Hi Matteo, On Mon, Jan 8, 2018 at 7:33 AM, Matteo Bertrone <matteo.bertrone@xxxxxxxxx> wrote: > Hello, > > while I was trying to forward packets using Generic XDP [1], I encountered the following problem: > > ARP and ICMP packets are forwarded correctly, and ping works fine. > It seems not all TCP packets are forwarded by XDP program, both netcat and iperf are not working for me. > > (Using same configuration as [1]) > sudo ip netns exec ns2 nc -l 8080 > sudo ip netns exec ns1 nc 10.1.1.22 8080 > > sudo ip netns exec ns2 iperf3 -s > sudo ip netns exec ns1 iperf3 -c 10.1.1.22 > > It seems such traffic is not processed by XDP program. > Using tcpdump on veth1 in root namespace I’m not able to see ARP and ICMP traffic (as expected) because forwarded by XDP program, but I’m able to see all the traffic it’s not forwarded. > > Is this behavior expected? > Did I miss something in veth configuration? > I tested nc on my system and I saw the same issue. Using UDP (nc -u) works, but TCP doesn't. >From the client side (ns1), tcpdump can see SYN packet at veth11 and veth1, but the packet didn't reach the BPF program attached at veth1. Somewhere in-between the SYN packet is dropped. I guess it's related to some tcp offload settings? I will need to debug a bit on this. Thanks William > [1] https://github.com/torvalds/linux/blob/master/tools/testing/selftests/bpf/test_xdp_redirect.sh
|