vyos bug - a tcp flow is working, and it will also working at the step you change the port or other

xiaoxiao2021-02-28  105

早先同事就提醒过软路由这个东西不能轻易使用,今天就遇到了一次。

当前有流量大概1MBps, 但是使用 monitor interface 去查看的时候,居然显示没有,这是怎么回事儿呢?

monitor interface 查看没有流量,可是流量明明在传着shutdown 接口 。。 没效果tcpdump 能看到流量了

重启以后发现,一切正常。

后来查看,希望可以通过clear掉nat的conntrack可能可以解决

show conntrack table ipv4

I post a question on the bbs

and some body replied with the

When a NAT rule has some translation active and you delete this rule, VyOs doesn't delete the existing conntrack entry. So the existing flow will continue to run. This has caused some headaches to me since it's also true when you change a rule. You can delete the conntack entry using `sudo conntrack -D -d <destination ip>` The -D flag is for delete and -d for the destination IP See conntack manual (sudo man conntrack) for more option
转载请注明原文地址: https://www.6miu.com/read-43772.html

最新回复(0)