Uploaded image for project: 'vpp'
  1. vpp
  2. VPP-1404

Incorrectly applied SNAT with multiple vrf

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Medium Medium
    • 18.07, 18.10
    • None
    • S-NAT
    • None

      vpp version:

      https://github.com/vpp-dev/vpp/commits/stable-1807-contiv

      798269844bf8aebb98952edd062e2b9145d1448a

      Packet23:
      01:22:46:592317: virtio-input
        virtio: hw_if_index 12 next-index 4 vring 0 len 54
          hdr: flags 0x00 gso_type 0x00 hdr_len 0 gso_size 0 csum_start 0 csum_offset 0 num_buffers 1
      01:22:46:592324: ethernet-input
        IP4: 00:00:00:00:00:02 -> 02:fe:b6:d9:55:26
      01:22:46:592331: ip4-input
        TCP: 10.1.3.19 -> 172.217.17.68
          tos 0x00, ttl 64, length 40, checksum 0x4c93
          fragment id 0x230c, flags DONT_FRAGMENT
        TCP: 45096 -> 443
          seq. 0xa397a273 ack 0x2912a602
          flags 0x10 ACK, tcp header: 20 bytes
          window 28200, checksum 0xaf77
      01:22:46:592334: nat44-ed-out2in
        NAT44_OUT2IN_FAST_PATH: sw_if_index 12, next index 4, session -1
      01:22:46:592338: nat44-ed-out2in-slowpath
        NAT44_OUT2IN_SLOW_PATH: sw_if_index 12, next index 3, session -1
      01:22:46:592342: nat44-ed-in2out
        NAT44_IN2OUT_FAST_PATH: sw_if_index 12, next index 0, session 200
      01:22:46:592344: ip4-lookup
        fib 0 dpo-idx 1 flow hash: 0x00000000
        TCP: 192.168.16.3 -> 172.217.17.68
          tos 0x00, ttl 64, length 40, checksum 0x88fb
          fragment id 0x230c, flags DONT_FRAGMENT
        TCP: 50835 -> 443
          seq. 0xa397a273 ack 0x2912a602
          flags 0x10 ACK, tcp header: 20 bytes
          window 28200, checksum 0xd574
      01:22:46:592347: ip4-rewrite
        tx_sw_if_index 1 dpo-idx 1 : ipv4 via 192.168.16.100 GigabitEthernet0/8/0: mtu:9000 0800270fae7608002767fb8b0800 flow hash: 0x00000000
        00000000: 0800270fae7608002767fb8b080045000028230c40003f0689fbc0a81003acd9
        00000020: 1144c69301bba397a2732912a60250106e28d5740000000000000000
      01:22:46:592349: nat44-ed-in2out-output
        NAT44_IN2OUT_FAST_PATH: sw_if_index 12, next index 3, session -1
      01:22:46:592350: nat44-ed-in2out-output-slowpath
        NAT44_IN2OUT_SLOW_PATH: sw_if_index 12, next index 0, session 338
      01:22:46:592362: GigabitEthernet0/8/0-output
        GigabitEthernet0/8/0
        IP4: 08:00:27:67:fb:8b -> 08:00:27:0f:ae:76
        TCP: 192.168.16.3 -> 172.217.17.68
          tos 0x00, ttl 63, length 40, checksum 0x89fb
          fragment id 0x230c, flags DONT_FRAGMENT
        TCP: 42342 -> 443
          seq. 0xa397a273 ack 0x2912a602
          flags 0x10 ACK, tcp header: 20 bytes
          window 28200, checksum 0xf6a1
      01:22:46:592363: GigabitEthernet0/8/0-tx
        GigabitEthernet0/8/0 tx queue 0
        buffer 0x21f3e: current data 0, length 54, free-list 0, clone-count 0, totlen-nifb 0, trace 0x16
                        nated l2-hdr-offset 0 l3-hdr-offset 14
        PKT MBUF: port 65535, nb_segs 1, pkt_len 54
          buf_len 2176, data_len 54, ol_flags 0x0, data_off 128, phys_addr 0x6f07d000
          packet_type 0x0 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0
          rss 0x0 fdir.hi 0x0 fdir.lo 0x0
        IP4: 08:00:27:67:fb:8b -> 08:00:27:0f:ae:76
        TCP: 192.168.16.3 -> 172.217.17.68
          tos 0x00, ttl 63, length 40, checksum 0x89fb
          fragment id 0x230c, flags DONT_FRAGMENT
        TCP: 42342 -> 443
          seq. 0xa397a273 ack 0x2912a602
          flags 0x10 ACK, tcp header: 20 bytes
          window 28200, checksum 0xf6a1
      
      

        1. vppConfig.txt
          0.7 kB
        2. snat.log
          93 kB

            matfabia Matus Fabian
            lmck Lukas Macko
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: