Hello I use XEN 3.0 in debian sarge. I have a domU1 for routing and firewall. This domU1 use 2 network interfaces which is on a bridge ''gate'' and the other on bridge ''lan''. dumU2 use one interface (eth0) on bridge ''lan''. Then I make a ping out of domU2 to www.debian.de so I get no answer. The name isn''t resolved. A ping to IP of www.debian.de works fine. A ping on www.debian.de out of dom0 or a client in my LAN works fine. Only the resolving in domU2 crashed. With tcpdump I see many [bad udp cksum 83ec!]. For example: 21:32:12.457805 aa:00:00:00:00:13 > aa:00:00:00:00:12, ethertype IPv4 (0x0800), length 73: IP (tos 0x0, ttl 64, id 58967, offset 0, flags [DF], length: 59) 192.168.1.200.1045 > sns.kabel-bb.de.domain: [bad udp cksum 626c!] 47711+ A? www.debian.de. (31) I don''t no what I can do to solve the problem. Any ideas? Torsten _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
try: ethtool -K eth0 tx off in domU. Am Samstag, 28. Januar 2006 22:33 schrieb Torsten Z:> Hello > > I use XEN 3.0 in debian sarge. I have a domU1 for routing and firewall. > This domU1 use 2 network interfaces which is on a bridge ''gate'' and the > other on bridge ''lan''. > > dumU2 use one interface (eth0) on bridge ''lan''. > > Then I make a ping out of domU2 to www.debian.de so I get no answer. The > name isn''t resolved. A ping to IP of www.debian.de works fine. > A ping on www.debian.de out of dom0 or a client in my LAN works fine. Only > the resolving in domU2 crashed. > > With tcpdump I see many [bad udp cksum 83ec!]. > For example: > 21:32:12.457805 aa:00:00:00:00:13 > aa:00:00:00:00:12, ethertype IPv4 > (0x0800), length 73: IP (tos 0x0, ttl 64, id 58967, offset 0, flags [DF], > length: 59) 192.168.1.200.1045 > sns.kabel-bb.de.domain: [bad udp cksum > 626c!] 47711+ A? www.debian.de. (31) > > I don''t no what I can do to solve the problem. Any ideas? > > > Torsten > > _______________________________________________ > Xen-users mailing list > Xen-users@lists.xensource.com > http://lists.xensource.com/xen-users_______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
On Fri, 2006-02-03 at 12:51 +0100, Nadja Kick wrote:> try: ethtool -K eth0 tx off in domU.This is also needed in dom0! I edited /etc/xen/scripts/network-bridge, adding this command to the end of the op_start() function: add_to_bridge2 ${bridge} ${pdev} do_ifup ${netdev} + # disable ip checksum offloading for veth device + ethtool -K ${netdev} tx off else # old style without ${vdev} For my Ubuntu/Debian Linux domU''s, I just added a "post-up" line to the file /etc/network/interfaces: auto eth0 iface eth0 inet dhcp post-up ethtool -K eth0 tx off Note: the same line works for static IPs too Note: I don''t know how to do the same type of thing for any other Linux distribution (RedHat, Suse, Mandrive, etc) - sorry FreeBSD 6.0 apparently doesn''t enable checksum offloading by default, because I don''t have a problem with him at all. All my connectivity issues have now been eliminated.setup Thanks! -- Patrick Wolfe email: pwolfe@employease.com _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Hello> try: ethtool -K eth0 tx off in domU.This suggestion has been solved the problem. Many thanks! Torsten> Am Samstag, 28. Januar 2006 22:33 schrieb Torsten Z: > > Hello > > > > I use XEN 3.0 in debian sarge. I have a domU1 for routing and firewall. > > This domU1 use 2 network interfaces which is on a bridge ''gate'' and the > > other on bridge ''lan''. > > > > dumU2 use one interface (eth0) on bridge ''lan''. > > > > Then I make a ping out of domU2 to www.debian.de so I get no answer. The > > name isn''t resolved. A ping to IP of www.debian.de works fine. > > A ping on www.debian.de out of dom0 or a client in my LAN works fine. > > Only the resolving in domU2 crashed. > > > > With tcpdump I see many [bad udp cksum 83ec!]. > > For example: > > 21:32:12.457805 aa:00:00:00:00:13 > aa:00:00:00:00:12, ethertype IPv4 > > (0x0800), length 73: IP (tos 0x0, ttl 64, id 58967, offset 0, flags > > [DF], length: 59) 192.168.1.200.1045 > sns.kabel-bb.de.domain: [bad udp > > cksum 626c!] 47711+ A? www.debian.de. (31) > > > > I don''t no what I can do to solve the problem. Any ideas? > > > > > > Torsten > > > > _______________________________________________ > > Xen-users mailing list > > Xen-users@lists.xensource.com > > http://lists.xensource.com/xen-users > > _______________________________________________ > Xen-users mailing list > Xen-users@lists.xensource.com > http://lists.xensource.com/xen-users_______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
On 04/02/06, Patrick Wolfe <pwolfe@employease.com> wrote:> On Fri, 2006-02-03 at 12:51 +0100, Nadja Kick wrote: > > try: ethtool -K eth0 tx off in domU. > > This is also needed in dom0! I edited /etc/xen/scripts/network-bridge, > adding this command to the end of the op_start() function: > > add_to_bridge2 ${bridge} ${pdev} > do_ifup ${netdev} > + # disable ip checksum offloading for veth device > + ethtool -K ${netdev} tx offMaybe this is a better patch, as ethtool is not installed by default. Although maybe it should for xen installs. [ -x /usr/sbin/ethtool ] && /usr/sbin/ethtool -K ${netdev} tx off I''m wondering if these are virutal devices created by the Xen kernel, why checksum offloading is not turned off by default for all virtual veth/vif devices. Both for host0 and all domains. Seems better to have things work for everyone, and point people at optimisation paths. Than optimise and better things uncertainly. Especially when there is not clear (well orgranised) documenation. I''m noting http://wiki.xensource.com/xenwiki/XenFaq#head-4ce9767df34fe1c9cf4f85f7e07cb10110eae9b7, which should be http://wiki.xensource.com/xenwiki/KnownIssues and also isn''t very instructive. Also KnownIssues should live on the Wiki homepage with a clear pointer. -- Nicholas Lee http://stateless.geek.nz gpg 8072 4F86 EDCD 4FC1 18EF 5BDD 07B0 9597 6D58 D70C _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users