missing k8s default route leads to egress PMTUD problem #456
Labels
area/networking
component/front-end
component/stateless-lb
concept/attractor
kind/bug
Something isn't working
Describe the bug
If an egress IP-packet reaches an LB-FE and is bigger than MTU on the external network while fragmentation is not allowed, the LB-FE must generate an ICMP reply (Frag Needed/Packet Too Big).
In order to generate said ICMP reply route lookup must succeed (dest is a VIP address), otherwise the reply will be cancelled:
https://elixir.bootlin.com/linux/v5.10/source/net/ipv6/icmp.c#L598
https://elixir.bootlin.com/linux/v5.10.194/source/net/ipv4/icmp.c#L744
Depending on the configuration of the primary k8s network, LB-FE POD might or might not have a default route for both IPv4 and IPv6.
Curently, if a default route is missing, then ICMP reply for an egress packet of the matching IP version won't be generated.
To Reproduce
Steps to reproduce the behavior:
The text was updated successfully, but these errors were encountered: