Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

potential bug filed over at openwrt's tracker #119

Open
moeller0 opened this issue Jul 1, 2019 · 23 comments
Open

potential bug filed over at openwrt's tracker #119

moeller0 opened this issue Jul 1, 2019 · 23 comments

Comments

@moeller0
Copy link
Collaborator

moeller0 commented Jul 1, 2019

https://bugs.openwrt.org/index.php?do=details&task_id=2346 Has a report for issues with cake and conntrack which might be interesting.

@chromi
Copy link
Collaborator

chromi commented Jul 1, 2019

It looks like a build problem to me, involving a heavily patched "vendor kernel". Probably Kevin knows the most about the nuances of this.

@tohojo
Copy link
Collaborator

tohojo commented Jul 1, 2019 via email

@ghost
Copy link

ghost commented Jan 9, 2020

Does it require some particular symbol setting enabled in the kernel build conf?

syslog prints

sch_cake: Unknown symbol nf_conntrack_find_get (err -2)
sch_cake: Unknown symbol nf_ct_get_tuplepr (err -2)

and errno 2 hints

ENOENT 2 No such file or directory

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

lsmod | grep sch_cake

nf_conntrack           77824 48 sch_cake,nf_nat_pptp,nf_conntrack_pptp,ipt_MASQUERADE,xt_state,xt_nat,xt_helper,xt_conntrack,xt_connmark,xt_connlimit,xt_connbytes,xt_REDIRECT,xt_CT,nft_redir_ipv6,nft_redir_ipv4,nft_redir,nft_nat,nft_masq_ipv6,nft_masq_ipv4,nft_masq,nft_flow_offload,nft_ct,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_masquerade_ipv6,nf_nat_masquerade_ipv4,nf_nat_irc,nf_conntrack_ipv6,nf_nat_ipv6,nf_conntrack_ipv4,nf_nat_ipv4,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_nat,nf_flow_table,nf_conntrack_tftp,nf_conntrack_snmp,nf_conntrack_sip,nf_conntrack_rtcache,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,nf_conntrack_broadcast,nf_conntrack_amanda
sch_cake               40960  0

CONFIG_NF_CONNTRACK=m
CONFIG_NF_CONNTRACK_MARK=y
CONFIG_NF_CONNTRACK_ZONES=y
CONFIG_NF_CONNTRACK_PROCFS=y
CONFIG_NF_CONNTRACK_EVENTS=y
CONFIG_NF_CONNTRACK_RTCACHE=m
# CONFIG_NF_CONNTRACK_TIMEOUT is not set
# CONFIG_NF_CONNTRACK_TIMESTAMP is not set
CONFIG_NF_CONNTRACK_LABELS=y
CONFIG_NF_CONNTRACK_AMANDA=m
CONFIG_NF_CONNTRACK_FTP=m
CONFIG_NF_CONNTRACK_H323=m
CONFIG_NF_CONNTRACK_IRC=m
CONFIG_NF_CONNTRACK_BROADCAST=m
# CONFIG_NF_CONNTRACK_NETBIOS_NS is not set
CONFIG_NF_CONNTRACK_SNMP=m
CONFIG_NF_CONNTRACK_PPTP=m
# CONFIG_NF_CONNTRACK_SANE is not set
CONFIG_NF_CONNTRACK_SIP=m
CONFIG_NF_CONNTRACK_TFTP=m
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
CONFIG_NF_CONNTRACK_IPV4=m
CONFIG_NF_CONNTRACK_IPV6=m

What is potentially missing and where?

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

Fine if it is a ghost, just seeing such error reports in the logs is a bit confusing and led me to a quest for the cause of it and potential remedy.

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

If am not mistaken interdependency of module load order (e.g. load B only after A is loaded) is not feasible in OpenWrt. Instead the order seems being statically set via

  • /etc/modules-boot.d/
  • /etc/modules.d/

@ghost
Copy link

ghost commented Jan 10, 2020

Suppose the issue can be closed since the conclusion appears to be a negligible ghost with no inclement impact (least I hope so)

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

There is

ls -af /etc/modules.d/ | grep sch

70-sched-core
75-sched-cake
72-sched-bpf

but I am not sure how that fairs with regard to

Maybe the module load order is off? I.e., if it tries to load the qdisc before conntrack at boot, that will probably fail, but then it tries again later (when the qdisc is applied), and it succeeds?

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

To my understanding it is an alphanumerical order:

  • numericals first, lowest first and ascending
  • alphabetical next, start with a and ascending

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@moeller0
Copy link
Collaborator Author

moeller0 commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

Why is 75-sched-cake in there at all?

It is provided by kmod-sched-cake

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

Having changed

/etc/modules.d/71-nf-conntrack
/etc/modules.d/71-nf-conntrack-netlink

and rebooted and the errors are not exhibiting any more

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@ghost
Copy link

ghost commented Jan 10, 2020

@tohojo would you be kind enough to sponsor a PR at OpenWrt?

@tohojo
Copy link
Collaborator

tohojo commented Jan 10, 2020 via email

@dtaht
Copy link
Owner

dtaht commented May 11, 2022

not sure if this is still an issue?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants