Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 Oct 2007 09:57:13 +0200
From:      Milan Obuch <freebsd-net@dino.sk>
To:        freebsd-net@freebsd.org
Subject:   Re: packet loss with carp on 6.2
Message-ID:  <200710200957.15087.freebsd-net@dino.sk>
In-Reply-To: <200710190508.50040.max@love2party.net>
References:  <2385.62.242.232.132.1192696439.squirrel@www.enableit.dk> <200710182255.48379.freebsd-net@dino.sk> <200710190508.50040.max@love2party.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Friday 19 October 2007 05:08:43 Max Laier wrote:
> On Thursday 18 October 2007, Milan Obuch wrote:
> > On Thursday 18 October 2007 14:32:13 Milan Obuch wrote:
> > > On Thursday 18 October 2007 12:50:19 Max Laier wrote:

[ snip ]

> > >
> > > I am experiencing something similar. I am trying to put together two
> > > PC firewall with failover. My rc.conf has following lines
> >
> > [ snip ]
> >
> > I did even simpler test: one firewall with one switch.
> >
> > ifconfig fxp0 10.0.0.1/26
> > ifconfig carp0 create
> > ifconfig carp0 10.0.0.2/26 vhid ... pass ...
> >
> > switch has IP 10.0.0.3
> >
> > ping -S 10.0.0.1 10.0.0.3 works, no loss.
> > ping -S 10.0.0.2 10.0.0.3 does not work well, ~ 80 % packet loss.
> >
> > This seems unusable to me. I see no simpler test right now...
>
> Can you do a tcpdump on fxp0 during this test and analyse if the loss is
> in received or send packets.  It is possible that the switch is the
> culprit here.
>

I did some more tests, and there seems to be an issue with switch. Making the 
same tests against host connected via the very same switch does not fail in 
any way. I will try to solve the issue with vendor. Now I am looking for some 
workaround - we can't swap the switch for another, so we need to live with 
it.

>
> Maybe you can provide me with the pcap of this off list.  Make sure to
> start dumpping *before* bringing up carp. i.e.
>
>   tcpdump -s 0 -i fxp0 -w carp_ping.pcap &
>   ifconfig carp0 vhid ...
>
>   ping ...
>
>   fg ^C
>
> Thanks.

I will try it and will send it to you privately, just now I need a workaround 
so I can use carp in our network to full benefit. Even the packet loss 
detected does not actually come from real network outage, it is real 
nightmare for network stuff.

Regards,
Milan

-- 
No need to mail me directly. Just reply to mailing list, please.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200710200957.15087.freebsd-net>