Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
From: Florian Westphal <fw@xxxxxxxxx>
Date: Wed, 28 May 2025 15:10:29 +0200
Cc: pablo@xxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxx, David Miller <davem@xxxxxxxxxxxxx>, Eric Dumazet <edumazet@xxxxxxxxxx>, Jakub Kicinski <kuba@xxxxxxxxxx>, Paolo Abeni <pabeni@xxxxxxxxxx>, Simon Horman <horms@xxxxxxxxxx>, netfilter-devel@xxxxxxxxxxxxxxx, coreteam@xxxxxxxxxxxxx
In-reply-to: <CALOAHbCWRw6-wjG7iX_bzGhsd-RD5o+CCAGROZHb1aD3UcL=kw@mail.gmail.com>

Yafang Shao <laoar.shao@xxxxxxxxx> wrote:
> After tracing with bpftrace, I found that the __nf_ct_resolve_clash()
> function returns NF_DROP. Should I provide any additional details?

No need, I have no more ideas.

References:
- [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
  - From: Yafang Shao
- Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
  - From: Florian Westphal
- Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
  - From: Yafang Shao
- Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
  - From: Florian Westphal
- Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
  - From: Yafang Shao
- Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
  - From: Yafang Shao

Prev by Date: Re: [bug report, linux 6.15-rc4] A large number of connections in the SYN_SENT state caused the nf_conntrack table to be full.
Next by Date: Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
Previous by thread: Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
Next by thread: Re: [BUG REPORT] netfilter: DNS/SNAT Issue in Kubernetes Environment
Index(es):
- Date
- Thread

[Index of Archives] [Netfitler Users] [Berkeley Packet Filter] [LARTC] [Bugtraq] [Yosemite Forum]