From owner-freebsd-net@FreeBSD.ORG Sat Oct 20 07:58:02 2007 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5800E16A41B for ; Sat, 20 Oct 2007 07:58:02 +0000 (UTC) (envelope-from freebsd-net@dino.sk) Received: from loki.netlab.sk (ns1.netlab.sk [84.245.65.2]) by mx1.freebsd.org (Postfix) with ESMTP id E446513C474 for ; Sat, 20 Oct 2007 07:58:01 +0000 (UTC) (envelope-from freebsd-net@dino.sk) Received: from lex.dino.sk (home.dino.sk [84.245.95.252]) (AUTH: PLAIN milan, TLS: TLSv1/SSLv3,256bits,AES256-SHA) by loki.netlab.sk with esmtp; Sat, 20 Oct 2007 09:54:22 +0200 id 0002E033.4719B42E.00002D72 From: Milan Obuch To: freebsd-net@freebsd.org Date: Sat, 20 Oct 2007 09:57:13 +0200 User-Agent: KMail/1.9.6 References: <2385.62.242.232.132.1192696439.squirrel@www.enableit.dk> <200710182255.48379.freebsd-net@dino.sk> <200710190508.50040.max@love2party.net> In-Reply-To: <200710190508.50040.max@love2party.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200710200957.15087.freebsd-net@dino.sk> Subject: Re: packet loss with carp on 6.2 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2007 07:58:02 -0000 On Friday 19 October 2007 05:08:43 Max Laier wrote: > On Thursday 18 October 2007, Milan Obuch wrote: > > On Thursday 18 October 2007 14:32:13 Milan Obuch wrote: > > > On Thursday 18 October 2007 12:50:19 Max Laier wrote: [ snip ] > > > > > > I am experiencing something similar. I am trying to put together two > > > PC firewall with failover. My rc.conf has following lines > > > > [ snip ] > > > > I did even simpler test: one firewall with one switch. > > > > ifconfig fxp0 10.0.0.1/26 > > ifconfig carp0 create > > ifconfig carp0 10.0.0.2/26 vhid ... pass ... > > > > switch has IP 10.0.0.3 > > > > ping -S 10.0.0.1 10.0.0.3 works, no loss. > > ping -S 10.0.0.2 10.0.0.3 does not work well, ~ 80 % packet loss. > > > > This seems unusable to me. I see no simpler test right now... > > Can you do a tcpdump on fxp0 during this test and analyse if the loss is > in received or send packets. It is possible that the switch is the > culprit here. > I did some more tests, and there seems to be an issue with switch. Making the same tests against host connected via the very same switch does not fail in any way. I will try to solve the issue with vendor. Now I am looking for some workaround - we can't swap the switch for another, so we need to live with it. > > Maybe you can provide me with the pcap of this off list. Make sure to > start dumpping *before* bringing up carp. i.e. > > tcpdump -s 0 -i fxp0 -w carp_ping.pcap & > ifconfig carp0 vhid ... > > ping ... > > fg ^C > > Thanks. I will try it and will send it to you privately, just now I need a workaround so I can use carp in our network to full benefit. Even the packet loss detected does not actually come from real network outage, it is real nightmare for network stuff. Regards, Milan -- No need to mail me directly. Just reply to mailing list, please.