Score:1

Packet with same src addr with loop back beening dropped

ar flag

There are two servers with the same VIP, and when one server curls another server, the reply packet (which has src addr same as lo addr) seems to be dropped by the request server. How can I allow it?

edit: only on ipv4, ipv6 work, rp_filter off, forward on

Context: I have an ipvs LB that also acts as a router that connects to a server over layer 3. When I curl with VIP less from the LB, everything works fine. But with a VIP on lo, the reply packet from the server seems to drop, I put a trace in iptables where it only shows raw:PREROUTING:policy (with the default accept).

May 25 22:31:02 kernel: [170321.010523] TRACE: raw:PREROUTING:policy:4 IN=interface OUT= MAC= SRC=172.20.222.30 DST=172.20.222.9 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=40487 SEQ=1050428198 ACK=2154353852 WINDOW=62076 RES=0x00 ACK SYN URGP=0 OPT (020422B00402080AF5EE4941A68D3D5A01030307)

Score:1
ar flag

I found that the kernel parameters accept_local solve the problem. In the newer kernel accept_local won't depend on the value of rp_filter

net.ipv4.conf.default.accept_local = 1
net.ipv4.conf.all.accept_local = 1

accept_local - BOOLEAN Accept packets with local source addresses. In combination with suitable routing, this can be used to direct packets between two local interfaces over the wire and have them accepted properly. default FALSE

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.