Redhat的网站上报告 IPV6 loopback PING不通的问题

妖狐艹你老母 2022-12-05 02:17 73阅读 0赞

[**Bug 969950**][Bug_969950] - cant not add a range of virtual IPv6 addresses to interface

<table> 
 <tbody> 
  <tr> 
   <td> 
    <table> 
     <tbody> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/describekeywords.cgi" rel="nofollow">Keywords</a>:</th> 
       <td> <p>&nbsp;</p> </td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_status" rel="nofollow">Status</a>:</th> 
       <td>CLOSED NOTABUG</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#alias" rel="nofollow">Alias:</a></th> 
       <td>None</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/describecomponents.cgi" rel="nofollow">Product:</a></th> 
       <td>Red Hat Enterprise Linux 6</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/describecomponents.cgi?product=Red%20Hat%20Enterprise%20Linux%206" rel="nofollow">Component:</a></th> 
       <td>iproute&nbsp;&nbsp;</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#version" rel="nofollow">Version:</a></th> 
       <td>6.4</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#rep_platform" rel="nofollow">Hardware:</a></th> 
       <td>x86_64</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#op_sys" rel="nofollow">OS:</a></th> 
       <td>Linux</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#priority" rel="nofollow">Priority:</a></th> 
       <td>unspecified</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity" rel="nofollow">Severity:</a></th> 
       <td>medium</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#target_milestone" rel="nofollow">Target Milestone:</a></th> 
       <td>rc</td> 
      </tr> 
      <tr> 
       <td><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#target_release" rel="nofollow">Target&nbsp;Release</a>:</td> 
       <td>---</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#assigned_to" rel="nofollow">Assignee:</a></th> 
       <td>Petr Šabata</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#qa_contact" rel="nofollow">QA Contact:</a></th> 
       <td>BaseOS QE Security Team</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#docs_contact" rel="nofollow">Docs Contact:</a></th> 
       <td>&nbsp;</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_file_loc" rel="nofollow">URL:</a></th> 
       <td>&nbsp;</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#status_whiteboard" rel="nofollow">Whiteboard:</a></th> 
       <td>&nbsp;</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#dependson" rel="nofollow">Depends On:</a></th> 
       <td>&nbsp;</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#blocked" rel="nofollow">Blocks:</a></th> 
       <td>&nbsp;</td> 
      </tr> 
      <tr> 
       <th>TreeView+</th> 
       <td><a href="https://bugzilla.redhat.com/buglist.cgi?bug_id=969950&amp;bug_id_type=anddependson&amp;format=tvp" rel="nofollow">depends on</a>&nbsp;/&nbsp;<a href="https://bugzilla.redhat.com/buglist.cgi?bug_id=969950&amp;bug_id_type=andblocked&amp;format=tvp&amp;tvp_dir=blocked" rel="nofollow">blocked</a></td> 
       <td>&nbsp;</td> 
      </tr> 
     </tbody> 
    </table></td> 
   <td> <p>&nbsp;</p> </td> 
   <td> 
    <table> 
     <tbody> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#reporter" rel="nofollow">Reported:</a></th> 
       <td>2013-06-03 07:13 UTC by&nbsp;Geng Sheng Liu</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#modified" rel="nofollow">Modified:</a></th> 
       <td>2018-12-01 14:32 UTC (<a href="https://bugzilla.redhat.com/show_activity.cgi?id=969950" rel="nofollow">History</a>)</td> 
      </tr> 
      <tr> 
       <th><a href="https://bugzilla.redhat.com/page.cgi?id=fields.html#cclist" rel="nofollow">CC List:</a></th> 
       <td>3 users&nbsp;(<a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#" rel="nofollow">show</a>)</td> 
      </tr> 
      <tr> 
       <th>Fixed In Version:</th> 
       <td colspan="2">&nbsp;</td> 
      </tr> 
      <tr> 
       <th>Doc Type:</th> 
       <td colspan="2">Bug Fix&nbsp;</td> 
      </tr> 
      <tr> 
       <th>Doc Text:</th> 
       <td colspan="2">&nbsp;</td> 
      </tr> 
      <tr> 
       <th>Clone Of:</th> 
       <td colspan="2">&nbsp;</td> 
      </tr> 
      <tr> 
       <th>Environment:</th> 
       <td colspan="2">&nbsp;</td> 
      </tr> 
      <tr> 
       <th>Last Closed:</th> 
       <td colspan="2">2013-08-13 12:38:00 UTC</td> 
      </tr> 
      <tr> 
       <th>Target Upstream Version:</th> 
       <td colspan="2">&nbsp;</td> 
      </tr> 
     </tbody> 
    </table></td> 
  </tr> 
  <tr> 
   <td colspan="3"> 
    <hr></td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td>&nbsp; 
    <table> 
     <tbody> 
      <tr> 
       <th>Attachments</th> 
       <th colspan="2"><a href="https://bugzilla.redhat.com/page.cgi?id=terms-conditions.html" rel="nofollow">(Terms of Use)</a></th> 
      </tr> 
      <tr> 
       <td colspan="3"><a href="https://bugzilla.redhat.com/attachment.cgi?bugid=969950&amp;action=enter" rel="nofollow">Add an attachment</a>&nbsp;(proposed patch, testcase, etc.)</td> 
      </tr> 
     </tbody> 
    </table></td> 
   <td>&nbsp;</td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c0" rel="nofollow">Description</a>Geng Sheng Liu&nbsp;2013-06-03 07:13:40 UTC</p> <pre>Description of problem:

In IPv4 we can use the following command to add a ip subnet address to a interface like lo

#ip addr add 10.1.0.0/16 dev lo

But it failed in IPv6 with same command

# ip -6 addr add 2001:4860:0:2001::68/64  dev lo 
# ping6 2001:4860:0:2001::68 
PING 2001:4860:0:2001::68(2001:4860:0:2001::68) 56 data bytes 
64 bytes from 2001:4860:0:2001::68: icmp_seq=0 ttl=64 time=0.036 ms 
 
--- 2001:4860:0:2001::68 ping statistics --- 
1 packets transmitted, 1 received, 0% packet loss, time 0ms 
rtt min/avg/max/mdev = 0.036/0.036/0.036/0.000 ms, pipe 2 
# ping6 2001:4860:0:2001::69 
connect: Network is unreachable

Version-Release number of selected component (if applicable):

How reproducible:

always

Steps to Reproduce:
1. add ipv6 subnet address to a interface

#ip -6 addr add 2001:4860:0:2001::68/64  dev lo

Actual results:

only 2001:4860:0:2001::68 get response from a ping command.

Expected results:

all address in 2001:4860:0:2001::68/64 should be available.

Additional info:

<a href="https://access.redhat.com/site/solutions/36876" rel="nofollow">https://access.redhat.com/site/solutions/36876</a>

<a href="http://post-office.corp.redhat.com/archives/tech-list/2010-February/msg00468.html" rel="nofollow">http://post-office.corp.redhat.com/archives/tech-list/2010-February/msg00468.html</a>

</pre> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c2" rel="nofollow">Comment 2</a>Petr Šabata&nbsp;2013-06-03 13:02:45 UTC</p> <pre>(In reply to Geng Sheng Liu from <a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c0" rel="nofollow">comment #0</a>)
&gt; Additional info:
&gt; 
&gt; <a href="https://access.redhat.com/site/solutions/36876" rel="nofollow">https://access.redhat.com/site/solutions/36876</a>

This seems completely unrelated.

&gt; <a href="http://post-office.corp.redhat.com/archives/tech-list/2010-February/msg00468" rel="nofollow">http://post-office.corp.redhat.com/archives/tech-list/2010-February/msg00468</a>.
&gt; html

Basically I'd say the same as Neil did back in 2010, meaning IPv4 behaves incorrectly here.

Out of curiosity, could you elaborate on use cases of this "feature"?

</pre> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c4" rel="nofollow">Comment 4</a>Geng Sheng Liu&nbsp;2013-06-04 02:09:00 UTC</p> <pre>Correction:

KBase related is as below

<a href="https://access.redhat.com/site/solutions/27284" rel="nofollow">https://access.redhat.com/site/solutions/27284</a>

</pre> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c5" rel="nofollow">Comment 5</a>Hafid Lin&nbsp;2013-06-04 02:24:55 UTC</p> <pre>(In reply to Petr Šabata from <a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c2" rel="nofollow">comment #2</a>)
&gt; (In reply to Geng Sheng Liu from <a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c0" rel="nofollow">comment #0</a>)
&gt; &gt; Additional info:
&gt; &gt; 
&gt; &gt; <a href="https://access.redhat.com/site/solutions/36876" rel="nofollow">https://access.redhat.com/site/solutions/36876</a>
&gt; 
&gt; This seems completely unrelated.
&gt; 
&gt; &gt; <a href="http://post-office.corp.redhat.com/archives/tech-list/2010-February/msg00468" rel="nofollow">http://post-office.corp.redhat.com/archives/tech-list/2010-February/msg00468</a>.
&gt; &gt; html
&gt; 
&gt; Basically I'd say the same as Neil did back in 2010, meaning IPv4 behaves
&gt; incorrectly here.
&gt; 
&gt; Out of curiosity, could you elaborate on use cases of this "feature"?
This feature is useful for stress testing. We used to simulated tens of thousands clients or severs on one blade server in IPv4 scenario, but in IPv6 scenario, we can't do same things again.

</pre> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c6" rel="nofollow">Comment 6</a>Hafid Lin&nbsp;2013-06-13 07:56:52 UTC</p> <pre>Hi,

We found a workaround for this issue:

Steps:
1. add a IPv6 address on loopback interface
2. delete the unreachable route entry
3. add a local route entry

Example:
[root@bee12 ~]# ip -6 addr add fd96:38d8:6f3d:5e::/64 dev lo
[root@bee12 ~]# ip -6 route del unreachable fd96:38d8:6f3d:5e::/64
[root@bee12 ~]# ip -6 route add table local local fd96:38d8:6f3d:5e::/64 dev lo proto  kernel scope host

All IPv6 addresses under that network prefix can be accessed:
[root@bee12 ~]# ping6 fd96:38d8:6f3d:5e::1
PING fd96:38d8:6f3d:5e::1(fd96:38d8:6f3d:5e::1) 56 data bytes
64 bytes from fd96:38d8:6f3d:5e::1: icmp_seq=1 ttl=64 time=0.028 ms
^C
--- fd96:38d8:6f3d:5e::1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 730ms
rtt min/avg/max/mdev = 0.028/0.028/0.028/0.000 ms
[root@bee12 ~]# ping6 fd96:38d8:6f3d:5e::2
PING fd96:38d8:6f3d:5e::2(fd96:38d8:6f3d:5e::2) 56 data bytes
64 bytes from fd96:38d8:6f3d:5e::2: icmp_seq=1 ttl=64 time=0.024 ms
^C
--- fd96:38d8:6f3d:5e::2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 453ms
rtt min/avg/max/mdev = 0.024/0.024/0.024/0.000 ms
[root@bee12 ~]# ping6 fd96:38d8:6f3d:5e::fff1
PING fd96:38d8:6f3d:5e::fff1(fd96:38d8:6f3d:5e::fff1) 56 data bytes
64 bytes from fd96:38d8:6f3d:5e::fff1: icmp_seq=1 ttl=64 time=0.027 ms
^C
--- fd96:38d8:6f3d:5e::fff1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 676ms
rtt min/avg/max/mdev = 0.027/0.027/0.027/0.000 ms

</pre> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c7" rel="nofollow">Comment 7</a>Pavel Šimerda (pavlix)&nbsp;2013-06-21 13:19:23 UTC</p> <pre>I would like to note that this issue is specific to the loopback interface, as this bug report is used as a reference elsewhere.

It is related to the fact that the IPv6 standards do not define a loopback subnet but a single loopback address and therefore there is no need for it under normal circumstances.

(In reply to Hafid Lin from <a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c6" rel="nofollow">comment #6</a>)
&gt; Hi,
&gt; 
&gt; We found a workaround for this issue:
&gt; 
&gt; Steps:
&gt; 1. add a IPv6 address on loopback interface
&gt; 2. delete the unreachable route entry
&gt; 3. add a local route entry

You might also want to try skipping steps #1 and #2 and only do #3 if the only thing you need to get it work is the local route entry itself.

&gt; Example:
&gt; [root@bee12 ~]# ip -6 addr add fd96:38d8:6f3d:5e::/64 dev lo
&gt; [root@bee12 ~]# ip -6 route del unreachable fd96:38d8:6f3d:5e::/64
&gt; [root@bee12 ~]# ip -6 route add table local local fd96:38d8:6f3d:5e::/64 dev
&gt; lo proto  kernel scope host

As a sidenote, when I test this on 3.8.11 kernel (3.8.11-200.fc18.x86_64), and perform the three steps above, the ping won't work and reports 'Invalid argument' instead. Tried several times, used different IP ranges but might still be doing something wrong.

</pre> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c8" rel="nofollow">Comment 8</a>Geng Sheng Liu&nbsp;2013-06-27 07:17:19 UTC</p> <pre>increase the kernel parameter below can solve the problem.

"net/core/dst.c"

if (ops-&gt;gc &amp;&amp; atomic_read(&amp;ops-&gt;entries) &gt; ops-&gt;gc_thresh) {
                if (ops-&gt;gc(ops))     &lt;-----通过函数指针调用ip6_dst_gc
                        return NULL;

"net/ipv6/route.c"

static int ip6_dst_gc(struct dst_ops *ops)     &lt;---------ipv6的gc函数
{
        unsigned long now = jiffies;
        struct net *net = container_of(ops, struct net, ipv6.ip6_dst_ops);
        int rt_min_interval = net-&gt;ipv6.sysctl.ip6_rt_gc_min_interval;
        int rt_max_size = net-&gt;ipv6.sysctl.ip6_rt_max_size;       &lt;----------rt max size
        int rt_elasticity = net-&gt;ipv6.sysctl.ip6_rt_gc_elasticity;
        int rt_gc_timeout = net-&gt;ipv6.sysctl.ip6_rt_gc_timeout;
        unsigned long rt_last_gc = net-&gt;ipv6.ip6_rt_last_gc;

if (time_after(rt_last_gc + rt_min_interval, now) &amp;&amp;
            atomic_read(&amp;ops-&gt;entries) &lt;= rt_max_size)
                goto out;

net-&gt;ipv6.ip6_rt_gc_expire++;
        fib6_run_gc(net-&gt;ipv6.ip6_rt_gc_expire, net);
        net-&gt;ipv6.ip6_rt_last_gc = now;
        if (atomic_read(&amp;ops-&gt;entries) &lt; ops-&gt;gc_thresh)
                net-&gt;ipv6.ip6_rt_gc_expire = rt_gc_timeout&gt;&gt;1;
out:
        net-&gt;ipv6.ip6_rt_gc_expire -= net-&gt;ipv6.ip6_rt_gc_expire&gt;&gt;rt_elasticity;
        return (atomic_read(&amp;ops-&gt;entries) &gt; rt_max_size);        -------&gt;here......
}

"net/ipv6/route.c" 
        net-&gt;ipv6.sysctl.flush_delay = 0;
        net-&gt;ipv6.sysctl.ip6_rt_max_size = 4096;    ----&gt; default value of rt_max_size is 4096
        net-&gt;ipv6.sysctl.ip6_rt_gc_min_interval = HZ / 2;
        net-&gt;ipv6.sysctl.ip6_rt_gc_timeout = 60*HZ;

net.ipv6.route.max_size = 116184
(In reply to Pavel Šimerda from <a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c7" rel="nofollow">comment #7</a>)
&gt; I would like to note that this issue is specific to the loopback interface,
&gt; as this bug report is used as a reference elsewhere.
&gt; 
&gt; It is related to the fact that the IPv6 standards do not define a loopback
&gt; subnet but a single loopback address and therefore there is no need for it
&gt; under normal circumstances.
&gt; 
&gt; (In reply to Hafid Lin from <a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c6" rel="nofollow">comment #6</a>)
&gt; &gt; Hi,
&gt; &gt; 
&gt; &gt; We found a workaround for this issue:
&gt; &gt; 
&gt; &gt; Steps:
&gt; &gt; 1. add a IPv6 address on loopback interface
&gt; &gt; 2. delete the unreachable route entry
&gt; &gt; 3. add a local route entry
&gt; 
&gt; You might also want to try skipping steps #1 and #2 and only do #3 if the
&gt; only thing you need to get it work is the local route entry itself.
&gt; 
&gt; &gt; Example:
&gt; &gt; [root@bee12 ~]# ip -6 addr add fd96:38d8:6f3d:5e::/64 dev lo
&gt; &gt; [root@bee12 ~]# ip -6 route del unreachable fd96:38d8:6f3d:5e::/64
&gt; &gt; [root@bee12 ~]# ip -6 route add table local local fd96:38d8:6f3d:5e::/64 dev
&gt; &gt; lo proto  kernel scope host
&gt; 
&gt; As a sidenote, when I test this on 3.8.11 kernel (3.8.11-200.fc18.x86_64),
&gt; and perform the three steps above, the ping won't work and reports 'Invalid
&gt; argument' instead. Tried several times, used different IP ranges but might
&gt; still be doing something wrong.

</pre> <p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c9" rel="nofollow">Comment 9</a>Petr Šabata&nbsp;2013-08-13 12:38:00 UTC</p> <pre>As per Pavel's comment, this is not really an issue and the requested behavior can be achieved by adding the local route.

The proposed change in <a href="https://bugzilla.redhat.com/show_bug.cgi?id=969950#c8" rel="nofollow">Comment #8</a> is for kernel and the customer ticket is already resolved.  I'm closing this as NOTABUG.
</pre> </td> 
  </tr> 
 </tbody> 
</table>

[Bug_969950]: https://bugzilla.redhat.com/show_bug.cgi?id=969950