From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id F11BA75041 for ; Tue, 12 Oct 2021 13:22:14 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id E89A62B574 for ; Tue, 12 Oct 2021 13:21:44 +0200 (CEST) Received: from host.marinov.us (host.marinov.us [212.56.5.50]) by firstgate.proxmox.com (Proxmox) with ESMTP id 239442B56B for ; Tue, 12 Oct 2021 13:21:44 +0200 (CEST) Received: from localhost (unknown [127.0.0.1]) by host.marinov.us (Postfix) with ESMTP id 8B3BF20277C for ; Tue, 12 Oct 2021 14:16:27 +0300 (EEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=marinov.us; h= x-mailer:message-id:in-reply-to:to:references:date:date:subject :subject:mime-version:content-transfer-encoding:content-type :content-type:from:from; s=dkim; t=1634037387; x=1634901388; bh= nRvlQPb/7MscBvMdSuIhUQ+AcvecYrHTVN2HKvxRp/w=; b=Hye2T2i4O1wWs/FQ 5ZtKSuJ/8kLtxX1ItcP9L7NQFnyEiBFUdQdDZHI0djwcC/xnmEdFtXO6q0OY3Y9g LMCbW8SQLyRoJlAdYJkuEnJF9A9W4oFlEQ2jUzZ7lJ4fiqU46R9RSO8IoNwrW/KT Vg7ZZAMETiDAbRC+GCDeoLdXzM8= Received: from host.marinov.us ([127.0.0.1]) by localhost (host.marinov.us [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j6VqNJSE65rC for ; Tue, 12 Oct 2021 14:16:27 +0300 (EEST) Received: from smtpclient.apple (unknown [62.73.121.18]) by host.marinov.us (Postfix) with ESMTPSA id 6F1CD20277B for ; Tue, 12 Oct 2021 14:16:27 +0300 (EEST) From: Stoyan Marinov Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 12 Oct 2021 14:16:27 +0300 References: <2b417bee43cb4484bcba66afc6076113@velartis.at> To: Proxmox VE development discussion In-Reply-To: <2b417bee43cb4484bcba66afc6076113@velartis.at> Message-Id: <093EC041-0E5D-41F2-99C9-CF8A5E767313@marinov.us> X-Mailer: Apple Mail (2.3654.100.0.2.22) X-SPAM-LEVEL: Spam detection results: 0 BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain KAM_INFOUSMEBIZ 0.75 Prevalent use of .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life domains in spam/malware SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [marinov.us, proxmox.com] Subject: Re: [pve-devel] BUG in vlan aware bridge X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Oct 2021 11:22:15 -0000 I'm having the very same issue with Mellanox ethernet adapters. I don't = see this behavior with Intel nics. What network cards do you have? > On 12 Oct 2021, at 1:48 PM, VELARTIS Philipp D=C3=BCrhammer = wrote: >=20 > HI, >=20 > i am playing around since days because we have strange packet losses. > Finally I can report following (Linux 5.11.22-4-pve, Proxmox 7, all = devices MTU 1500): >=20 > Packet with sizes > 1500 without VLAN working well but at the moment = they are Tagged they are dropped by the bond device. > Netfilter (set to 1) always reassembles the packets when they arrive a = bridge. But they don't get fragmented again I they are VLAN tagged. So = the bond device drops them. If the bridge is NOT Vlan aware they also = get fragmented and it works well. >=20 > Setup not working: >=20 > tapX (tagged) <- -> vmbr0 <- - > bond0 >=20 > Setup working: >=20 > tapX (tagged) <- -> vmbr0 <- - > bond0 >=20 > Setup also working: >=20 > tapX < - - > vmbr0v350 < -- > bond0.350 < -- > bond0 >=20 > Have you got any idea where to search? I don't understand who is in = charge of fragmenting packages again if they get reassembled by = netfilter. (and why it is not working with vlan aware bridges) >=20 >=20 > _______________________________________________ > pve-devel mailing list > pve-devel@lists.proxmox.com > https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel >=20