From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 1DA0F71920 for ; Tue, 29 Jun 2021 15:51:16 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 0D476F729 for ; Tue, 29 Jun 2021 15:51:16 +0200 (CEST) Received: from mail-wr1-x42e.google.com (mail-wr1-x42e.google.com [IPv6:2a00:1450:4864:20::42e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 3ACDEF720 for ; Tue, 29 Jun 2021 15:51:14 +0200 (CEST) Received: by mail-wr1-x42e.google.com with SMTP id p8so9823913wrr.1 for ; Tue, 29 Jun 2021 06:51:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=odiso-com.20150623.gappssmtp.com; s=20150623; h=message-id:subject:from:to:cc:date:in-reply-to:references :user-agent:mime-version:content-transfer-encoding; bh=4Jc8rcf79SSL27bKMZhxvxplEEll4jXCKvBzCeINBdA=; b=Psr2ezWq3ayhE8YsqrzTNFP8QUiZimPZR2OmFaoJWl8YwBmWG6fSUEeQ8sQ9UUsKse z8YBi6PXxhb+fg1JESK5qGd0s0Y7qZY4qct3tMvPxny1dK68Xp4OdHQti3oIMFEyh0rC D1DPm0Y5QY0eHWKTts6S/X85d+WF3PvAmXWzsYl51CqWpzbYFcdXeYUybv31yZE6Tcy/ unxdHdQAuINBut/ilC3pTKfqid9lF3TZgXW9nfw8IbnZOM/lhGx/ryCMVbja4hn2NmJI MgNh5Nr9Is4krlblrgV4fmDGKYVs7QS3OGQMkur/SUJJNbDTc5ThCTKDdlIzHxELR/Sh 1WDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:cc:date:in-reply-to :references:user-agent:mime-version:content-transfer-encoding; bh=4Jc8rcf79SSL27bKMZhxvxplEEll4jXCKvBzCeINBdA=; b=lh9cIve2zGDJWnwlA8CPid2ZTOfIDQHNACecIp1qYBXd+3YppNcdCxoDbgQlAB89Zv ljwRE1FbdjTXtY6VIBs1OvKwB7ZECeLwUXBVBlbD2os69s4SBM7nxrGmOltamPg5dxXM UuMMW13JWKSMLTvpxe/ZhMGKCK2kFkpRKXg1AGM7vACzjFo2sUfqm/VBtquqkybn94QH JQXWAJNr1if+P9njzmxj4d4hRJovS0FZCD9Fod2yUbl6mNp4MYAy+7b4iIO87ypojYuh z2qiDJsShpn8FNfhAPj6atOMTXQGowDOdGohjJWW8O2JnJVyfUO2tKneXvuKWbg/Ccz1 TKBw== X-Gm-Message-State: AOAM531kc/Pm0GR51LJl3X6jjkICy3UFMqlw4Rev/9Pu3x2/cBCT4KFe eC1svgAzOO8Y+2zvAMMCOLrlwL7soCadYbpH5oE= X-Google-Smtp-Source: ABdhPJy3EK55S7LIo1iLp0zEi/xx0SHLCec8Nk5Om4kMS/z1fYEdQkeTvuiDu3ALqfXxA0Bd9CeGgw== X-Received: by 2002:adf:e603:: with SMTP id p3mr1512045wrm.232.1624974667837; Tue, 29 Jun 2021 06:51:07 -0700 (PDT) Received: from ?IPv6:2a0a:1580:0:1::100c? (ovpn1.odiso.net. [2a0a:1580:2000::3f]) by smtp.gmail.com with ESMTPSA id b20sm1025584wmj.7.2021.06.29.06.51.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 29 Jun 2021 06:51:07 -0700 (PDT) Message-ID: <0790b6524457e986e6f14176af5e2ee9d88a5d97.camel@odiso.com> From: alexandre derumier To: Proxmox VE user list , Mark Schouten Cc: Thomas Lamprecht Date: Tue, 29 Jun 2021 15:51:06 +0200 In-Reply-To: <20210629153111.2a0fbc28@rosa.proxmox.com> References: <5377d815-bde4-9ca8-8584-ff63a6eb27ba@proxmox.com> <0d129a03-9a70-e123-5e5a-e7862ef303ac@tuxis.nl> <152e5dc5-8b0c-f182-4d85-1e1b3639209a@tuxis.nl> <20210629153111.2a0fbc28@rosa.proxmox.com> Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.40.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL 0.823 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [mellanox.com, proxmox.com] Subject: Re: [PVE-User] Proxmox VE 7.0 (beta) released! X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 13:51:16 -0000 Hi, I have found a bug report about promisc && vlan-aware on mellanox site, of a proxmox user. (proxmox 6.4 with kernel (5.12?) https://community.mellanox.com/s/question/0D51T00008ansfP/vlan-aware-linux-bridging-is-not-functional-on-connectx4lx-card-unless-manually-put-in-promiscuous-mode So maybe is it a kernel change ? I don't known is that ifupdown2 has been bumped to last master ? (I don't have seen special commit of this kind of change) Le mardi 29 juin 2021 à 15:31 +0200, Stoiko Ivanov a écrit : > On Tue, 29 Jun 2021 14:04:05 +0200 > Mark Schouten wrote: > > > Hi, > > > > Op 29-06-2021 om 12:31 schreef Thomas Lamprecht: > > > > I do not completely understand why that fixes it though.  > > > > Commenting out MACAddressPolicy=persistent helps, but why? > > > >   > > > > > > > That I understand. :) > > > > But, the cluster interface works when bridge_vlan_aware is off, > > regardless of the MacAddressPolicy setting. > > > > We managed to find a reproducer - my current guess is that it might > have > something to do with intel NIC drivers or some changes in ifupdown2 (or > udev, or in their interaction ;) - Sadly if tcpdump fixes the issues, > it > makes debugging quite hard :) > > In any case - as can also be seen in the 2 reports you sent: > with vlan-aware bridges the promisc flag of the ethernet interface (the > bridge-port) is set to 0, when vlan-aware is not present it is set to > 1. > This explains the symptoms you're seeing, and why running tcpdump fixes > it > > FWIW: I think simply starting a guest would have fixed the issue as > well > (when a second bridge_port gets added the kernel sets the promisc flag > on > the port correctly) > > As Wolfgang wrote - we'll look into it and will hopefully come up with > a > sensible solution. > > Thanks for the beta-test and the report! > > > _______________________________________________ > pve-user mailing list > pve-user@lists.proxmox.com > https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user