* 5.10 and 5.4 Backport Request: netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
@ 2023-01-23 19:01 Nobel Barakat
2023-01-24 22:57 ` Sasha Levin
0 siblings, 1 reply; 2+ messages in thread
From: Nobel Barakat @ 2023-01-23 19:01 UTC (permalink / raw)
To: stable
PATCH_SUBJECT: netfilter: conntrack: do not renew entry stuck in tcp
SYN_SENT state
PATCH_COMMIT: e15d4cdf27cb0c1e977270270b2cea12e0955edd
Reason for backport request:
We've had a few customers experience issues with dnat such that their
kubernetes processes are now unreachable. Because dnat rules fail to
update, kubernetes pod IPs won't resolve and traffic gets blackholed
causing any healthcheck service to kill and restart the pod. This
commit has been verified to fix the issue and the ask here is to
backport it to kernel versions v5.4 and v5.10.
Thanks
Nobel
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: 5.10 and 5.4 Backport Request: netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
2023-01-23 19:01 5.10 and 5.4 Backport Request: netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state Nobel Barakat
@ 2023-01-24 22:57 ` Sasha Levin
0 siblings, 0 replies; 2+ messages in thread
From: Sasha Levin @ 2023-01-24 22:57 UTC (permalink / raw)
To: Nobel Barakat; +Cc: stable
On Mon, Jan 23, 2023 at 11:01:47AM -0800, Nobel Barakat wrote:
>PATCH_SUBJECT: netfilter: conntrack: do not renew entry stuck in tcp
>SYN_SENT state
>PATCH_COMMIT: e15d4cdf27cb0c1e977270270b2cea12e0955edd
>
>Reason for backport request:
>
>We've had a few customers experience issues with dnat such that their
>kubernetes processes are now unreachable. Because dnat rules fail to
>update, kubernetes pod IPs won't resolve and traffic gets blackholed
>causing any healthcheck service to kill and restart the pod. This
>commit has been verified to fix the issue and the ask here is to
>backport it to kernel versions v5.4 and v5.10.
Queued up, thanks for the report!
--
Thanks,
Sasha
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2023-01-24 22:57 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-01-23 19:01 5.10 and 5.4 Backport Request: netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state Nobel Barakat
2023-01-24 22:57 ` Sasha Levin
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).