Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CAP_NET_RAW to BIRD to use SO_BINDTODEVICE option #271

Closed
zolug opened this issue Aug 23, 2022 · 0 comments
Closed

Add CAP_NET_RAW to BIRD to use SO_BINDTODEVICE option #271

zolug opened this issue Aug 23, 2022 · 0 comments

Comments

@zolug
Copy link
Collaborator

zolug commented Aug 23, 2022

Describe the bug
BGP session did not get established:
FE failed to establish socket for IPv6 BGP session due to error during SO_BINDTODEVICE call.

To Reproduce
Error popped up when deploying Meridio in an EST "self service" k8s cluster.

Expected behavior
BGP session gets esatblished.

Context

  • Kernel: 5.4.0-42
  • Kubernetes: 1.24
  • Spire: 1.2.2
  • Network Service Mesh: 1.5.0
  • Meridio: 0.7.1

Logs

2022-08-23 11:26:31.722 NBR-gateway2: Connecting to 100:100::150 from local address 100:100::1
2022-08-23 11:26:31.722 NBR-gateway2: Socket error: SO_BINDTODEVICE: Operation not permitted
2022-08-23 11:26:31.722 NBR-gateway2: Connection closed
2022-08-23 11:26:31.727 NBR-gateway2: Connect delayed by 5 seconds

kind-control-plane Ready control-plane 131m v1.24.0 172.18.0.4 Ubuntu 21.10 5.4.0-42-generic containerd://1.6.4
kind-worker Ready 130m v1.24.0 172.18.0.3 Ubuntu 21.10 5.4.0-42-generic containerd://1.6.4
kind-worker2 Ready 130m v1.24.0 172.18.0.2 Ubuntu 21.10 5.4.0-42-generic containerd://1.6.4

root@kind-worker:/# uname -a
Linux kind-worker 5.4.0-42-generic #46-Ubuntu SMP Fri Jul 10 00:24:02 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

@zolug zolug added this to To do in Meridio via automation Aug 23, 2022
@zolug zolug self-assigned this Aug 23, 2022
@LionelJouin LionelJouin moved this from To do to Review in progress in Meridio Aug 23, 2022
@zolug zolug closed this as completed Aug 23, 2022
Meridio automation moved this from Review in progress to Done Aug 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

No branches or pull requests

1 participant