klassert > wrote: > > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: > >> (Cc'ing netdev and IPSec maintainers) > >> > >> On Tue, Apr 25, 2017 at 6:08 PM, Don

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-28 Thread Steffen Klassert
On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: > On 27 April 2017 at 04:42, Steffen Klassert > wrote: > > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: > >> (Cc'ing netdev and IPSec maintainers) > >> > >> On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: > > for 'esp'

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
On 26 April 2017 at 15:06, Joseph Salisbury wrote: > Hi Don, > > Can you see if this bug started happening in v4.11-rc3? Since your > running Ubuntu, a kernel is already available here: > http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.11-rc3/ It appears I was

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
On 26 April 2017 at 15:06, Joseph Salisbury wrote: > Hi Don, > > Can you see if this bug started happening in v4.11-rc3? Since your > running Ubuntu, a kernel is already available here: > http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.11-rc3/ It appears I was incorrect about where this was

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
On 27 April 2017 at 04:42, Steffen Klassert wrote: > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: >> (Cc'ing netdev and IPSec maintainers) >> >> On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: for 'esp' question, i have ' esp =

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
On 27 April 2017 at 04:42, Steffen Klassert wrote: > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: >> (Cc'ing netdev and IPSec maintainers) >> >> On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: for 'esp' question, i have ' esp = aes256-sha256-modp1536!' is that what you mean?

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Steffen Klassert
On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: > (Cc'ing netdev and IPSec maintainers) > > On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: > > I'm not sure how to describe this. > > > > 4.11rc2 worked, after that, no. We had some recent IPsec GRO changes, this

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Steffen Klassert
On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: > (Cc'ing netdev and IPSec maintainers) > > On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: > > I'm not sure how to describe this. > > > > 4.11rc2 worked, after that, no. We had some recent IPsec GRO changes, this could influence

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-26 Thread Cong Wang
(Cc'ing netdev and IPSec maintainers) On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: > I'm not sure how to describe this. > > 4.11rc2 worked, after that, no. > > My ipsec tunnel comes up ok. ICMP works. UDP works. But TCP, the > sender [which is the ipsec client] does not

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-26 Thread Cong Wang
(Cc'ing netdev and IPSec maintainers) On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: > I'm not sure how to describe this. > > 4.11rc2 worked, after that, no. > > My ipsec tunnel comes up ok. ICMP works. UDP works. But TCP, the > sender [which is the ipsec client] does not reach the

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-26 Thread Joseph Salisbury
Hi Don, Can you see if this bug started happening in v4.11-rc3? Since your running Ubuntu, a kernel is already available here: http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.11-rc3/ If v4.11-rc2 is good and -rc3 is bad, I can help you bisect between the two. Thanks, Joe On 04/25/2017

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-26 Thread Joseph Salisbury
Hi Don, Can you see if this bug started happening in v4.11-rc3? Since your running Ubuntu, a kernel is already available here: http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.11-rc3/ If v4.11-rc2 is good and -rc3 is bad, I can help you bisect between the two. Thanks, Joe On 04/25/2017

ipsec doesn't route TCP with 4.11 kernel

2017-04-25 Thread Don Bowman
I'm not sure how to describe this. 4.11rc2 worked, after that, no. My ipsec tunnel comes up ok. ICMP works. UDP works. But TCP, the sender [which is the ipsec client] does not reach the destination. Its not a routing rule issue (since ICMP/UDP work). Its not a traffic selector just selecting

ipsec doesn't route TCP with 4.11 kernel

2017-04-25 Thread Don Bowman
I'm not sure how to describe this. 4.11rc2 worked, after that, no. My ipsec tunnel comes up ok. ICMP works. UDP works. But TCP, the sender [which is the ipsec client] does not reach the destination. Its not a routing rule issue (since ICMP/UDP work). Its not a traffic selector just selecting