Jan Christoph Nordholz
2009-Jan-19 05:13 UTC
[Xen-users] Non-linear skbs apparently prevent NFQUEUE from working properly
Dear list members (especially Xen network wizards), I''m using the netfilter_queue mechanism to modify packets on the wire that are sent from one domU to another while they travel over the dom0 bridge. This has worked fine as long as I was tinkering with UDP packets only - but when I try to reinject TCP frames with an increased length, I run into a BUG() because net/netfilter/nfnetlink_queue.c:nfqnl_mangle() calls skb_put() which requires the skb to be aligned, which it apparently isn''t in a Xen environment. I''ve ported my network scenario to a Usermode Linux setup and it''s working perfectly fine there, so I presume this has something to do with Xen''s network driver implementation. It would be great if someone could point me into the right direction. Thanks in advance, Jan _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Jan Christoph Nordholz
2009-Jan-19 11:27 UTC
[Xen-users] Non-linear skbs apparently prevent NFQUEUE from working properly
Dear list members (especially Xen network wizards), I''m using the netfilter_queue mechanism to modify packets on the wire that are sent from one domU to another while they travel over the dom0 bridge. This has worked fine as long as I was tinkering with UDP packets only - but when I try to reinject TCP frames with an increased length, I run into a BUG() because net/netfilter/nfnetlink_queue.c:nfqnl_mangle() calls skb_put() which requires the skb to be aligned, which it apparently isn''t in a Xen environment. I''ve ported my network scenario to a Usermode Linux setup and it''s working perfectly fine there, so I presume this has something to do with Xen''s network driver implementation. It would be great if someone could point me into the right direction. (This is 2.6.24 with Xen 3.2 - I''m reluctant to upgrade right now because this is a production system. I''d prefer any option over upgrading.) Thanks in advance, Jan _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Possibly Parallel Threads
- forwarding packets to service in same host without using loopback network
- [Bug 1742] New: using nfqueue breaks SCTP connection (tracking)
- traffic distribution not happening in centos 6.5
- [Bug 1066] New: nfq_get_timestamp() not setting timeval struc
- [Bug 1766] New: nfqueue randomly drops packets with same tuple