HBN Service Release Notes

3769309

Description: A ping or other IP connectivity from a locally connected host in vrf-X to an interface IP address on the DPU/HBN itself in vrf-Y will not work, even if VRF route-leaking is enabled between these two VRFs.

Workaround: N/A

Keyword:

Reported in HBN version: 2.2.0

3886379

Description: Deleting and re-adding SR-IOV ports might result in some ports in br-hbn bridge going in error state.

Workaround: If possible, an appropriate number of SR-IOV ports should be chosen at BFB install time. But if a change is made and if the system has this error, the host must undergo a power cycle to resolve the issue.

Keyword: Bridge; SR-IOV

Reported in HBN version: 2.2.0

3864080

Description: When an interface is toggled off and on, its sub-interfaces lose their IPv6 addresses and do not get them back.

Workaround: Perform "ifreload -a" to re-apply the IPv6 addresses to the sub-interfaces.

Keyword: Subinterface; IPv6 address

Reported in HBN version: 2.2.0

3835295

Description: Traffic entering HBN service on a host PF/VF main-interface and exiting on a sub-interface of the same PF/VF (and vice versa) is not hardware offloaded. Similarly, traffic entering HBN service on one sub-interface and exiting on another sub-interface of the same host PF/VF is also not hardware offloaded.

Workaround: N/A

Keyword: Hardware offload; interfaces

Reported in HBN version: 2.2.0

3360699

Description: If it is required to decrease the default MTU on interfaces on which HBN operates, after the change is made on the BlueField as well as within HBN, the BlueField must be rebooted for the change to take effect properly.

Workaround: N/A

Keyword: MTU; reboot

Reported in HBN version: 2.2.0

3538167

Description: An explicit restart of FRR service may be required if the BGP AS number is changed via NVUE.

Workaround: N/A

Keyword: FRR; BGP

Reported in HBN version: 2.2.0

3772552

Description: The DHCP relay gateway-interface IP address does not automatically pick up the IP address assigned to the associated VRF.

Workaround: The gateway-interface IP address must be explicitly configured.

Keyword: DHCP relay gateway; IP

Reported in HBN version: 2.2.0

3873506

Description: Rarely, after deletion then creation of an interface, BGP peering over that interface may announce IPv6 routes with an IPv4-mapped IPv6 address as the next hop, which the BGP peer device at the other end can reject.

Workaround: A flap of the BGP peering session resolves this problem.

The NVUE command line to perform this is:

            

            
nv set vrf <vrf-name> router bgp neighbor <neighbor> shutdown on
nv config apply
        

Followed by:

            

            
nv set vrf <vrf-name> router bgp neighbor <neighbor> shutdown off
nv config apply
        

Keyword: BGP; toggle

Reported in HBN version: 2.2.0

3891542

Description: If NVUE-based routing policy (route map) configuration is used to associated route target extended communities with a EVPN route, only one route target can be specified.

Workaround: N/A

Keyword: NVUE; route target

Reported in HBN version: 2.2.0

3757686

Description: When the HBN container is coming up and applying a large configuration through the NVUE-startup service which includes entities used by DHCP relay (e.g., interfaces, SVIs and VRFs), the DHCP relay service may go into FATAL state. It can be observed using the following command:

            

            
supervisorctl status | grep isc-dhcp-relay
isc-dhcp-relay-vrf11 RUNNING pid 2069, uptime 0:11:31
isc-dhcp-relay-vrf12 RUNNING pid 2071, uptime 0:11:31
isc-dhcp-relay-vrf13 FATAL Exited too quickly (process log may have details)
isc-dhcp-relay-vrf14 FATAL Exited too quickly (process log may have details)
        

Workaround: Restart the DHCP relay service which is in FATAL state using the command:

            

            
supervisorctl restart <relay-service-name>
        

Keyword: DHCP relay; fatal; container; restart

Reported in HBN version: 2.1.0

3605486

Description: When the DPU boots up after issuing a "reboot" command from the DPU itself, some host-side interfaces may remain down.

Workaround:

1. Restart openibd:

   Copy

   Copied!

               
   
               
   systemctl restart openibd
           

2. Recreate SR-IOV interfaces if they are needed.

3. Replay interface config. For example:

   • If using ifupdown2:

     Copy

     Copied!

                 
     
                 
     ifreload -a 
             

   • If using Netplan:

     Copy

     Copied!

                 
     
                 
     netplan apply
             

Keyword: Reboot

Reported in HBN version: 1.5.0

3547103

Description: IPv6 stateless ACLs are not supported.

Workaround: N/A

Keyword: IPv6 ACL

Reported in HBN version: 1.5.0

3339304

Description: Statistics for hardware-offloaded traffic are not reflected on SFs inside an HBN container.

Workaround: Look up the stats using ip -s link show on PFs outside of the HBN container. PFs would show Tx/Rx stats for traffic that is hardware-accelerated in the HBN container.

Keyword: Statistics; container

Reported in HBN version: 1.4.0

3352003

Description: NVUE show, config, and apply commands malfunction if the nvued and nvued-startup services are not in the RUNNING and EXITED states respectively.

Workaround: N/A

Keyword: NVUE commands

Reported in HBN version: 1.3.0

3184745

Description: The command nv show interface <intf> acl does not show correct information if there are multiple ACLs bound to the interface.

Workaround: Use the command nv show interface <intf> to view the ACLs bound to an interface.

Keyword: ACLs

Reported in HBN version: 1.2.0

3158934

Description: Deleting an NVUE user by removing their password file and restarting the decrypt-user-add service on the HBN container does not work.

Workaround: Either respawn the container after deleting the file, or delete the password file corresponding to the user by running userdel -r username.

Keyword: User deletion

Reported in HBN version: 1.2.0

3185003

Description: When a packet is encapsulated with a VXLAN header, it adds extra bytes which may cause the packet to exceed the MTU of link. Typically, the packet would be fragmented but its silently dropped and no fragmentation happens.

Workaround: Make sure that the MTU on the uplink port is always 50 bytes more than host ports so that even after adding VXLAN headers, ingress packets do not exceed the MTU.

Keyword: MTU; VXLAN

Reported in HBN version: 1.2.0

3184905

Description: On VXLAN encapsulation, the DF flag is not propagated to the outer header. Such a packet may be truncated when forwarded in the kernel, and it may be dropped when hardware offloaded.

Workaround: Make sure that the MTU on the uplink port is always 50 bytes more than host ports so that even after adding VXLAN headers, ingress packets do not exceed the MTU.

Keyword: VXLAN

Reported in HBN version: 1.2.0

3188688

Description: When stopping the container using the command crictl stop an error may be reported because the command uses a timeout of 0 which is not enough to stop all the processes in the HBN container.

Workaround: Pass a timeout value when stopping the HBN container by running:

            

            
crictl stop --timeout 60 <hbn-container>
        

Keyword: Timeout

Reported in HBN version: 1.2.0

3129749

Description: The same ACL rule cannot be applied in both the inbound and outbound direction on a port.

Workaround: N/A

Keyword: ACLs

Reported in HBN version: 1.2.0

3126560

Description: The system's time zone cannot be modified using NVUE in the HBN container.

Workaround: The timezone can be manually changed by symlinking the /etc/localtime file to a binary time zone's identifier in the /usr/share/zoneinfo directory. For example:

            

            
sudo ln -sf /usr/share/zoneinfo/GMT /etc/localtime
        

Keyword: Time zone; NVUE

Reported in HBN version: 1.2.0

3118204

Description: Auto-BGP functionality (where the ASN does not need to be configured but is dynamically inferred by the system based on the system's role as a leaf or spine device) is not supported on HBN.

Workaround: If BGP is configured and used on HBN, the BGP ASN must be manually configured.

Keyword: BGP

Reported in HBN version: 1.2.0

3632344

Description: HBN interfaces on the BlueField side (outside the HBN container) may not get their proper MTU set from systemd-network.

Fixed in HBN version: 2.2.0

3760869

Description: Datapath flow with very low PPS may be deleted before aging time (60 sec) in large scale of number of routes (16K+).

Fixed in HBN version: 2.2.0

3770992

Description: It is not possible to configure an IPv6 default (::/0) static route using NVUE.

Fixed in HBN version: 2.2.0

3824881

Description: When the number of unique ECMP groups used is more than 6, it results in failure of programming prefixes using ECMP-groups greater than 6. Uniqueness is based on ECMP content, so if multiple routes have same nexthop paths, they just use 1 ECMP group.

Fixed in HBN version: 2.2.0

3705894

Description: In an EVPN Symmetric Routing scenario, IPv6 traffic is not hardware offloaded.

Fixed in HBN version: 2.2.0

3168683

Description: If many interfaces are participating in EVPN/routing, it is possible for the routing process to run out of memory.

Fixed in HBN version: 2.1.0

3519324

Description: The DOCA HBN container takes about 1 minute longer to spawn, as compared to previous HBN release (1.4.0)

Fixed in HBN version: 2.1.0

3219539

Description: TC rules are programmed by OVS to map uplink and host representor ports to HBN service. These rules are ageable and can result in packets needing to get software forwarded periodically to refresh the rules.

Fixed in HBN version: 2.1.0

3610971

Description: The output of the command nv show interface does not display information about VRFs, VXLAN, and bridge.

Fixed in HBN version: 2.0.0

3452914

Description: IPv6 OOB connectivity from the HBN container stops working if the br-mgmt interface on the DPU goes down. When going down, the br-mgmt interface loses its IPv6 address, which is used as the gateway address for the HBN container. If the br-mgmt interface comes back up, its IPv6 address is not added back and IPv6 OOB connectivity from the HBN container will not work

Fixed in HBN version: 1.5.0

3191433

Description: ECMP selection for the underlay path uses the ingress port and identifies uplink ports via round robin. This may not result in uniform spread of the traffic.

Fixed in HBN version: 1.4.0

3049879

Description: When reloading (ifreload) an empty /etc/network/interfaces file, the previously created interfaces are not deleted.

Fixed in HBN version: 1.4.0

3284607

Description: When an ACL is configured for IPv4 and L4 parameters (protocol tcp/udp, source, and destination ports) match, the ACL also matches IPv6 traffic with the specified L4 parameters.

Fixed in HBN version: 1.4.0

3282113

Description: Some DPUs experience an issue with the clock settings after installing a BlueField OS in an HBN setting in which the date reverts back to "Thu Sep 8, 2022".

Fixed in HBN version: 1.4.0

3354029

Description: If interfaces on which BGP unnumbered peering is configured are not defined in the /etc/network/interfaces configuration file, BGP peering does not get established on them.

Fixed in HBN version: 1.4.0