Node disconected - IPsec problem

Rancher 1.x
1

Hi,

I’m running 1.6.14 with one Master and one Worker on CentOS Linux release 7.4.1708 and
Docker version 17.12.1-ce, build 7390fc6

Sometimes the vNIC is lost, for that the docker0 bridge enter in blocking and disabled state.

Mar  8 17:47:05 kernel: IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
Mar  8 17:47:05 kernel: docker0: port 9(vethr686e0fc54f) entered blocking state
Mar  8 17:47:05 kernel: docker0: port 9(vethr686e0fc54f) entered disabled state
Mar  8 17:47:05 kernel: device vethr686e0fc54f entered promiscuous mode
Mar  8 17:47:05 kernel: docker0: port 9(vethr686e0fc54f) entered blocking state
Mar  8 17:47:05 kernel: docker0: port 9(vethr686e0fc54f) entered forwarding state
Mar  8 17:47:05 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Mar  8 17:47:05 NetworkManager[794]: <info>  [1520527625.9558] device (vethr686e0fc54f): link connected
Mar  8 17:47:05 NetworkManager[794]: <info>  [1520527625.9670] manager: (vethr686e0fc54f): new Veth device (/org/freedesktop/NetworkManager

When this happen Rancher is unable to connect with the worker node, and all is lost.

Selection_208
Selection_2081840×819 57.5 KB

Any solution for this?

Thanks

Thanks

2

Same problem here.

Anyone else?

Surprisingly I’ve only found this report of a problem like mine. Sergio, seems that we haven’t followed requirements, or installation procedures at the same point.

Hope some expert will take a look at our scenario.

Regards.

Jose.

3

I know it’s a late reply, but I wanted to offer my $0.02. We’ve run into this more times then I’d like to admit. After getting distracted by all manner of troubleshooting, the problem was often caused by the Host somehow attaching itself to the wrong IP during an earlier configuration change. We fixed it by following this FAQ:

http://rancher.com/docs/rancher/v1.6/en/faqs/agents/#how-does-the-host-determine-ip-address-and-how-can-i-change-it-what-do-i-do-if-the-ip-of-my-host-has-changed-due-to-reboot

1 Like
4

Hi Stefan.

We’ve applied the solution you pointed at a couple of weeks ago. Since then, the platform is running smoothly!

We’ll keep monitoring it, but seems that you hit the problem.

Thanks a lot!

Jose.

5

Thanks @Stefan_Lasiewski for the info!

Always make sure the IP address of the hosts registered in the environment are detected correctly when trying to debug IPSec problems.