[Bug 266493] ARP Network Problems

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 19 Sep 2022 10:04:35 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=266493

            Bug ID: 266493
           Summary: ARP Network Problems
           Product: Base System
           Version: 13.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: s.frommeyer@tarent.de

Created attachment 236682
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=236682&action=edit
The screenshot shows that the network only operates for short periods of time.
We have not figured out why the state is not constant

After updating our firewall cluster (2 identical machines) from OPNsense
version 21.7.8 to 22.7 (HardenedBSD 12.1 -> FreeBSD 13.1) we have problems
reaching devices via icmp.

To exclude OPNsense here, we started the same system without the application,
using replicated interfaces with the same result.

We were able to trace the problems to arp resolution. For some network devices,
arp resolution never works, for some devices it works partially while other
devices show no problems at all.

With tcpdump we can see that arp requests are being generated but arp replies
are not received. For some devices the situation resolves by itself or arp
resolution goes into a flapping state, with periods where arp replies are being
received for some time.

We are able to resolve all issues by using static arp entries. ICMP works
directly with static arp entries.

-- 
You are receiving this mail because:
You are the assignee for the bug.