3 2

[alpine-devel] route caches..... help !!!

HL
Details
Message ID
<523C33B4.3060402@gmail.com>
Sender timestamp
1379677108
DKIM signature
missing
Download raw message
Hey all,

I need some help here ...

I am running alpine linux 2.6.4 64bits

3.10.10-1-grsec #2-Alpine SMP Tue Sep 3 07:05:53 UTC 2013 x86_64 Linux
ip utility, iproute2-ss130430

The command
ip route show cache
show no caches at ALL ...

Is it just me ?
Did something got changed in the kernel or utils ???

Do I need to adjust some kerne vars ???

Regards,
Harry



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---
Timo Teras
Details
Message ID
<20130920144749.6c459999@vostro>
In-Reply-To
<523C33B4.3060402@gmail.com> (view parent)
Sender timestamp
1379677669
DKIM signature
missing
Download raw message
On Fri, 20 Sep 2013 14:38:28 +0300
HL <freemail.grharry@gmail.com> wrote:

> I need some help here ...
> 
> I am running alpine linux 2.6.4 64bits
> 
> 3.10.10-1-grsec #2-Alpine SMP Tue Sep 3 07:05:53 UTC 2013 x86_64 Linux
> ip utility, iproute2-ss130430
> 
> The command
> ip route show cache
> show no caches at ALL ...
> 
> Is it just me ?
> Did something got changed in the kernel or utils ???
> 
> Do I need to adjust some kerne vars ???

Kernel changed. The routing cache was removed from linux kernel, thus
no cached routes exists anymore there.

You can still check what would be the used data via
 ip route get <ip-to-target>

And it looks like cached route - but is calculated on demand.

- Timo


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---
HL
Details
Message ID
<523C3934.9000300@gmail.com>
In-Reply-To
<20130920144749.6c459999@vostro> (view parent)
Sender timestamp
1379678516
DKIM signature
missing
Download raw message
On 20/09/2013 02:47 μμ, Timo Teras wrote:
> On Fri, 20 Sep 2013 14:38:28 +0300
> HL <freemail.grharry@gmail.com> wrote:
>
>> I need some help here ...
>>
>> I am running alpine linux 2.6.4 64bits
>>
>> 3.10.10-1-grsec #2-Alpine SMP Tue Sep 3 07:05:53 UTC 2013 x86_64 Linux
>> ip utility, iproute2-ss130430
>>
>> The command
>> ip route show cache
>> show no caches at ALL ...
>>
>> Is it just me ?
>> Did something got changed in the kernel or utils ???
>>
>> Do I need to adjust some kerne vars ???
> Kernel changed. The routing cache was removed from linux kernel, thus
> no cached routes exists anymore there.
>
> You can still check what would be the used data via
>   ip route get <ip-to-target>
>
> And it looks like cached route - but is calculated on demand.
>
> - Timo
Thank's Timo ...

That's bad news ...
This explains the problem in udp ( ie openvpn udp mode ) connections and 
multihome  setups  :-(
- harry







---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---
Timo Teras
Details
Message ID
<20130920150813.1e115e0c@vostro>
In-Reply-To
<523C3934.9000300@gmail.com> (view parent)
Sender timestamp
1379678893
DKIM signature
missing
Download raw message
On Fri, 20 Sep 2013 15:01:56 +0300
HL <freemail.grharry@gmail.com> wrote:

> On 20/09/2013 02:47 μμ, Timo Teras wrote:
> > On Fri, 20 Sep 2013 14:38:28 +0300
> > HL <freemail.grharry@gmail.com> wrote:
> >
> >> I need some help here ...
> >>
> >> I am running alpine linux 2.6.4 64bits
> >>
> >> 3.10.10-1-grsec #2-Alpine SMP Tue Sep 3 07:05:53 UTC 2013 x86_64
> >> Linux ip utility, iproute2-ss130430
> >>
> >> The command
> >> ip route show cache
> >> show no caches at ALL ...
> >>
> >> Is it just me ?
> >> Did something got changed in the kernel or utils ???
> >>
> >> Do I need to adjust some kerne vars ???
> > Kernel changed. The routing cache was removed from linux kernel,
> > thus no cached routes exists anymore there.
> >
> > You can still check what would be the used data via
> >   ip route get <ip-to-target>
> >
> > And it looks like cached route - but is calculated on demand.
> >
> Thank's Timo ...
> 
> That's bad news ...
> This explains the problem in udp ( ie openvpn udp mode ) connections
> and multihome  setups  :-(

You still have netfilter's connection tracking cache that is udp/tcp
flow based. Any iptables rules you use to do per-flow type of things,
will still work.

- Timo


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---