• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

TNSR in proxmox droping connectivity

Scheduled Pinned Locked Moved TNSR
13 Posts 2 Posters 1.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A
    Alan Jones
    last edited by Jan 10, 2021, 6:53 PM

    Hi! I've been able to install tnsr without difficulty on my proxmox cluster, but I've run into an issue. The system appears to work great for several hours, and then simply stops forwarding traffic. I don't see any errors, nor do the interfaces go down. It just...stops. Has anyone seen something similar to this, or is there something obvious that I'm missing because I'm new to the platform?

    D 1 Reply Last reply Jan 11, 2021, 2:48 PM Reply Quote 0
    • D
      Derelict LAYER 8 Netgate @Alan Jones
      last edited by Jan 11, 2021, 2:48 PM

      @alan-jones Really difficult to say based on the information provided. Is there anything interesting in /var/log/messages at the time it appears to stop passing traffic?

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      A 3 Replies Last reply Jan 11, 2021, 3:14 PM Reply Quote 0
      • A
        Alan Jones @Derelict
        last edited by Jan 11, 2021, 3:14 PM

        @derelict I know this isn't helpful, but unfortunately that's exactly my problem. The system appears completely fine. No errors or anything. It just stops altogether. It isn't even able to resolve MAC addresses from the data plane. I'll pull the /var/log/messages tonight to double check.

        1 Reply Last reply Reply Quote 0
        • A
          Alan Jones @Derelict
          last edited by Jan 15, 2021, 1:11 AM

          @derelict finally got back around to this. The following appears in /var/log/messages when the system stops forwarding traffic:

          Jan 14 17:14:38 router01 dhclient[1619]: DHCPREQUEST on vpp1 to 172.16.40.1 port 67 (xid=0x1a4d3f47)
          Jan 14 17:14:43 router01 dhclient[1619]: DHCPREQUEST on vpp1 to 172.16.40.1 port 67 (xid=0x1a4d3f47)
          Jan 14 17:14:50 router01 dhclient[1619]: DHCPREQUEST on vpp1 to 172.16.40.1 port 67 (xid=0x1a4d3f47)
          Jan 14 17:14:53 router01 vnet[1227]: linux-cp/router: Failed to delete neighbor: 172.16.40.1 WAN
          Jan 14 17:14:57 router01 dhclient[1619]: DHCPREQUEST on vpp1 to 172.16.40.1 port 67 (xid=0x1a4d3f47)
          Jan 14 17:15:00 router01 vnet[1227]: linux-cp/router: Failed to delete neighbor: 172.16.40.1 WAN
          Jan 14 17:15:16 router01 dhclient[1619]: DHCPREQUEST on vpp1 to 172.16.40.1 port 67 (xid=0x1a4d3f47)
          Jan 14 17:15:19 router01 vnet[1227]: linux-cp/router: Failed to delete neighbor: 172.16.40.1 WAN
          Jan 14 17:15:33 router01 dhclient[1619]: DHCPREQUEST on vpp1 to 172.16.40.1 port 67 (xid=0x1a4d3f47)
          Jan 14 17:15:36 router01 vnet[1227]: linux-cp/router: Failed to delete neighbor: 172.16.40.1 WAN
          Jan 14 17:15:54 router01 dhclient[1619]: DHCPREQUEST on vpp1 to 172.16.40.1 port 67 (xid=0x1a4d3f47)
          
          1 Reply Last reply Reply Quote 0
          • A
            Alan Jones @Derelict
            last edited by Jan 15, 2021, 1:23 AM

            @derelict definitely an arp issue. The WAN interface has all the DHCP attained information, but "show neighbor" shows no WAN addresses.

            D 1 Reply Last reply Jan 15, 2021, 6:10 PM Reply Quote 0
            • D
              Derelict LAYER 8 Netgate @Alan Jones
              last edited by Derelict Jan 15, 2021, 6:11 PM Jan 15, 2021, 6:10 PM

              @alan-jones That does not look like it has received a DHCP response. Did you add ACLs? DHCP responses need to be passed if so.

              I would start with a statically-configured WAN and move to DHCP.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              A 1 Reply Last reply Jan 15, 2021, 10:16 PM Reply Quote 0
              • A
                Alan Jones @Derelict
                last edited by Jan 15, 2021, 10:16 PM

                @derelict no ACLs, just routing for now. I tried a static IP and a static MAC entry for the gateway. Neither worked. It's like the network dropped out from under it. This VM is connected to an Open vSwitch bridge, could that be the issue?

                D 1 Reply Last reply Jan 15, 2021, 11:28 PM Reply Quote 0
                • D
                  Derelict LAYER 8 Netgate @Alan Jones
                  last edited by Jan 15, 2021, 11:28 PM

                  @alan-jones Seems like no Layer 2 connectivity to me.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  A 2 Replies Last reply Jan 18, 2021, 7:46 PM Reply Quote 0
                  • A
                    Alan Jones @Derelict
                    last edited by Jan 18, 2021, 7:46 PM

                    @derelict I concur, but I can't find anything to indicate that and other VMs on the same host are not having L2 connectivity issues. I'll continue to troubleshoot.

                    1 Reply Last reply Reply Quote 0
                    • A
                      Alan Jones @Derelict
                      last edited by Jan 21, 2021, 3:32 PM

                      @derelict for what it's worth, I swapped to VMXNET3 interfaces and now its completely stable. So weird.

                      D 1 Reply Last reply Jan 21, 2021, 3:54 PM Reply Quote 0
                      • D
                        Derelict LAYER 8 Netgate @Alan Jones
                        last edited by Jan 21, 2021, 3:54 PM

                        @alan-jones That is strange. Everyone here uses virtio.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        A 1 Reply Last reply Jan 21, 2021, 4:01 PM Reply Quote 0
                        • A
                          Alan Jones @Derelict
                          last edited by Jan 21, 2021, 4:01 PM

                          @derelict yeah the NICs are igb and e1000 so they're supported by DPDK. Dunno...

                          D 1 Reply Last reply Jan 21, 2021, 4:01 PM Reply Quote 0
                          • D
                            Derelict LAYER 8 Netgate @Alan Jones
                            last edited by Derelict Jan 21, 2021, 4:02 PM Jan 21, 2021, 4:01 PM

                            @alan-jones That means nothing unless you are passing them through directly. Tnsr only sees virtio or vmxnet3. The underlying hardware is obfuscated.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            13 out of 13
                            • First post
                              13/13
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                              This community forum collects and processes your personal information.
                              consent.not_received