Re: spamming router with router solicitations



On Mon, 2019-06-24 at 08:52 +0200, Beniamino Galvani via
networkmanager-list wrote:

Hi,

Hi Beniamino,

I checked again the log you sent and I see the problem now. When NM
receives a RA, it checks whether the parameters

Which parameters exactly?  Because I might be able to shed some light
on this now that this is known.

changed compared to
the previous RA and if so it applies the new configuration. When it
does so, it also reapplies the token; this triggers a new router
solicitation from kernel due to:

  
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/net/ipv6/addrconf.c?h=v3.10#n4336

Interesting.

The new RA received is:

  neighbor discovery configuration changed [R]:
    dhcp-level none
    gateway fe80::6eb0:ceff:fef5:1e4a pref high exp 1799.2317
    address 2001:123:ab:123::2 exp permanent
    route 2001:123:ab:123::/64 via fe80::6eb0:ceff:fef5:1e4a pref
high exp permanent
    dns_server fd31:aeb1:48df::2 exp 7199.2317

Note the "changed [R]" part which means that routes changed. This is
strange because according to log there was no change from previous
RA. This causes the reapply of token, a new RS, a RA and so on ...

Here is what an RA from my router looks like:

Soliciting ff02::2 (ff02::2) on enp2s0...

Hop limit                 :           64 (      0x40)
Stateful address conf.    :           No
Stateful other conf.      :           No
Mobile home agent         :           No
Router preference         :       medium
Neighbor discovery proxy  :           No
Router lifetime           :         1800 (0x00000708) seconds
Reachable time            :  unspecified (0x00000000)
Retransmit time           :  unspecified (0x00000000)
 Source link-layer address: 6C:B0:CE:F5:1E:4A
 MTU                      :         1280 bytes (valid)
 Prefix                   : fd31:aeb1:48df::/64
  On-link                 :          Yes
  Autonomous address conf.:          Yes
  Valid time              :     infinite (0xffffffff)
  Pref. time              :     infinite (0xffffffff)
 Recursive DNS server     : fd31:aeb1:48df::2
  DNS server lifetime     :         6000 (0x00001770) seconds
 from fe80::6eb0:ceff:fef5:1e4a

Hop limit                 :           64 (      0x40)
Stateful address conf.    :           No
Stateful other conf.      :           No
Mobile home agent         :           No
Router preference         :       medium
Neighbor discovery proxy  :           No
Router lifetime           :         1800 (0x00000708) seconds
Reachable time            :  unspecified (0x00000000)
Retransmit time           :  unspecified (0x00000000)
 Source link-layer address: 6C:B0:CE:F5:1E:4A
 MTU                      :         1280 bytes (valid)
 Prefix                   : 2001:123:ab:123::/64
  On-link                 :          Yes
  Autonomous address conf.:          Yes
  Valid time              :     infinite (0xffffffff)
  Pref. time              :     infinite (0xffffffff)
 Recursive DNS server     : fd31:aeb1:48df::2
  DNS server lifetime     :         6000 (0x00001770) seconds
 from fe80::6eb0:ceff:fef5:1e4a

But three things that the above is not saying:

   1. Until yesterday, the Router Lifetime of one of those RAs was 0 and
      the other was 1800 (I don't recall which was which).
   2. Until the last week or two, the first prefix was being advertised
      with a Router preference of high and the other was medium.
   3. Each of those two RAs come in two different packets, one for each
      prefix rather than them both being in the same RA which I think is
      the typical behaviour.

Apart from this, I think NM should not apply the token when it's
already set;

That seems reasonable.

Cheers,
b.

Attachment: signature.asc
Description: This is a digitally signed message part



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]