Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Date: Mon, 31 Oct 2016 19:47:58 +0000 (UTC)
From: "ASF GitHub Bot (JIRA)" <jira@apache.org>
To: cloudstack-issues@incubator.apache.org
Message-ID: <JIRA.12781558.1426180410000.136090.1477943278410@Atlassian.JIRA>
In-Reply-To: <JIRA.12781558.1426180410000@Atlassian.JIRA>
References: <JIRA.12781558.1426180410000@Atlassian.JIRA> <JIRA.12781558.1426180410129@arcas>
Subject: [jira] [Commented] (CLOUDSTACK-8326) Bug in cloudstack virtual
 router (KVM) in Simple zone with public ips / DHCP Debian Wheezy specific
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Mon, 31 Oct 2016 19:48:00 -0000


    [ https://issues.apache.org/jira/browse/CLOUDSTACK-8326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15623156#comment-15623156 ] 

ASF GitHub Bot commented on CLOUDSTACK-8326:
--------------------------------------------

GitHub user wido opened a pull request:

    https://github.com/apache/cloudstack/pull/1743

    CLOUDSTACK-8326: Always fill UDP checksums in DHCP replies in VR

    In some cases the UDP checksums in packets from DHCP servers are
    incorrect. This is a problem for some DHCP clients that ignore
    packets with bad checksums. This patch inserts an iptables rule
    to ensure DHCP servers always send packets with correct checksums.
    
    Due to this bug DHCP offers are sometimes not accepted by Instances.
    
    The end-result without this fix is no connectivity for the Instance
    due to the lack of a IPv4 address.
    
    Signed-off-by: Wido den Hollander <wido@widodh.nl>

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/wido/cloudstack CLOUDSTACK-8326

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/cloudstack/pull/1743.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #1743
    
----
commit 32689b26d0f2f6763604b2b67649cca9e470fcf7
Author: Wido den Hollander <wido@widodh.nl>
Date:   2016-10-31T19:43:39Z

    CLOUDSTACK-8326: Always fill UDP checksums in DHCP replies in VR
    
    In some cases the UDP checksums in packets from DHCP servers are
    incorrect. This is a problem for some DHCP clients that ignore
    packets with bad checksums. This patch inserts an iptables rule
    to ensure DHCP servers always send packets with correct checksums.
    
    Due to this bug DHCP offers are sometimes not accepted by Instances.
    
    The end-result without this fix is no connectivity for the Instance
    due to the lack of a IPv4 address.
    
    Signed-off-by: Wido den Hollander <wido@widodh.nl>

----


> Bug in cloudstack virtual router (KVM) in Simple zone with public ips / DHCP Debian Wheezy specific
> ---------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-8326
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8326
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: KVM, Virtual Router
>    Affects Versions: 4.3.2
>         Environment: Ubuntu 12.04.5 for Host
> Debian Squeeze for VR
>            Reporter: Ivan A Kudryavtsev
>            Assignee: Wido den Hollander
>             Fix For: Future, 4.10.0.0, 4.9.2.0
>
>
> I've found bug in DHCP component of VR 4.3.2. The bug is completely described at:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717217
> DHCP responses with bad checksum. As a result, dhcp client unable to get lease: "dhcpd: 5 bad udp checksums in 5 packets"
> Hotfix is:
> iptables -A POSTROUTING -t mangle -p udp --dport bootpc -j CHECKSUM --checksum-fill
> on VR.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)