Hello Marco, I am working on that but I could see a couple of discussions where it has been mentioned we may have to enhance xdp to have support NAT. As an experiment in the same topology, adding masquerade NAT rules (ip translation) without XDP doesn't have a ping issue. Does this mean we need to have something like xdp-iptables to add NAT rules ? On Mon, May 15, 2023 at 4:04 PM team lnx <teamlnxi8@xxxxxxxxx> wrote: > > Hello Marco, > > I am working on that but I could see a couple of discussions where it has been mentioned we may have to > enhance xdp to have support NAT. > > As an experiment in the same topology, adding masquerade NAT rules (ip translation) without XDP doesn't have a ping issue. > Does this mean we need to have something like xdp-iptables to add NAT rules ? > > > > On Sat, May 13, 2023 at 12:41 AM Marco <ctxspi@xxxxxxxxx> wrote: >> >> Hi Teaminx >> >> Have you already tried to send an icmp packet with zero payload to see >> with bpf_printk what happens before redirection? >> >> Il giorno ven 12 mag 2023 alle ore 21:17 team lnx >> <teamlnxi8@xxxxxxxxx> ha scritto: >> > >> > Yes, IFACE1 has a route(static) to IFACE3 and ping succeeds. >> > Ping fails to IFACE4 from IFACE1, Do I need NAT and does XDP have support ? >> > >> > >> > On Thu, May 4, 2023 at 11:05 AM Shaw, Jeffrey B >> > <jeffrey.b.shaw@xxxxxxxxx> wrote: >> > > >> > > On 5/4/2023 10:38 AM, team lnx wrote: >> > > > Hello, >> > > > >> > > > I see a ping not working in below topology with xdp redirect >> > > > >> > > > >> > > > IFACE1 <---------> IFACE2 IFACE3 <------------------> IFACE4 >> > > > >> > > > IFACE2 and IFACE3 are on same host machine >> > > > >> > > > IFACE1 and IFACE2 are on static ip >> > > > IFACE3 and IFACE4 are on dynamic ip, IFACE4 runs dhcp server >> > > > >> > > > steps >> > > > 1. assign static ip between IFACE1 and IFACE2 (ex: 172.168.2.x) >> > > > 2. dynamic ip between IFACE3 and IFACE4 (ex: 192.168.2.x) >> > > > 3. Run xdp redirect on IFACE2 and IFACE3 >> > > > 4. start ping from IFACE1 to IFACE4 >> > > >> > > Does IFACE1 have a route to 192.168.2.x and is the next hop resolved? >> > > You can use `tcpdump` on IFACE1 and IFACE4 to see what packets are sent >> > > and received. >> >> >> >> -- >> E' meglio coltivare GNU/Linux... tanto Windows si pianta da solo!!
|