A interface Ethernet Virtual do Servidor Linux pára de responder a solicitações arp

3

Espero que alguém tenha tido esse problema antes, já que isso está me enlouquecendo. Eu tenho 2.500 servidores Linux Linux embutidos. Usamos esses servidores parcialmente para atuar como gateways para outros dispositivos instalados em uma rede privada. A configuração contém uma série de interfaces virtuais (não vlans) com regras DNAT e SNAT para passar solicitações para os dispositivos mencionados.

Durante anos isso funcionou bem. Na semana passada adicionamos cerca de 25 interfaces virtuais e cerca de 50 mais regras de iptables. Neste ponto, nos deparamos com um problema que não esperávamos. Nossos servidores Linux incorporados pararam de responder aleatoriamente às solicitações de endereços IP virtuais IP configurados em relação à interface Ethernet principal eth0. Os pedidos de ARP ficam sem resposta, por exemplo:

tcpdump -vvvnn arp  -- *x.x.x.23 is the virtual IP address and x.x.x.16 is the router the request came from*
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 68 bytes
16:15:10.404513 arp who-has x.x.x.23 tell x.x.x.16 
16:15:12.403592 arp who-has x.x.x.23 tell x.x.x.16
16:15:14.407617 arp who-has x.x.x.23 tell x.x.x.16

O dispositivo para o qual x.x.x.23 é chamado é pingável do Servidor Linux e a entrada IPtables parece correta, mas nunca é avaliada.

Alguém sabe se existe algum tipo de buffer / cache no Linux que possa limitar o número de interfaces definidas em uma única interface Ethernet? Temos cerca de 50 por servidor Linux agora.

Nossa configuração de firewall está ficando maior, mas esperaria um erro do sistema operacional se isso estivesse causando um problema.

Não consigo ver erros do sistema operacional no dmesg ou / var / log / messages.

Temos uma mistura de diferentes hardwares Ethernet RLT8139 e RDC6040. 2 sabores diferentes de Linux, Debian 6 e Puppy Linux 3 (sites antigos). Ambos exibiram o mesmo problema.

É quase como se o servidor não soubesse que tem a interface. Liberar as regras do firewall não parece fazer nada. O servidor deve responder ao ping quando a regra nat estiver desativada, mas isso não acontece.

Estou batendo minha cabeça agora. É assim que nossas interfaces se parecem. Os IPs foram mascarados para proteger os inocentes .......

eth0      Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.1  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1036673 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4606675 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:164871619 (157.2 MiB)  TX bytes:354806888 (338.3 MiB)
          Interrupt:10 Base address:0xde00 

eth0:1    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.3  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:10   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.13  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:14   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.14  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:15   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.15  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:16   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.16  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:17   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.17  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:18   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.18  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:19   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.19  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:2    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.11  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:20   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.20  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:21   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.21  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:22   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.22  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:23   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.23  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:24   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.24  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:25   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.25  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:26   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.26  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:27   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.27  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:3    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.12  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:33   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.33  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:34   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.34  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:39   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.39  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:4    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.4  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:40   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.40  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:41   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.41  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:42   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.42  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:43   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.43  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:44   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.44  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:45   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.45  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:46   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.46  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:47   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.47  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:48   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.48  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:49   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.49  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:5    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.5  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:50   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.50  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:51   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.51  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:52   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.52  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:53   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.53  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:54   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.54  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:55   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.55  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:56   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.56  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:57   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.57  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:58   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.58  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:59   Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.59  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:6    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.6  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:7    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.7  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:8    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.8  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 

eth0:9    Link encap:Ethernet  HWaddr 00:1B:EB:43:24:05  
          inet addr:x.x.x.9  Bcast:x.x.x.63  Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:10 Base address:0xde00 
    
por James Sinton 17.02.2015 / 17:51

1 resposta

0

De acordo com o que você relata: x.x.x.16 é eth0: 16 e o roteador.

Você mascarou muitas coisas?

De qualquer forma, eu olharia para / proc / sys / net / ipv4 / conf / [todas | padrão | eth0] / arp_ignore e arp_announce .

Atenciosamente,

    
por 25.03.2015 / 15:07