Uploaded image for project: 'vpp'
  1. vpp
  2. VPP-1329

NAT44: nat44_ed_not_translate_output_feature bug

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Medium Medium
    • 18.07
    • 18.07
    • S-NAT
    • None

      Attempt to access web server 31.134.97.51 on Internet from pod 10.1.2.141, fails for TCP because the SYN packet is not source NATed:

      02:26:34:362239: virtio-input
      virtio: hw_if_index 13 next-index 4 vring 0 len 74
      hdr: flags 0x00 gso_type 0x00 hdr_len 0 gso_size 0 csum_start 0 csum_offset 0 num_buffers 1
      02:26:34:362245: ethernet-input
      IP4: 00:00:00:00:00:02 -> 02:fe:75:76:b0:62
      02:26:34:362250: ip4-input
      TCP: 10.1.2.141 -> 31.134.97.51
      tos 0x00, ttl 64, length 60, checksum 0x25d8
      fragment id 0x879d, flags DONT_FRAGMENT
      TCP: 36268 -> 80
      seq. 0x267a482d ack 0x00000000
      flags 0x02 SYN, tcp header: 40 bytes
      window 29200, checksum 0x7c34
      02:26:34:362253: nat44-ed-out2in
      NAT44_OUT2IN_FAST_PATH: sw_if_index 13, next index 4, session -1
      02:26:34:362256: nat44-ed-out2in-slowpath
      NAT44_OUT2IN_SLOW_PATH: sw_if_index 13, next index 1, session -1
      02:26:34:362261: ip4-lookup
      fib 0 dpo-idx 1 flow hash: 0x00000000
      TCP: 10.1.2.141 -> 31.134.97.51
      tos 0x00, ttl 64, length 60, checksum 0x25d8
      fragment id 0x879d, flags DONT_FRAGMENT
      TCP: 36268 -> 80
      seq. 0x267a482d ack 0x00000000
      flags 0x02 SYN, tcp header: 40 bytes
      window 29200, checksum 0x7c34
      02:26:34:362264: ip4-rewrite
      tx_sw_if_index 1 dpo-idx 1 : ipv4 via 192.168.16.100 GigabitEthernet0/8/0: mtu:9000 0800279d6a1d0800277b4caa0800 flow hash: 0x00000000
      00000000: 0800279d6a1d0800277b4caa08004500003c879d40003f0626d80a01028d1f86
      00000020: 61338dac0050267a482d00000000a00272107c340000020405b40402
      02:26:34:362266: nat44-ed-in2out-output
      NAT44_IN2OUT_FAST_PATH: sw_if_index 13, next index 3, session -1
      02:26:34:362267: nat44-ed-in2out-output-slowpath
      NAT44_IN2OUT_SLOW_PATH: sw_if_index 13, next index 0, session -1
      02:26:34:362270: GigabitEthernet0/8/0-output
      GigabitEthernet0/8/0
      IP4: 08:00:27:7b:4c:aa -> 08:00:27:9d:6a:1d
      TCP: 10.1.2.141 -> 31.134.97.51
      tos 0x00, ttl 63, length 60, checksum 0x26d8
      fragment id 0x879d, flags DONT_FRAGMENT
      TCP: 36268 -> 80
      seq. 0x267a482d ack 0x00000000
      flags 0x02 SYN, tcp header: 40 bytes
      window 29200, checksum 0x7c34
      02:26:34:362271: GigabitEthernet0/8/0-tx
      GigabitEthernet0/8/0 tx queue 0
      buffer 0x5ac31: current data 0, length 74, free-list 0, clone-count 0, totlen-nifb 0, trace 0x0
      l2-hdr-offset 0 l3-hdr-offset 14
      PKT MBUF: port 65535, nb_segs 1, pkt_len 74
      buf_len 2176, data_len 74, ol_flags 0x0, data_off 128, phys_addr 0x188b0cc0
      packet_type 0x0 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0
      rss 0x0 fdir.hi 0x0 fdir.lo 0x0
      IP4: 08:00:27:7b:4c:aa -> 08:00:27:9d:6a:1d
      TCP: 10.1.2.141 -> 31.134.97.51
      tos 0x00, ttl 63, length 60, checksum 0x26d8
      fragment id 0x879d, flags DONT_FRAGMENT
      TCP: 36268 -> 80
      seq. 0x267a482d ack 0x00000000
      flags 0x02 SYN, tcp header: 40 bytes
      window 29200, checksum 0x7c34

            matfabia Matus Fabian
            matfabia Matus Fabian
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: