containers / gvisor-tap-vsock

A new network stack based on gVisor
Apache License 2.0
269 stars 50 forks source link

ICMP limitation #428

Open hasan4791 opened 23 hours ago

hasan4791 commented 23 hours ago

Hello team, In Podman on macos, the ip which is not reachable by host is actually pingable from the podman machine. Though it is not possible, something fishy is happening on the network side. Also the ping time is always 1ms range for any reachable ips!!! I dont understand whats causing this issue as its creating ruckus while debugging some network connectivity issues from containers especially when running VPN clients!!


root@localhost:~# ping 7.7.7.7
PING 7.7.7.7 (7.7.7.7) 56(84) bytes of data.
64 bytes from 7.7.7.7: icmp_seq=1 ttl=64 time=0.295 ms
64 bytes from 7.7.7.7: icmp_seq=2 ttl=64 time=0.555 ms
64 bytes from 7.7.7.7: icmp_seq=3 ttl=64 time=0.875 ms
^C
--- 7.7.7.7 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2063ms
rtt min/avg/max/mdev = 0.295/0.575/0.875/0.237 ms
root@localhost:~# 
logout
(chasan-working) vpn-proxy> ping 7.7.7.7
PING 7.7.7.7 (7.7.7.7): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
^C
--- 7.7.7.7 ping statistics ---
4 packets transmitted, 0 packets received, 100.0% packet loss
(chasan-working) vpn-proxy>

So is this a Hard limit or lacks implementation?