From owner-freebsd-questions@freebsd.org Sat Jan 16 10:01:34 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 891654D9E6B for ; Sat, 16 Jan 2021 10:01:34 +0000 (UTC) (envelope-from freebsd@sudoers.net) Received: from mail.doom-labs.net (diabolo.doom-labs.net [81.92.172.233]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4DHtqb31HQz3Mx1 for ; Sat, 16 Jan 2021 10:01:29 +0000 (UTC) (envelope-from freebsd@sudoers.net) Received: from [192.168.1.123] (gw-out.haj.doom.de [212.60.130.139]) (Authenticated sender: gehm@doom-labs.net) by mail.doom-labs.net (Postfix) with ESMTPSA id 769BE9F37F for ; Sat, 16 Jan 2021 11:01:24 +0100 (CET) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.103.0 at mail.doom-labs.net DKIM-Filter: OpenDKIM Filter v2.10.3 mail.doom-labs.net 769BE9F37F DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sudoers.net; s=201810; t=1610791284; bh=DpsrIzzR15HWJec5nUawagqct4+GuES5ITJ7KlMjy38=; h=To:References:From:Subject:Date:In-Reply-To:From; b=F/bQowh/KecI3DvHyYacxnPnZFexOz3drkgqPItPcrojs+fXcs8jcqmqb3I1BOlOj dd7muaJMlZu0RqEAniyBDJHwrkjPaGhgcneF2SxzBnxBkkNu0gmykEiaWx+P2N1of+ mkmK0dX6FvcX1toCE+n8v6M3nfgiEK6LH93EmfX0VK5RkkTpxe6AS3+2Y+YMmR4rUD hnElerddQoh3CRIZtJhpTvuhSy1F5QTjX1ubgC5zYlSEg8kIJJoQSOD1hsskz94sx1 w40t0718fH9J/uxP7BiEKZ5QLXF4d+zVnP0IhSWK9zw1j6sfoEg+eNuNBnwGrE+fk3 obwLt0bt6lVCQ== To: freebsd-questions@freebsd.org References: <0365d82d-88f2-6ce8-b730-edd7982ba083@sudoers.net> From: Ekkehard Gehm Subject: Re: iSCSI initiator to target with multiple IPs Message-ID: Date: Sat, 16 Jan 2021 11:01:24 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.6.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="5GAKg0T89yjWKeNPJZkQWtG27k6MmW5MJ" X-Spam-Status: No, score=-3.1 required=5.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on diabolo.doom-labs.net X-Rspamd-Queue-Id: 4DHtqb31HQz3Mx1 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=sudoers.net header.s=201810 header.b=F/bQowh/; dmarc=pass (policy=none) header.from=sudoers.net; spf=pass (mx1.freebsd.org: domain of freebsd@sudoers.net designates 81.92.172.233 as permitted sender) smtp.mailfrom=freebsd@sudoers.net X-Spamd-Result: default: False [-6.10 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; HAS_ATTACHMENT(0.00)[]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[sudoers.net:+]; DMARC_POLICY_ALLOW(-0.50)[sudoers.net,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~]; RBL_DBL_DONT_QUERY_IPS(0.00)[81.92.172.233:from]; ASN(0.00)[asn:21385, ipnet:81.92.160.0/20, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[sudoers.net:s=201810]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; SPAMHAUS_ZRD(0.00)[81.92.172.233:from:127.0.2.255]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jan 2021 10:01:34 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --5GAKg0T89yjWKeNPJZkQWtG27k6MmW5MJ Content-Type: multipart/mixed; boundary="OSreicVWPwlo6UGJo6cECjPENGi14gISA"; protected-headers="v1" From: Ekkehard Gehm To: freebsd-questions@freebsd.org Message-ID: Subject: Re: iSCSI initiator to target with multiple IPs References: <0365d82d-88f2-6ce8-b730-edd7982ba083@sudoers.net> In-Reply-To: --OSreicVWPwlo6UGJo6cECjPENGi14gISA Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-GB Ahoy Scott, Am 16.01.2021 um 07:21 schrieb Scott: > On Fri, Jan 15, 2021 at 12:30:52PM +0100, Ekkehard Gehm wrote: >> Ahoy! >> >> I hope someone can give me a hint on an issue I have with iSCSI. >> >> I have a FreeBSD Server (the iSCSI initiator) which connects to a Dell= >> Equilogic RAID (the iSCSI target). So far no big deal. But... The Targ= et >> has one IP to connect to but in reality it has 8 interfaces with >> different IPs for traffic shaping. >> >> So. The initial connect to the pool-ip will result in a connection to >> one of those 8 ips. Every now and then, the RAID (target) shifts the >> interfaces. That will result in a message that the the target has move= d >> to another ip... And that is where shit happens - My FreeBSD initiator= >> drops the target completely (With a warning " target requests logout; >> removing session")... Bad thing :-) >> >> I don't know where to look. Is it multipath? MPIO? >> >> Any hint is highly appreciated :-) >> >> Cheers! >> >> Ekki >> >> > Hi, > more from a networking perspective than an iSCSI one: when you say that= the=20 > initial connection to the pool-ip results in a connection to an interfa= ce=20 > address - is this an iSCSI redirection or is there a proxy of sorts (th= at=20 > would obscure the real target address)? > > Put another way, if configured to connect to IP 1.1.1.1, after the conn= ection=20 > would netstat show the initiator connected to 1.1.1.1 or another addres= s? > > Scott > _______________________________________________ Fair question. The "icscictl -L" and also netstat lists one of the pool addresses not the initial and configured address. So my client with, lets say, address 1.1.1.101 has the address e.g. 1.1.1.1 in his iscsi.conf but will than connect to one of the pool IPs 1.1.1.2 - 1.1.1.9 on port 3260 It works just fine with the VMware vSphere hosts... :/ Ekki --OSreicVWPwlo6UGJo6cECjPENGi14gISA-- --5GAKg0T89yjWKeNPJZkQWtG27k6MmW5MJ Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wmMEABEIACMWIQSyS/1dgH7dA1TlJQLcAzNBjqfO5gUCYAK5dAUDAAAAAAAKCRDcAzNBjqfO5sBE AKCckbAVfnPs1Q48V+bQxm2VBag61gCgtZoyalkV/3LAvWtliViU7mYqLd0= =cLeG -----END PGP SIGNATURE----- --5GAKg0T89yjWKeNPJZkQWtG27k6MmW5MJ--