Public bug reported:

SRU Justification:

possible race cleaning ct conns too early.

* Explain the bug(s)

There is a possible race between updating established conn timeout
and initial timeout expiring.

* brief explanation of fixes

in normal flow, established conns gets thier timeout extended to a day and
the GC keeps extending them if timeout is below half a day.
but it looks like there is a possible race that the intial timeout expired
before that timeout was extended.
this is a temporary fix and still being investigated how to avoid this
potential race on the timeout.

* How to test

huge amount of traffic, we used ixia traffic generator. during traffic can dump 
conntrack
using "conntrack -L" or "cat /proc/net/nf_conntrack" this sometimes helps 
reproduce faster.
after conns offloaded stop the traffic and wait few seconds. now check if all 
conntrack conns
still offloaded. we noticed sometimes few conns are missing.

* What it could break.

ct conns expiring too soon. so sometimes idle sessions starting traffic again 
would have some
first packets not offloaded and conntrack would reoffload the ct conn.

** Affects: linux-bluefield (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1929458

Title:
  CT: check offload bit on table dump

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/1929458/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to