!jADHIHHaHgpbEwNIDs:matrix.org

DANOS

55 Members
Danos Unofficial Community Chat - DANOS 2012 Out Now - https://danosproject.atlassian.net/wiki/spaces/DAN/pages/892141595/DANOS+20124 Servers

Load older messages


SenderMessageTime
18 Apr 2021
@akashniral:matrix.orgAkash Gupta * Is it some kind of issue with the code? I am compiling it in debian 1017:25:13
@akashniral:matrix.orgAkash Gupta * Hi - I am unable to compile danos/frr branch danos/2009 code. While executing "debuild -uc -us -i -b" I get the following error: 17:30:04
19 Apr 2021
@akashniral:matrix.orgAkash Guptaor is it some kind of version mismatch with my snmp or some other library?16:17:30
20 Apr 2021
@jammy:matrix.orgjammy Akash Gupta: Are you sure you've got your build environment set up correctly? The instructions are on https://danosproject.atlassian.net/wiki/spaces/DAN/pages/786516/Building+a+package+from+source. It's probably also worth considering using danos-buildpackage which should be much easier. 09:19:31
@akashniral:matrix.orgAkash GuptaI've followed "https://danosproject.atlassian.net/wiki/spaces/DAN/pages/786516/Building+a+package+from+source" and have setup the build environment as per the instruction. I did git checkout danos/2009 so have placed the repo of danos 2009 under /etc/apt/source.list.d/danos.list and still getting the same above error. I did tried to clone the danos-buildpackage repo however while typing danos-buildpackage command it says command not found.16:55:55
21 Apr 2021
@jammy:matrix.orgjammy Akash Gupta: I just took a completely clean Debian 10 VM, followed the instructions exactly (except for changing the repo URL to the 2009 one), and it's worked fine 13:55:00
@jammy:matrix.orgjammyWhat do you get if you run apt policy libsnmp30 libsnmp-dev13:55:17
@jammy:matrix.orgjammyThe other thing I can think of... do you have anything that might be mangling newlines in some way? Might be worth trying to build the source from an unpacked tarball https://github.com/danos/frr/archive/refs/tags/danos/2009.tar.gz rather than a git checkout initially just to make sure14:03:27
@cksum:matrix.orgJeff McCune joined the room.18:50:05
@cksum:matrix.orgJeff McCune

Hello! I'm excited to be building out a pair of DANOS routers. Thanks for your work, DANOS 2012 has been a pleasure so far. One issue I'm currently trying to solve is a simple DNAT rule I have appears to be replacing the source IP and port, but it doesn't seem to be updating the checksum. The target host silently drops the packet as invalid. Here's what I see:

localadm@puppet:~$ sudo tcpdump -iany -n -vvv host a.b.c.d
tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
11:46:10.114458 IP (tos 0x0, ttl 62, id 0, offset 0, flags [DF], proto TCP (6), length 64, bad cksum 20cb (->d8df)!)
    a.b.c.d.22011 > 10.64.1.11.22: Flags [S], cksum 0xcb56 (incorrect -> 0x65ef), seq 4245372520, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 1543471023 ecr 0,sackOK,eol], length 0
18:58:39
@cksum:matrix.orgJeff McCune

Here's the NAT rule I'm using. The DANOS 2012 is running in an ESXi 6.7 VM with a vmxnet interface. I've verified the checksum is correct as it leaves the edge router just before reaching the DANOS router.

nat {
  destination {
    rule 20 {
      description "git push deploy to puppet"
      destination {
        address a.b.c.d
        port 22011
      }
      inbound-interface dp0p192p1
      protocol tcp
      translation {
        address 10.64.1.11
        port 22
      }
    }
  }
}
19:03:39
@scott-leishman:matrix.orgscott-leishman Hi Jeff, welcome to DANOS. It is good to have you. 19:08:15
@cksum:matrix.orgJeff McCuneThanks Scott!19:08:27
@scott-leishman:matrix.orgscott-leishmanI’ll ask our NAT expert to take a look tomorrow to see what is going on. It would be best to open a DANOS Jira ticket to attach your config. That allows google to index it and will make it easier to ask follow up questions. I’m okay to create the ticket if you want, but feel free to do it yourself. What are you planning to use DANOS for?19:14:26
@cksum:matrix.orgJeff McCuneThanks for the offer, I19:14:59
@cksum:matrix.orgJeff McCuneI'll create the ticket though.19:15:05
@scott-leishman:matrix.orgscott-leishmanCool19:15:24
@cksum:matrix.orgJeff McCuneI'm using it in a lab environment right now, but I'm a cloud consultant and my intention is to use DANOS to provide network load balancing for on-prem Kubernetes clusters.19:15:58
@cksum:matrix.orgJeff McCuneUsing MetalLB in BGP mode.19:16:06
@cksum:matrix.orgJeff McCuneThe DNAT isn't terribly important, I can offload it to something else. I just figured I was doing something wrong.19:17:41
@scott-leishman:matrix.orgscott-leishman That sounds interesting. Don’t be afraid to ask questions here or in a DANOS ticket. 19:18:22
@cksum:matrix.orgJeff McCuneThanks Scott19:18:35
@cksum:matrix.orgJeff McCuneI'll file it after lunch and follow up here19:18:46
@cksum:matrix.orgJeff McCunehttps://danosproject.atlassian.net/browse/DAN-37521:41:31
@scott-leishman:matrix.orgscott-leishmanThanks21:42:20
22 Apr 2021
@pimvanpelt:matrix.orgpimvanpelt joined the room.21:12:29
@pimvanpelt:matrix.orgpimvanpeltGood day fellow disaggregators21:13:19
@scott-leishman:matrix.orgscott-leishman Nice introduction to the chat channel. You are most welcome. 21:45:40
@pimvanpelt:matrix.orgpimvanpeltYou'll have come across me as well on jira and thanks for keeping the beat, Scott22:05:57
@pimvanpelt:matrix.orgpimvanpeltand of course for all your help with issues, features, triage and documentation22:06:09

Show newer messages


Back to Room List