<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div markdown-here-wrapper-content-modified="true" style=""
class="markdown-here-wrapper" data-md-url="Thunderbird">
<p style="margin: 0px 0px 1.2em ! important;">Hi</p>
<p style="margin: 0px 0px 1.2em ! important;">Has anyone
encountered a bug regarding to Linux bridge, KVM and IPv6?</p>
<p style="margin: 0px 0px 1.2em ! important;">I have a situation
where my KVM machine cannot see other VMs in another node.
Everything else is working inside a PVE Host. But this VM can
ping outside world, for example Facebook, Google (IPv6 of
course) etc.</p>
<p style="margin: 0px 0px 1.2em ! important;">I’ve found bugreport
from 2014, but it should be solved by now. And I have latest
2.6.32-37-pve kernel ( Installed: 2.6.32-150) and regarding to
changelog, IPv6 neighbor solicitation should be solved in -149
release.</p>
<pre style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;font-size: 1em; line-height: 1.2em;margin: 1.2em 0px;"><code style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;margin: 0px 0.15em; padding: 0px 0.3em; white-space: pre-wrap; border: 1px solid rgb(234, 234, 234); background-color: rgb(248, 248, 248); border-radius: 3px; display: inline;white-space: pre; overflow: auto; border-radius: 3px; border: 1px solid rgb(204, 204, 204); padding: 0.5em 0.7em; display: block ! important;">pve-kernel-2.6.32 (2.6.32-149) unstable; urgency=low
* IPv6: forwaring ICMP6 neighbor solicitation on bridge
</code></pre>
<p style="margin: 0px 0px 1.2em ! important;">Switches: Extreme
Summit X670-48x, DELL N4064F<br>
Network cards (10G): </p>
<pre style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;font-size: 1em; line-height: 1.2em;margin: 1.2em 0px;"><code style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;margin: 0px 0.15em; padding: 0px 0.3em; white-space: pre-wrap; border: 1px solid rgb(234, 234, 234); background-color: rgb(248, 248, 248); border-radius: 3px; display: inline;white-space: pre; overflow: auto; border-radius: 3px; border: 1px solid rgb(204, 204, 204); padding: 0.5em 0.7em; display: block ! important;"> Intel Corporation 82599EB 10-Gigabit SFI/SFP+ (using driver <b>ixgbe</b> version 3.23.2)
Ethernet Controller X710 for 10GbE SFP+ (using driver <b>i40e</b> version 1.1.23,
because latest driver did not work with IPv4)
</code></pre>
<p style="margin: 0px 0px 1.2em ! important;">The sad thing is
that it's quite chaotic - it's working in some VLANs quite OK,
but in some VLANs it's not.<br>
</p>
<p style="margin: 0px 0px 1.2em ! important;">Multicast ping
(ff02::1) does not show all link local addresses in reply
(tcpdump running on multiple VMs - in same node, in different
node) on some VMs, so my guess is that Linux bridge does not
forward neighbor solicitation packets still.<br>
</p>
<p style="margin: 0px 0px 1.2em ! important;">Upper part is
written in morning, but I wanted to archive it for later.
Anyway, here is what I have so far.<br>
</p>
<p style="margin: 0px 0px 1.2em ! important;">When a random
machine pings this new VM (ipv6), then it cannot see it. Tcpdump
shows that Linux bridge cannot hear neighbour solicitation
packets. When I ping from VM to random machine, then everything
is working. As long as this (for example physical) machine
remembers this VM MAC and IP.<br>
</p>
<p style="margin: 0px 0px 1.2em ! important;">So, I have again
updated drivers (i40e network card drivers). Tried the one,
which is coming from pve-kernel and the latest 1.2.38 from Intel
webpage - still, i40e driver "eats" my NS packets.<br>
See my other problem:
<a class="moz-txt-link-freetext" href="http://comments.gmane.org/gmane.linux.pve.user/4184">http://comments.gmane.org/gmane.linux.pve.user/4184</a><br>
</p>
<p style="margin: 0px 0px 1.2em ! important;">My next guess is
that maybe it's Linux bridge + i40e bug, I am going to try
openvswitch configuration in that node.<br>
</p>
<p style="margin: 0px 0px 1.2em ! important;">All the best<br>
Sten</p>
<div
title="MDH:SGk8YnI+PGJyPkhhcyBhbnlvbmUgZW5jb3VudGVyZWQgYSBidWcgcmVnYXJkaW5nIHRvIExpbnV4IGJyaWRnZSwgS1ZNIGFuZCBJUHY2Pzxicj5JIGhhdmUgYSBzaXR1YXRpb24gd2hlcmUgbXkgS1ZN
IG1hY2hpbmUgY2Fubm90IHNlZSBvdGhlciBWTXMgaW4gYW5vdGhlciBub2RlLiBFdmVyeXRoaW5n
IGVsc2UgaXMgd29ya2luZyBpbnNpZGUgYSBQVkUgSG9zdC4gQnV0IHRoaXMgVk0gY2FuIHBpbmcg
b3V0c2lkZSB3b3JsZCwgZm9yIGV4YW1wbGUgRmFjZWJvb2ssIEdvb2dsZSAoSVB2NiBvZiBjb3Vy
c2UpIGV0Yy48YnI+PGJyPkkndmUgZm91bmQgYnVncmVwb3J0IGZyb20gMjAxNCwgYnV0IGl0IHNo
b3VsZCBiZSBzb2x2ZWQgYnkgbm93LiBBbmQgSSBoYXZlIGxhdGVzdCAyLjYuMzItMzctcHZlIGtl
cm5lbCAowqAgSW5zdGFsbGVkOiAyLjYuMzItMTUwKSBhbmQgcmVnYXJkaW5nIHRvIGNoYW5nZWxv
ZywgSVB2NiBuZWlnaGJvciBzb2xpY2l0YXRpb24gc2hvdWxkIGJlIHNvbHZlZCBpbiAtMTQ5IHJl
bGVhc2UuPGJyPmBgYDxicj48cHJlIHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXN0
eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs
ZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRv
OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v
bmU7IHdpZG93czogMTsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk
dGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyB3aGl0ZS1zcGFjZTogcHJlLXdyYXA7Ij5w
dmUta2VybmVsLTIuNi4zMiAoMi42LjMyLTE0OSkgdW5zdGFibGU7IHVyZ2VuY3k9bG93CiAgKiBJ
UHY2OiBmb3J3YXJpbmcgSUNNUDYgbmVpZ2hib3Igc29saWNpdGF0aW9uIG9uIGJyaWRnZQo8L3By
ZT4KYGBgPGJyPkEgYmlnIHByb2JsZW0gZm9yIG1lIGFuZCBhZnRlciBsb25nIHRlc3RpbmcgaG91
cnMgbXkgZ3Vlc3MgaXMgdGhhdCBpdCdzIG5vdCByZWxhdGVkIHRvIG5ldHdvcmsgY2FyZHMgbm9y
IHN3aXRjaGVzLCBiZWNhdXNlIHRoZSBwcm9ibGVtIGlzIHJlbGF0ZWQgd2l0aCBkaWZmZXJlbnQg
aG9zdHMuPGJyPlN3aXRjaGVzOiBFeHRyZW1lIFN1bW1pdCBYNjcwLTQ4eCwgREVMTCBONDA2NEY8
YnI+TmV0d29yayBjYXJkcyAoMTBHKTogPGJyPmBgYDxicj7CoMKgIEludGVsIENvcnBvcmF0aW9u
IDgyNTk5RUIgMTAtR2lnYWJpdCBTRkkvU0ZQKyAodXNpbmcgZHJpdmVyIDxiPml4Z2JlPC9iPiB2
ZXJzaW9uIDMuMjMuMik8YnI+wqDCoCBFdGhlcm5ldCBDb250cm9sbGVyIFg3MTAgZm9yIDEwR2JF
IFNGUCsgKHVzaW5nIGRyaXZlciA8Yj5pNDBlPC9iPiB2ZXJzaW9uIDEuMS4yMywgYmVjYXVzZSBs
YXRlc3QgZmlybXdhcmUgZGlkIG5vdCB3b3JrIGF0IGFsbCB3aXRoIFZNcyk8YnI+YGBgPGJyPjxi
cj5BbGwgdGhlIGJlc3Q8YnI+U3Rlbjxicj4="
style="height:0;width:0;max-height:0;max-width:0;overflow:hidden;font-size:0em;padding:0;margin:0;"></div>
</div>
</body>
</html>