Conntrackd issue with bonding

From: Arturo Borrero <aborrero@cica.es>
To: netfilter@vger.kernel.org
Cc: pablo@netfilter.org
Subject: Conntrackd issue with bonding
Date: Fri, 10 Aug 2012 09:09:02 +0200	[thread overview]
Message-ID: <5024B38E.1060200@cica.es> (raw)

[-- Attachment #1: Type: text/plain, Size: 2787 bytes --]

Hi there!

It's seem that there is a issue with Conntrackd using a bonding as 
dedicated interface.

The log:

[Thu Aug  9 14:14:23 2012] (pid=3819) [notice] -- starting in daemon mode --
[Thu Aug  9 14:14:23 2012] (pid=3819) [ERROR] no dedicated links available!
[Thu Aug  9 14:14:23 2012] (pid=3819) [ERROR] no dedicated links available!
[Thu Aug  9 14:14:23 2012] (pid=3819) [ERROR] no dedicated links available!
[Thu Aug  9 14:19:54 2012] (pid=3819) [notice] ---- shutdown received ----

Or maybe i'm missing something important in the configuration:

/etc/conntrackd/conntrackd.conf

Sync {
         Mode ALARM {
                 RefreshTime 15
                 CacheTimeout 180
         }
         Multicast {
                 IPv4_address 225.0.0.50
                 Group 3780
                 IPv4_interface 172.16.0.1
                 Interface bond2
                 SndSocketBuffer 1249280
                 RcvSocketBuffer 1249280
                 Checksum on
         }
}
General {
     HashSize 8192
     HashLimit 65535
     LogFile on
     Syslog on
     LockFile /var/lock/conntrackd.lock
     UNIX {
         Path /var/run/conntrackd.sock
         Backlog 20
     }
     SocketBufferSize 262142
     SocketBufferSizeMaxGrown 655355
     Filter {
         Protocol Accept {
             TCP
         }
         Address Ignore
         {
             IPv4_address 127.0.0.1 # loopback
             IPv4_address 172.16.0.1 # cluster link
             IPv4_address 172.16.0.2 # cluster link
             IPv4_address xx.40
             IPv4_address xx.41
             IPv6_address xx::40
             IPv6_address xx::41
             IPv6_address xx::41
         }
     }
}

Bond2 is up and running:

bond2     Link encap:Ethernet  HWaddr 00:xx:xx:57:b8:xx
           inet addr:172.16.0.1  Bcast:172.16.255.255  Mask:255.255.0.0
           inet6 addr: fe80::215:xx::/64 Scope:Link
           UP BROADCAST RUNNING MASTER MULTICAST  MTU:1500  Metric:1
           RX packets:7405527 errors:0 dropped:0 overruns:0 frame:0
           TX packets:3935915 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:0
           RX bytes:7812500663 (7.2 GiB)  TX bytes:651422232 (621.2 MiB)

Any idea?

I'm using this version (Debian amd64)

:~$ conntrackd -v
Connection tracking userspace daemon v1.2.1. Licensed under GPLv2.
(C) 2006-2009 Pablo Neira Ayuso <pablo@netfilter.org>

-- 
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía

[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/pkcs7-signature, Size: 4238 bytes --]