This message was deleted.
# harvestera
adamant-kite-43734
08/22/2023, 8:00 AMThis message was deleted.
b
blue-kitchen-51801
08/22/2023, 1:42 PMi’ve added here the bug analysis: https://gist.github.com/iosifnicolae2/cbd975360aad2b7581a4a2dd3176ea1d
a
acoustic-addition-45641
08/22/2023, 5:02 PMMaybe this can help:
https://github.com/harvester/harvester/issues/4297
b
blue-kitchen-51801
08/22/2023, 5:15 PMhmm, the issues are not related (i don’t even enabled the separate storage network)
a
acoustic-addition-45641
08/22/2023, 5:19 PMI guess I was hopeful that the command listed at the bottom of the issue could be modified to meet your use case. Something like:
$ip link set mtu 1400 dev $interface
acoustic-addition-45641
08/22/2023, 5:19 PMBut, you are correct. This does not exactly mirror your setup.
b
blue-kitchen-51801
08/22/2023, 5:20 PMfrom what i’ve noticed the following (https://docs.harvesterhci.io/v1.1/networking/deep-dive)
• from tap1 to vethxxx - we see 4 tcp fragments
• from vethxxx to mgmt-br - we see just 1 big TCP packet tagged with vlan 4002
• of course, the mgmt-bo cannot send the packet to eth0 and also, the Hetzner router will drop these packets because all packets must be under 1400 bytes + VLAN tag
blue-kitchen-51801
08/22/2023, 5:21 PMI’ve tried a lot of things, I’m studying the packages using wireshark.. but i’m missing something
👍 1
blue-kitchen-51801
08/22/2023, 5:22 PMit’s interesting though, that the ping packet can travel from Hetzner VLAN to VM (with 5000 bytes), but it doesn’t work from VM to Hetzner VLAN
a
acoustic-addition-45641
08/22/2023, 5:22 PMThat does sound odd...
b
blue-kitchen-51801
08/22/2023, 5:27 PMi don’t know how to configure veth generated by https://www.cni.dev/plugins/current/main/bridge/ to fragment the packages with MTU 1400 (I’ve tried to set up the interface with MTU 1400 but it doesn’t work.. the packet captured in mgmt-br has 5046 bytes)
blue-kitchen-51801
08/22/2023, 6:58 PMa temporary workaround:
• on host set eth, mgmt-bo, mgmt-br MTU to 1500
• on host:
echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables1400a
acoustic-addition-45641
08/22/2023, 7:37 PMThanks for sharing!
b
blue-kitchen-51801
08/23/2023, 7:15 PMAlso, I’ve identified that Hetzner Loadbalancer have a bug when using ports like 31883. I’ve switched to port 30883 and things get back to normal.