RHEL7.5 / RHEL8.0 NFSv3 or lockd reconnect shows "double SYN" or immediate 3-way teardown after successful 3-way handshake.

Solution Verified - Updated -

Issue

  • We are experiencing a NFS v3 lockd duplicate SYN that looks related to solutions 3765711 and 3742871 which states: The issue 1660784 has been resolved with errata RHSA-2019:0163 with the following package(s): kernel-3.10.0-957.5.1.el7 or later.
  • We updated to kernel 3.10.0-957.10.1 from 3.10.0-1.957.3.el7 and that is when we starting having this intermittent issue.
  • Only have seen this on RHEL 7.6 client to ISILON NFS servers after we updated from Kernel 3.10.0-957.1.3 to 3.10.0-957.10.1. Before this update, the client might send an RST in the middle of connection setup but we could recover from that.
  • We cannot reproduce it at will / it does not always send a duplicate SYN .. and now we keep the session alive
  • I did notice in one of my older traces that if the client tore down the connection after 5 minute of idle time then the next lockd request would create the session ; but if the Isilon tore down the connection then that is when the client would send the duplicate SYN packets and we would never recover after that.

Environment

  • Red Hat Enterprise Linux 7.5 (NFS v3 client)
    • kernel-3.10.0-862.el7 or above
  • Red Hat Enterprise Linux 7.6 (NFS v3 client)
    • kernel-3.10.0-957.el7 or above
  • Red Hat Enterprise Linux 7.7 (NFS v3 client)
    • kernel-3.10.0-1062.el7 to kernel-3.10.0-1062.3.1.el7
  • Red Hat Enterprise Linux 8.0 (NFS v3 client)
    • kernel-4.18.0-80.el8 and above
  • Red Hat Enterprise Linux 8.1 (NFS v3 client)
    • kernel-4.18.0-147.el8 to kernel-4.18.0-147.32.1.el8_1
  • Seen with Isilon OneFS v8.1.2.0 B_8_1_2_016 (NFS server)
    • NOTE: Only believed to be due to the shorter idle timer, not a bug on this server.
  • Also seen with RHEL NFS server.
  • Stateful firewalls and firepower IDS/IPS between NFS client and server.
  • NFS server initiated shutdown of TCP connection (ESTABLISHED, CLOSE-WAIT, LAST-ACK, CLOSED)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content