[pve-devel] BUG in vlan aware bridge

[Stoyan Marinov]

That's an interesting observation. Now that I think about it, it could be caused by bonding and not the underlying device. When I tested this (about an year ago) I was using bonding on the mlx adapters and not using bonding on intel ones.

> On 12 Oct 2021, at 3:36 PM, VELARTIS Philipp Dürhammer <p.duerhammer at velartis.at> wrote:
> 
> HI,
> 
> we use HP Server with Intel Cards or the standard hp nic ( ithink also intel)
> 
> Also I see the I did a mistake:
> 
> Setup working:
> tapX (UNtagged) <- -> vmbr0 <- - > bond0
> 
> is correct. (before I had also tagged) 
> 
> it should be :
> 
> Setup not working:
> tapX (tagged) <- -> vmbr0 <- - > bond0
> 
> Setup working:
> tapX (untagged) <- -> vmbr0 <- - > bond0
> 
> Setup also working:
> tapX < - - > vmbr0v350 < -- > bond0.350 < -- > bond0
> 
> -----Ursprüngliche Nachricht-----
> Von: pve-devel <pve-devel-bounces at lists.proxmox.com> Im Auftrag von Stoyan Marinov
> Gesendet: Dienstag, 12. Oktober 2021 13:16
> An: Proxmox VE development discussion <pve-devel at lists.proxmox.com>
> Betreff: Re: [pve-devel] BUG in vlan aware bridge
> 
> I'm having the very same issue with Mellanox ethernet adapters. I don't see this behavior with Intel nics. What network cards do you have?
> 
>> On 12 Oct 2021, at 1:48 PM, VELARTIS Philipp Dürhammer <p.duerhammer at velartis.at> wrote:
>> 
>> HI,
>> 
>> i am playing around since days because we have strange packet losses.
>> Finally I can report following (Linux 5.11.22-4-pve, Proxmox 7, all devices MTU 1500):
>> 
>> Packet with sizes > 1500 without VLAN working well but at the moment they are Tagged they are dropped by the bond device.
>> Netfilter (set to 1) always reassembles the packets when they arrive a bridge. But they don't get fragmented again I they are VLAN tagged. So the bond device drops them. If the bridge is NOT Vlan aware they also get fragmented and it works well.
>> 
>> Setup not working:
>> 
>> tapX (tagged) <- -> vmbr0 <- - > bond0
>> 
>> Setup working:
>> 
>> tapX (tagged) <- -> vmbr0 <- - > bond0
>> 
>> Setup also working:
>> 
>> tapX < - - > vmbr0v350 < -- > bond0.350 < -- > bond0
>> 
>> Have you got any idea where to search? I don't understand who is in charge of fragmenting packages again if they get reassembled by netfilter. (and why it is not working with vlan aware bridges)
>> 
>> 
>> _______________________________________________
>> pve-devel mailing list
>> pve-devel at lists.proxmox.com
>> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
>> 
> 
> 
> _______________________________________________
> pve-devel mailing list
> pve-devel at lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
> _______________________________________________
> pve-devel mailing list
> pve-devel at lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel