all lists on lists.proxmox.com
 help / color / mirror / Atom feed
From: Thomas Lamprecht <t.lamprecht@proxmox.com>
To: Proxmox VE development discussion <pve-devel@lists.proxmox.com>,
	Alexandre Derumier <aderumier@odiso.com>
Subject: [pve-devel] applied: [PATCH pve-cluster] sysctl: disable net.ipv4.igmp_link_local_mcast_reports
Date: Thu, 11 Nov 2021 17:18:02 +0100	[thread overview]
Message-ID: <43fecf43-6c99-df00-f45b-811b2ca22a36@proxmox.com> (raw)
In-Reply-To: <20211006083220.1145952-1-aderumier@odiso.com>

On 06.10.21 10:32, Alexandre Derumier wrote:
> currently, when veth or tap interfaces are plugged to bridge,
> an igmp v3 report is broadcasted to the network, with the
> bridge mac adddress.
> 
> Users have reported problems with hetzner for example, blocking the server
> because of the unknown mac flooding the network.
> https://forum.proxmox.com/threads/proxmox-claiming-mac-address.52601/page-6#post-421676
> 
> some traces:
> 
> ip addr:
> 
> 190: fwbr109i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
>     link/ether 22:5f:0b:cb:ac:42 brd ff:ff:ff:ff:ff:ff
> 
> ebtable log:
> Oct  6 09:46:24 kvmformation3 kernel: [437256.753355] MAC-FLOOD-F IN=fwpr109p0 OUT=eno1 MAC source = 22:5f:0b:cb:ac:42 MAC dest = 01:00:5e:00:00:16 proto = 0x0800 IP SRC=0.0.0.0 IP DST=224.0.0.22, IP tos=0xC0, IP proto=2
> 
> tcpdump -e -i eno1 igmp
> 09:53:23.914825 22:5f:0b:cb:ac:42 (oui Unknown) > 01:00:5e:00:00:16 (oui Unknown), ethertype IPv4 (0x0800), length 54: 0.0.0.0 > igmp.mcast.net: igmp v3 report, 1 group record(s)
> 
> Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
> ---
>  debian/sysctl.d/pve.conf | 1 +
>  1 file changed, 1 insertion(+)
> 
>

applied, thanks!




      parent reply	other threads:[~2021-11-11 16:18 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-10-06  8:32 [pve-devel] " Alexandre Derumier
2021-11-05 13:20 ` Thomas Lamprecht
2021-11-09 15:52   ` DERUMIER, Alexandre
2021-11-09 16:15     ` Thomas Lamprecht
2021-11-11 16:18 ` Thomas Lamprecht [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=43fecf43-6c99-df00-f45b-811b2ca22a36@proxmox.com \
    --to=t.lamprecht@proxmox.com \
    --cc=aderumier@odiso.com \
    --cc=pve-devel@lists.proxmox.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal