Commit 8a39988
committed
docker: workaround RPF=0 kernel issue w/ dummy IP
Prior to this commit, some kernels (namely 6.11.0-1015-azure), gives
the following error when IP packets ingress via the _seg_pair interface:
(pwru trace)
```
0xffff95c58b7854e8 1 ksoftirqd/1:31 4026533013 0 2 0x0800 1500 60 192.168.254.2:36706->10.244.0.111:8080(tcp) ip_route_input_slow
0xffff95c58b7854e8 1 ksoftirqd/1:31 4026533013 0 2 0x0800 1500 60 192.168.254.2:36706->10.244.0.111:8080(tcp) fib_validate_source
0xffff95c58b7854e8 1 ksoftirqd/1:31 4026533013 0 2 0x0800 1500 60 192.168.254.2:36706->10.244.0.111:8080(tcp) __fib_validate_source
0xffff95c58b7854e8 1 ksoftirqd/1:31 4026533013 0 2 0x0800 1500 60 192.168.254.2:36706->10.244.0.111:8080(tcp) ip_handle_martian_source
0xffff95c58b7854e8 1 ksoftirqd/1:31 4026533013 0 2 0x0800 1500 60 192.168.254.2:36706->10.244.0.111:8080(tcp) sk_skb_reason_drop(SKB_DROP_REASON_IP_RPFILTER)
0xffff95c58b7854e8 1 ksoftirqd/1:31 4026533013 0 2 0x0800 1500 60 192.168.254.2:36706->10.244.0.111:8080(tcp) skb_release_head_state
```
even when rpf=0. This does seem to happen for instance with kernel
6.12.30 (Debian13).
This commit assigns a dummy IPv4 address, 203.0.113.1/32 which is
part of the reserved Documentation block and should never interfere
with any address, to work-around this issue.1 parent bc516ff commit 8a39988
1 file changed
+2
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
138 | 138 | | |
139 | 139 | | |
140 | 140 | | |
| 141 | + | |
| 142 | + | |
141 | 143 | | |
142 | 144 | | |
143 | 145 | | |
| |||
0 commit comments