-
-
branches/rel_apv_10_7_2/usr/src/sys/net/if_ethersubr.c (Diff revision 1) what is this function for? Seems like we are filtring packets based on dest IP.
-
branches/rel_apv_10_7_2/usr/src/sys/net/if_ethersubr.c (Diff revision 1) if we are not dropping then dont increment this counter.
AE-1441 SLB Not Responding to SYN Packets After Traffic Failover with HA SSF Enabled ||AS-20030|| Kokilaben
Review Request #844 — Created May 7, 2025 and submitted
| Information | |
|---|---|
| mmiriam | |
| APV10 | |
| rel_apv_10.7.2 | |
| AE-1441 | |
| Reviewers | |
| pradeep, prajesh, tanya | |
AE-1441 SLB Not Responding to SYN Packets After Traffic Failover with HA SSF Enabled ||AS-20030|| Kokilaben
Test results of CLI:
ha ssf ?
filter Setting HA stateful session failover filter
off Disable session failover function of virtual service or NAT
on Enable session failover function of virtual service or NAT
peer HA ssf peer ip
timeout Set SSF session idle timeoutha ssf filter ?
off Disable session failover filter
on Enable session failover filtershow run ssf
ha ssf on
ha ssf on nat
ha ssf timeout 300
ha ssf on "VS"
ha ssf on "VS1"
ha ssf peer 10.10.10.11
ha ssf filter offverified "write mem"
| Description | From | Last Updated |
|---|---|---|
|
what is this function for? Seems like we are filtring packets based on dest IP. |
 prajesh
|
|
|
if we are not dropping then dont increment this counter. |
prajesh
|
|
|
you are hitting this path . Sf_fip_drop is true . the packet need to drop but you are skipping thapcket … |
 satyendra
|
|
|
get is not required. We can set always? |
prajesh
|
|
|
same here |
prajesh
|
|
|
sf filter |
prajesh
|
|
|
sf filter. |
prajesh
|
|
|
You also need to implement show function for this command . if you need it to be persistent than also … |
satyendra
|
|
|
this is not required as the possible values are only o and 1 |
satyendra
|
|
|
Not required |
satyendra
|
-
-
branches/rel_apv_10_7_2/usr/src/sys/net/if_ethersubr.c (Diff revision 1) you are hitting this path . Sf_fip_drop is true . the packet need to drop but you are skipping thapcket . You need to use break as the wile loop runs only once .If you need to keep the packet , It better to handle some place other than here
Change Summary:
Added a cli to enable/disable ha ssf filter
Testing Done: |
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Diff: |
Revision 2 (+89 -1) |
-
-
branches/rel_apv_10_7_2/usr/src/sys/click/app/cm/sf_cli.c (Diff revision 2) get is not required. We can set always?
-
-
Please check with praveen , If this command need to be part of write memeory
-
branches/rel_apv_10_7_2/usr/click/lib/libparser/commands.pm (Diff revision 4) You also need to implement show function for this command .
if you need it to be persistent than also implement the wr_mem for this command
-
branches/rel_apv_10_7_2/usr/src/sys/click/app/cm/sf_cli.c (Diff revision 4) this is not required as the possible values are only o and 1
-