Project

General

Profile

Bug #84220

Cherrypick IPFW fixes for VRRP and VERSRCREACH

Added by Joel Brooks over 2 years ago. Updated over 2 years ago.

Status:
Done
Priority:
No priority
Assignee:
Ryan Moeller
Category:
OS
Target version:
Severity:
Low Medium
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

I believe I'm suffering from this bug: (ipfw_chk() does m_pullup() and barfs on vrrp as it shares a protocol number with CARP).

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234207

It appears that a fix has been committed to freebsd recently (Jan 18, 2019).

I was curious to know how long I should expect for that fix to make it into FreeNAS....? and/or if there's a way for me to apply the fix to FreeNAS if it's going to be a while until it gets here.

some info from my current log file:

root@san0:/mnt/zpool0/home-dirs/jbrooks/Certificates # tail /var/log/messages
Mar 31 05:34:28 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:28 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:28 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:28 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:29 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:29 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:29 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:29 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:29 san0.oddelement.com ipfw: pullup failed
Mar 31 05:34:29 san0.oddelement.com ipfw: pullup failed
root@san0:/mnt/zpool0/home-dirs/jbrooks/Certificates # grep "pullup failed" /var/log/messages |wc -l
120384
root@san0:/mnt/zpool0/home-dirs/jbrooks/Certificates # grep -v "pullup failed" /var/log/messages | wc -l
9
root@san0:/mnt/zpool0/home-dirs/jbrooks/Certificates #

History

#1 Updated by Dru Lavigne over 2 years ago

  • Category changed from Services to OS
  • Assignee changed from Release Council to Alexander Motin

#2 Updated by Alexander Motin over 2 years ago

  • Assignee changed from Alexander Motin to Ryan Moeller

#3 Updated by Ryan Moeller over 2 years ago

  • Status changed from Unscreened to Screened

#4 Updated by Ryan Moeller over 2 years ago

  • Status changed from Screened to In Progress
  • Target version changed from Backlog to 11.2-U4
  • Severity changed from New to Low Medium

#5 Updated by Ryan Moeller over 2 years ago

  • Status changed from In Progress to Ready for Testing
  • Needs Merging changed from Yes to No

Joel: The requested patch has been committed and is slated for release with U4, which I estimate will be available some time early next month. You might be able to grab the freenas/11.2-stable branch and build the ipfw module yourself, but I am not sure how likely it is that would work.

#7 Updated by Dru Lavigne over 2 years ago

  • Subject changed from log is full of "ipfw: pullup failed" messages to Cherrypick IPFW fixes for VRRP and VERSRCREACH
  • Status changed from Ready for Testing to Done
  • Needs QA changed from Yes to No
  • Needs Doc changed from Yes to No

Also available in: Atom PDF