mirror of https://github.com/tailscale/tailscale/
net/tstun: probe TCP GRO (#13376)
Disable TCP & UDP GRO if the probe fails. torvalds/linux@e269d79c7d broke virtio_net TCP & UDP GRO causing GRO writes to return EINVAL. The bug was then resolved later in torvalds/linux@89add40066. The offending commit was pulled into various LTS releases. Updates #13041 Signed-off-by: Jordan Whited <jordan@tailscale.com>pull/13388/head
Jordan Whited
3 months ago
committed by
GitHub
parent
7dcf65a10a
commit
7aa766ee65
@ -1,19 +0,0 @@
|
|||||||
// Copyright (c) Tailscale Inc & AUTHORS
|
|
||||||
// SPDX-License-Identifier: BSD-3-Clause
|
|
||||||
|
|
||||||
package tstun
|
|
||||||
|
|
||||||
import (
|
|
||||||
"github.com/tailscale/wireguard-go/tun"
|
|
||||||
"tailscale.com/envknob"
|
|
||||||
)
|
|
||||||
|
|
||||||
func setLinkFeatures(dev tun.Device) error {
|
|
||||||
if envknob.Bool("TS_TUN_DISABLE_UDP_GRO") {
|
|
||||||
linuxDev, ok := dev.(tun.LinuxDevice)
|
|
||||||
if ok {
|
|
||||||
linuxDev.DisableUDPGRO()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return nil
|
|
||||||
}
|
|
||||||
@ -0,0 +1,82 @@
|
|||||||
|
// Copyright (c) Tailscale Inc & AUTHORS
|
||||||
|
// SPDX-License-Identifier: BSD-3-Clause
|
||||||
|
|
||||||
|
package tstun
|
||||||
|
|
||||||
|
import (
|
||||||
|
"errors"
|
||||||
|
"net/netip"
|
||||||
|
"runtime"
|
||||||
|
|
||||||
|
"github.com/tailscale/wireguard-go/tun"
|
||||||
|
"golang.org/x/sys/unix"
|
||||||
|
"gvisor.dev/gvisor/pkg/tcpip"
|
||||||
|
"gvisor.dev/gvisor/pkg/tcpip/checksum"
|
||||||
|
"gvisor.dev/gvisor/pkg/tcpip/header"
|
||||||
|
"tailscale.com/envknob"
|
||||||
|
"tailscale.com/net/tsaddr"
|
||||||
|
)
|
||||||
|
|
||||||
|
// SetLinkFeaturesPostUp configures link features on t based on select TS_TUN_
|
||||||
|
// environment variables and OS feature tests. Callers should ensure t is
|
||||||
|
// up prior to calling, otherwise OS feature tests may be inconclusive.
|
||||||
|
func (t *Wrapper) SetLinkFeaturesPostUp() {
|
||||||
|
if t.isTAP || runtime.GOOS == "android" {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
if groDev, ok := t.tdev.(tun.GRODevice); ok {
|
||||||
|
if envknob.Bool("TS_TUN_DISABLE_UDP_GRO") {
|
||||||
|
groDev.DisableUDPGRO()
|
||||||
|
}
|
||||||
|
if envknob.Bool("TS_TUN_DISABLE_TCP_GRO") {
|
||||||
|
groDev.DisableTCPGRO()
|
||||||
|
}
|
||||||
|
err := probeTCPGRO(groDev)
|
||||||
|
if errors.Is(err, unix.EINVAL) {
|
||||||
|
groDev.DisableTCPGRO()
|
||||||
|
groDev.DisableUDPGRO()
|
||||||
|
t.logf("disabled TUN TCP & UDP GRO due to GRO probe error: %v", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func probeTCPGRO(dev tun.GRODevice) error {
|
||||||
|
ipPort := netip.MustParseAddrPort(tsaddr.TailscaleServiceIPString + ":0")
|
||||||
|
fingerprint := []byte("tailscale-probe-tun-gro")
|
||||||
|
segmentSize := len(fingerprint)
|
||||||
|
iphLen := 20
|
||||||
|
tcphLen := 20
|
||||||
|
totalLen := iphLen + tcphLen + segmentSize
|
||||||
|
ipAs4 := ipPort.Addr().As4()
|
||||||
|
bufs := make([][]byte, 2)
|
||||||
|
for i := range bufs {
|
||||||
|
bufs[i] = make([]byte, PacketStartOffset+totalLen, PacketStartOffset+(totalLen*2))
|
||||||
|
ipv4H := header.IPv4(bufs[i][PacketStartOffset:])
|
||||||
|
ipv4H.Encode(&header.IPv4Fields{
|
||||||
|
SrcAddr: tcpip.AddrFromSlice(ipAs4[:]),
|
||||||
|
DstAddr: tcpip.AddrFromSlice(ipAs4[:]),
|
||||||
|
Protocol: unix.IPPROTO_TCP,
|
||||||
|
// Use a zero value TTL as best effort means to reduce chance of
|
||||||
|
// probe packet leaking further than it needs to.
|
||||||
|
TTL: 0,
|
||||||
|
TotalLength: uint16(totalLen),
|
||||||
|
})
|
||||||
|
tcpH := header.TCP(bufs[i][PacketStartOffset+iphLen:])
|
||||||
|
tcpH.Encode(&header.TCPFields{
|
||||||
|
SrcPort: ipPort.Port(),
|
||||||
|
DstPort: ipPort.Port(),
|
||||||
|
SeqNum: 1 + uint32(i*segmentSize),
|
||||||
|
AckNum: 1,
|
||||||
|
DataOffset: 20,
|
||||||
|
Flags: header.TCPFlagAck,
|
||||||
|
WindowSize: 3000,
|
||||||
|
})
|
||||||
|
copy(bufs[i][PacketStartOffset+iphLen+tcphLen:], fingerprint)
|
||||||
|
ipv4H.SetChecksum(^ipv4H.CalculateChecksum())
|
||||||
|
pseudoCsum := header.PseudoHeaderChecksum(unix.IPPROTO_TCP, ipv4H.SourceAddress(), ipv4H.DestinationAddress(), uint16(tcphLen+segmentSize))
|
||||||
|
pseudoCsum = checksum.Checksum(bufs[i][PacketStartOffset+iphLen+tcphLen:], pseudoCsum)
|
||||||
|
tcpH.SetChecksum(^tcpH.CalculateChecksum(pseudoCsum))
|
||||||
|
}
|
||||||
|
_, err := dev.Write(bufs, PacketStartOffset)
|
||||||
|
return err
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue