TCP packets not intended for node sent by switch

Solution In Progress - Updated -

Issue

  • There are 2 nodes, one has IP address 192.0.2.30 and the other a different IP Address call it nodeA. The switch incorrectly sent random TCP ACK packets to IP Address 192.0.2.30 on node A and the IP Addresses does not exist there. There was an iptables rule on node as per:
131882  8283624 REJECT     0    --  *      *       0.0.0.0/0            192.0.2.30       ctstate NEW reject-with icmp-port-unreachable
  • For some reason the ACK packets did not find the rule and were passed up to nodes stack instead.

Environment

  • Openshift Container Platform

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content