GRE + FOU - Null pointer exception resulting in hard crash of network appliance #7

New Issue

Brandon Currell · 2024-06-18T11:42:10Z

Brandon Currell commented

2024-06-18 11:42:10 +00:00

There is a bug in either the Linux kernel or the iproute2 package included by default on our network appliances (EVXs + NFRs). On some runs of the ip fou command, a null pointer exception can be triggered, causing a complete lock up of the appliance, requiring a hard reset to resolve.

This only affects appliances that have our beta GRETAP tunnels deployed, however these can be deployed for a single connection on an NFR with several connections that will experience a disruption if the NPE gets triggered.

We are currently testing the latest backported Linux kernel and iproute2 package to see if the issue has been resolved upstream.

There is a bug in either the Linux kernel or the iproute2 package included by default on our network appliances (EVXs + NFRs). On some runs of the `ip fou` command, a null pointer exception can be triggered, causing a complete lock up of the appliance, requiring a hard reset to resolve. This only affects appliances that have our beta GRETAP tunnels deployed, however these can be deployed for a single connection on an NFR with several connections that will experience a disruption if the NPE gets triggered. We are currently testing the latest backported Linux kernel and iproute2 package to see if the issue has been resolved upstream.

Brandon Currell added the

Network software

label 2024-06-18 11:42:10 +00:00

Brandon Currell commented

2024-07-08 16:40:35 +00:00

The backported kernel and related tools have been confirmed as stable, and have resolved the Null Pointer Exception triggered by GRE + FOU tunnels. This change is now planned to be deployed to all NFRs on a rolling basis.

For our shared backbone platform, we will be scheduling these changes internally and sending out notifications for the work.

Where dedicated backbones are involved, we will be in touch with the customer to schedule the work.

The backported kernel and related tools have been confirmed as stable, and have resolved the Null Pointer Exception triggered by GRE + FOU tunnels. This change is now planned to be deployed to all NFRs on a rolling basis. For our shared backbone platform, we will be scheduling these changes internally and sending out notifications for the work. Where dedicated backbones are involved, we will be in touch with the customer to schedule the work.

Brandon Currell referenced this issue

2024-07-15 10:47:43 +00:00

OpenVPN v2.5.1 (via backports) not honouring "fragment" config option #16

Brandon Currell commented

2024-07-15 10:48:58 +00:00

NFR maintenance on hold due to #16