Thanks Darrell. I checked the OVS tree kernel module, it indeed does not drop
empty payload TCP packets.
Jing
From: Darrell Ball
Sent: Friday, May 3, 2019 3:34 PM
To: Zhang, Jing C. (Nokia - CA/Ottawa)
Cc: Han Zhou ; ovs-discuss@openvswitch.org
Subject: Re: FW: [ovs-discuss] OVS 2.9.0 native
The thing is, I don’t see empty TCP packet drops on DPDK computes, I
nevertheless applied the patch HAN mentioned on DPDK computes, no difference.
The issues we see is on OVS computes.
Jing
From: Darrell Ball
Sent: Friday, May 03, 2019 3:34 PM
To: Zhang, Jing C. (Nokia - CA/Ottawa)
Cc: Han
Sorry, I overlooked your questions on dpdk computes. DPDK itself is find, VMs
are up and running.
Jing
From: Darrell Ball
Sent: Friday, May 3, 2019 11:55 AM
To: Zhang, Jing C. (Nokia - CA/Ottawa)
Cc: Han Zhou ; ovs-discuss@openvswitch.org
Subject: Re: FW: [ovs-discuss] OVS 2.9.0 native
less than 60
bytes.
Pls correct me and advise if the issue on OVS compute is fixable.
JIng
From: Darrell Ball
Sent: Friday, May 3, 2019 11:55 AM
To: Zhang, Jing C. (Nokia - CA/Ottawa)
Cc: Han Zhou ; ovs-discuss@openvswitch.org
Subject: Re: FW: [ovs-discuss] OVS 2.9.0 native firewall drops
: "1a9b5b9ec94e"
datapath_type : netdev
datapath_version: ""
From: Darrell Ball
Sent: Friday, May 3, 2019 11:24 AM
To: Zhang, Jing C. (Nokia - CA/Ottawa)
Cc: Han Zhou ; ovs-discuss@openvswitch.org
Subject: Re: FW: [ovs-discuss] OVS 2.9.0 native firewall drop
: Darrell Ball
Sent: Friday, May 3, 2019 12:19 AM
To: Han Zhou ; Zhang, Jing C. (Nokia - CA/Ottawa)
; ovs-discuss@openvswitch.org
Subject: Re: FW: [ovs-discuss] OVS 2.9.0 native firewall drops empty payload
TCP packets continued
What do the following commands yield ?
sudo ovs-vsctl -- get bridge
Thank you Han, I will check out this fix.
From: Han Zhou
Sent: Thursday, May 2, 2019 10:11 PM
To: Zhang, Jing C. (Nokia - CA/Ottawa)
Cc: ovs-discuss@openvswitch.org
Subject: Re: [ovs-discuss] OVS 2.9.0 native firewall drops empty payload TCP
packets continued
On Thu, May 2, 2019 at 6:04 PM
We (our VNFs) continue to observe the same empty payload TCP (ACK) packet drop
with native firewall (see original post below) after upgrading to Centos 7.6.
This packet drop results in unacceptable TCP performance, by that native
firewall still can not be enabled in product.
is using
our latest lineup which is ovs 2.9.
Jing
From: Gregory Rose
Sent: Monday, August 27, 2018 4:08 PM
To: Zhang, Jing C. (Nokia - CA/Ottawa) ;
b...@openvswitch.org
Subject: Re: [ovs-discuss] OVS 2.9.0 native firewall drops empty payload TCP
packets
On 8/27/2018 6:20 AM, Zhang, Jing C
Sorry for the confusion, no, the issue is critical and very reproducable, I
need help to get it fixed.
I recalled as I did not want to show my "desperation" to the list
-Original Message-
From: Darrell Ball
Sent: Monday, August 27, 2018 12:51 PM
To: Zhang, Jing C. (Nokia -
Zhang, Jing C. (Nokia - CA/Ottawa) would like to recall the message,
"[ovs-discuss] OVS 2.9.0 native firewall drops empty payload TCP packets".
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
Yes, yes, pls help!!! I am desperate now ;-(
Jing
-Original Message-
From: Ben Pfaff
Sent: Monday, August 27, 2018 12:47 PM
To: Zhang, Jing C. (Nokia - CA/Ottawa) ; Darrell Ball
Cc: b...@openvswitch.org
Subject: Re: [ovs-discuss] OVS 2.9.0 native firewall drops empty payload TCP
We have customers reporting sluggish HTTP download with OVS 2.9.0. After
debugging, we find the issue is OVS 2.9.0 native firewall drops TCP control
packets (TCP ACK) with empty payload. The issue can be avoided by either
reverting back to the legacy Linux bridge firewall or enabling TCP
13 matches
Mail list logo
