AE-243 On LLB Setup RTS causing an issue |AS-18589| GAI

Review Request #756 — Created March 31, 2025 and submitted

mmiriam
APV10
rel_apv_10_4_0_112_gail
AE-243
pradeep, prajesh, tanya

AE-243 On LLB Setup RTS causing an issue |AS-18589| GAIL. Added fix to avaoid all other packets other than SYN in rts create and added a workaround cli "ip rts blacklist [ip1,1p2.. ]/[disable]" to block specifc ip's to create an entry when they enter as destination ip's in rts_create function



Description From Last Updated

can this be comma separated?

prajeshprajesh

is this valdi for ipv6 as well?

prajeshprajesh

Is this not same as ICMP over IPv6?

prajeshprajesh

Can we add a log to indicate the blacklisting

prajeshprajesh

a space after else.

prajeshprajesh

Do we need these logs ? Can we increase count to 500.

prajeshprajesh

How can we see the blacklist config? We need a show rts blacklist cli too ?

prajeshprajesh

can we use "off" instead of "disable". We use on or off in other places .. ip rts on ip …

prajeshprajesh

define MAX_RTS_BLACKLIST 64

prajeshprajesh

space after if

prajeshprajesh

We dont care about update entries.. can we log only the once we are going to add wrongly?

prajeshprajesh

command should be show ip rts blacklist. What is it now?

prajeshprajesh

for 64 IPS you need 64 * 40 atleasst.

prajeshprajesh

blacklist_ip_rts already allocates memory.. so no need of allocating here..

prajeshprajesh

should be off here to be consistent.

prajeshprajesh

256 may not be enough?

prajeshprajesh

also free buf?

prajeshprajesh

check the limits ..otherwise, user can be more than 64 and this can cause mem corruption.. be defensive.

prajeshprajesh

we need this for \0 ?

prajeshprajesh

seems to be a debug log. Should not get printed in CLI

prajeshprajesh

free is missing.

prajeshprajesh

plz #define the number 256

pradeeppradeep

strcat seems issue here. we are doing malloc and doing strcat with single bit initialed to zero. should we intitialize …

pradeeppradeep
prajesh
  1. 
      
  2. can this be comma separated?

  3. is this valdi for ipv6 as well?

  4. Is this not same as ICMP over IPv6?

  5. Can we add a log to indicate the blacklisting

  6. Do we need these logs ? Can we increase count to 500.

    1. removed logs as discussed

  7. 
      
mmiriam
prajesh
  1. 
      
  2. How can we see the blacklist config? We need a show rts blacklist cli too ?

  3. 
      
prajesh
  1. 
      
  2. can we use "off" instead of "disable". We use on or off in other places ..

    ip rts on
    ip rts off.

  3. 
      
prajesh
  1. 
      
  2. We dont care about update entries.. can we log only the once we are going to add wrongly?

  3. 
      
prajesh
mmiriam
prajesh
  1. 
      
  2. command should be show ip rts blacklist. What is it now?

  3. 
      
mmiriam
mmiriam
prajesh
  1. 
      
  2. for 64 IPS you need 64 * 40 atleasst.

  3. blacklist_ip_rts already allocates memory.. so no need of allocating here..

  4. should be off here to be consistent.

  5. 
      
mmiriam
mmiriam
prajesh
prajesh
  1. 
      
    1. to subract extra comma at the end of the list

  2. 
      
prajesh
  1. 
      
  2. check the limits ..otherwise, user can be more than 64 and this can cause mem corruption.. be defensive.

  3. seems to be a debug log. Should not get printed in CLI

  4. 
      
mmiriam
prajesh
mmiriam
prajesh
  1. Ship It!
  2. 
      
pradeep
  1. 
      
  2. plz #define the number 256

  3. strcat seems issue here. we are doing malloc and doing strcat with single bit initialed to zero. should we intitialize whole string

    1. Initialised it with NULL, and MALLOC with flag M_ZERO will do bzero which will set it to zero

  4. 
      
mmiriam
mmiriam
pradeep
  1. 
      
  2. 
      
pradeep
  1. Ship It!
  2. 
      
mmiriam
mmiriam
mmiriam
Review request changed

Status: Closed (submitted)

Loading...