From Fedora Project Wiki

< QA
No edit summary
 
(58 intermediate revisions by 3 users not shown)
Line 1: Line 1:
Testing IPv6 support and dualstack networking can be very tricky. The purpose of this document is to provide a live resource on testing situations arising from existance and usage of two network layer protocols.
Main purpose of the Networking QA project is to check and improve IPv6 support in Fedora and concurrent usage of IPv4 and IPv6 protocols. Maintaining and improving existing IPv4 support is one of the secondary goals.


== Configuration ==
== Contacts ==


Base system components related to IPv6 and dual-stack operation:
Coordinators:


* kernel
* [[User:pavlix|Pavel Šimerda]]
* glibc
* [[User:thozza|Tomáš Hozza]]


== Name resolution ==
Contributors:


Name resolution features are provided by the GNU C Library (glibc) which is not yet ready for proper IPv6 and dual-stack operation as you can see when performing your tests. The C library comes with its own testing tool <code>getent</code> that has a special database called <code>ahosts</code> that runs <code>getaddrinfo()</code>, the library function that translates names to objects with addressing information. For your testing it is best used together with tools like <code>strace</code>, <code>ltrace</code> or even <code>gdb</code> so that you know exactly what is happening behind the scenes.
* [[User:nmav|Nikos Mavrogiannopoulos]] – iputils


<pre>
Potential contributors:
$ getent ahosts www.fedoraproject.org raw
2604:1580:fe00:0:5054:ff:feae:702c STREAM wildcard.fedoraproject.org
2604:1580:fe00:0:5054:ff:feae:702c DGRAM 
2604:1580:fe00:0:5054:ff:feae:702c RAW   
2607:f188::dead:beef:cafe:fed1 STREAM
2607:f188::dead:beef:cafe:fed1 DGRAM 
2607:f188::dead:beef:cafe:fed1 RAW   
2001:4178:2:1269::fed2 STREAM
2001:4178:2:1269::fed2 DGRAM 
2001:4178:2:1269::fed2 RAW   
2610:28:3090:3001:dead:beef:cafe:fed3 STREAM
2610:28:3090:3001:dead:beef:cafe:fed3 DGRAM 
2610:28:3090:3001:dead:beef:cafe:fed3 RAW   
66.35.62.162    STREAM
66.35.62.162    DGRAM 
66.35.62.162    RAW   
140.211.169.196 STREAM
140.211.169.196 DGRAM 
140.211.169.196 RAW   
209.132.181.15  STREAM
209.132.181.15  DGRAM 
209.132.181.15  RAW   
152.19.134.142  STREAM
152.19.134.142  DGRAM 
152.19.134.142  RAW   
67.219.144.68  STREAM
67.219.144.68  DGRAM 
67.219.144.68  RAW   
67.203.2.67    STREAM
67.203.2.67    DGRAM 
67.203.2.67    RAW   
209.132.181.16  STREAM
209.132.181.16  DGRAM 
209.132.181.16  RAW   
</pre>


Even in the simple example above you can see that the name resolution topic won't be as simple as one would guess.
* [[User:Tobygoodwin|Toby Goodwin]]


=== Name resolution input ===
== Objectives ==


When application requests addressing information for a hostname with an optional service name, the library returns a list of addressing information objects. The order of objects in the list is significant and depends on operating system configuration and connectivity.
Note: We are trying to define objectives of the project. Unfortunately we cannot add everything someone considers good or important but we rather have focus on things that we can actually do. Contact us if you're willing to help with some topic that you're interested in or that you consider neglected.


==== Input from the application ====
We would like to test, document and improve the following:


* nodename
* Automatic network configuration of a Fedora node
* servname
* Proper dual-stack operation of client and server software in various environments
* protocol
* Check Fedora infrastructure and installation for IPv6 only operation
* socktype
 
* flags
 
** <code>AI_CANONNAME</code>
== Overview ==
 
Packages to test:
 
* [[/Packages]]
 
How to prepare test environment:
 
* [[/Test environment]]
 
How to test different types of packages:
 
* [[/Configuration]]
* [[/Name resolution]]
* [[/Testing tools]]
* [[/Client software]]
* [[/Server software]]
 
Known issues:
 
* [https://bugzilla.redhat.com/showdependencytree.cgi?id=883152 Bugzilla tickets]
 
== New packages ==
 
There are new packages being added for networking and especially IPv6 testing and operations.
 
* [https://bugzilla.redhat.com/show_bug.cgi?id=1265628 dhcpcd] – provides a basic network configuration daemon for testing and comparison
* [https://bugzilla.redhat.com/show_bug.cgi?id=1090499 netresolve] – provides a library, testing tools and example implementations for some network software operations
 
== Packages ==
 
Note: This section is informative only. It only includes assessment of packages based on experience and is ''not'' a result of extensive testing.
 
=== Packages working more or less well in IPv6 and dual-stack environments ===
 
Following packages play more or less well with IPv6. You can still expect minor issues including delays when configuration of one of the protocols doesn't work as expected. Those packages are still to be tested.
 
Network configuration:
 
* dhcp – Dynamic host configuration protocol software
* iproute – Advanced IP routing and network device configuration tools
* NetworkManager – Network connection manager and user applications
* dnssec-trigger – NetworkManager plugin to update/reconfigure DNSSEC resolving
 
Services:
 
* bind – The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
* dnsmasq – A lightweight DHCP/caching DNS server
* httpd – Apache HTTP Server
* openssh – An open source implementation of SSH protocol versions 1 and 2
* postfix – Postfix Mail Transport Agent
 
Development:
 
* git
 
Other:
 
* curl – A utility for getting files from remote servers (FTP, HTTP, and others)
* cyrus-imapd – A high-performance mail server with IMAP, POP3, NNTP and SIEVE support
* c-ares – A library that performs asynchronous DNS operations
* firefox – Mozilla Firefox Web browser
* libssh2 – A library implementing the SSH2 protocol
* iptables – Tools for managing Linux kernel packet filtering capabilities
 
=== Packages with severe issues in IPv6 and dual-stack environments ===
 
Core system:
 
* avahi – Local network service discovery
** IPv6 turned off by default
** nss-mdns doesn't do IPv6LL due to glibc limitations
* glibc – The GNU libc libraries
** limited and buggy getaddrinfo()
** [https://sourceware.org/bugzilla/buglist.cgi?quicksearch=getaddrinfo upstream getaddrinfo issues]
 
Core tools:
 
* iputils – Network monitoring tools including ping
** ping (unreleased upstream now supports dual-stack operation)
** tracepath
** ...
** ...
* quota – File system quota management
** [https://bugzilla.redhat.com/show_bug.cgi?id=704219 rpc.rquotad and other program should be ported from glibc's Sun RPC to tirpc's RPC]
*** [[User:Pavlix]]: Why and how is it related to IPv6?
* [https://bugzilla.redhat.com/show_bug.cgi?id=1221496 fping: lack of IPv6 support]
* [https://bugzilla.redhat.com/show_bug.cgi?id=1220825 nslookup: bad default behavior]
Development:
* subversion - A Modern Concurrent Version Control System
** [https://bugzilla.redhat.com/show_bug.cgi?id=1130328 no fallback to IPv4 when IPv6 default route fails]
=== IPv4 only packages ===


==== Input from the local configuration ====
Following packages do not need any IPv6 testing as they contain IPv4 specific tools.


* To what extend is IPv4 and IPv6 available
* arptables
* arpwatch


==== Input from the outside world ====
=== Unqualified packages ===


* DNS information
Following packages weren't categorized yet but are considered important enough to be checked for IPv6 support. Please extend the list with other high visibility packages. You can add more important packages here.
* Multicast DNS information
* LDAP information


=== Name resolution processing ===
Core system:


==== What is requested ====
* abrt – Automatic bug detection and reporting tool
* anaconda – Graphical system installer
* apr – Apache Portable Runtime library
* busybox – Statically linked binary providing simplified versions of system commands
** It would be useful to check network related commands
* docker – Automates deployment of containerized applications
** IPv6 in /etc/resolv.conf
** IPv6 on bridged networks
* dracut – Initramfs generator using udev
* firewalld – A firewall daemon with D-BUS interface providing a dynamic firewall
* glib2/glib-networking – Networking support for GLib
* grub2 – Bootloader with support for Linux, Multiboot and more
* systemd – A System and Service Manager
* yum – RPM package installer/updater/manager


Not all information is requested at all times. Some information like canonical name must be explicitly requested by the application via <code>AI_CANONNAME</code> flag. It may be desirable to suppress other requests by local configuration or connectivity checks, a notable example being suppression of DNS AAAA queries on hosts without global connectivity.
Services:


==== What is passed to the application ====
* bird – routing daemon
* cups – Common Unix Printing System
* dovecot – Secure imap and pop3 server
* openswan/libreswan/strongswan – IPSEC implementation with IKEv1 and IKEv2 keying protocols


Not all information that is learnt via requests is presented to the application. It is typically filtered according to input from the application. It is sometimes also filtered according to connectivity checks but that has caused more problems than improvements.
* quagga – Routing daemon
* sendmail – A widely used Mail Transport Agent (MTA)


==== How it is sorted ====
Development:


There are rules for sorting addressing information returned by <code>getaddrinfo()</code>. One of the basic features is to return global IPv6 destinations before global IPv4 destinations. But when the library detects that IPv6 connectivity is not available, the reverse applies.
* bzr – Friendly distributed version control system
* cvs – Concurrent Versions System
* gdb – A GNU source-level debugger for C, C++, Fortran and other languages
* mercurial – Mercurial – a distributed SCM


== Testing client applications ==
Other:


== Testing server applications ==
* apr-util – Apache Portable Runtime Utility library
** various networking tools including ping
* gvfs – Backends for the gio framework in GLib
* ipxe – A network boot loader
* iptstate – A top-like display of IP Tables state table entries
* ldns – Low–level DNS(SEC) library with API
* lftp – A sophisticated file transfer program
* libevent
* libvirt – Library providing a simple virtualization API
* net-tools – Basic networking tools
* nmap – Network exploration tool and security scanner
* nss-myhostname – glibc plugin for local system host name resolution
* nss – Network Security Services
* postgresql – PostgreSQL client programs
* rsync – A program for synchronizing files over a network
* squid – The Squid proxy caching server
* sssd – System Security Services Daemon
* syslinux – Simple kernel loader which boots from a FAT filesystem
* tcpdump – A network traffic monitoring tool
* telnet – The client program for the Telnet remote login protocol
* traceroute – Traces the route taken by packets over an IPv4/IPv6 network
* vinagre – VNC client for GNOME
* vino – A remote desktop system for GNOME
* virt-manager – Virtual Machine Manager
* virt-viewer – Virtual Machine Viewer
* wireshark – Network traffic analyzer

Latest revision as of 10:50, 14 December 2015

Main purpose of the Networking QA project is to check and improve IPv6 support in Fedora and concurrent usage of IPv4 and IPv6 protocols. Maintaining and improving existing IPv4 support is one of the secondary goals.

Contacts

Coordinators:

Contributors:

Potential contributors:

Objectives

Note: We are trying to define objectives of the project. Unfortunately we cannot add everything someone considers good or important but we rather have focus on things that we can actually do. Contact us if you're willing to help with some topic that you're interested in or that you consider neglected.

We would like to test, document and improve the following:

  • Automatic network configuration of a Fedora node
  • Proper dual-stack operation of client and server software in various environments
  • Check Fedora infrastructure and installation for IPv6 only operation


Overview

Packages to test:

How to prepare test environment:

How to test different types of packages:

Known issues:

New packages

There are new packages being added for networking and especially IPv6 testing and operations.

  • dhcpcd – provides a basic network configuration daemon for testing and comparison
  • netresolve – provides a library, testing tools and example implementations for some network software operations

Packages

Note: This section is informative only. It only includes assessment of packages based on experience and is not a result of extensive testing.

Packages working more or less well in IPv6 and dual-stack environments

Following packages play more or less well with IPv6. You can still expect minor issues including delays when configuration of one of the protocols doesn't work as expected. Those packages are still to be tested.

Network configuration:

  • dhcp – Dynamic host configuration protocol software
  • iproute – Advanced IP routing and network device configuration tools
  • NetworkManager – Network connection manager and user applications
  • dnssec-trigger – NetworkManager plugin to update/reconfigure DNSSEC resolving

Services:

  • bind – The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
  • dnsmasq – A lightweight DHCP/caching DNS server
  • httpd – Apache HTTP Server
  • openssh – An open source implementation of SSH protocol versions 1 and 2
  • postfix – Postfix Mail Transport Agent

Development:

  • git

Other:

  • curl – A utility for getting files from remote servers (FTP, HTTP, and others)
  • cyrus-imapd – A high-performance mail server with IMAP, POP3, NNTP and SIEVE support
  • c-ares – A library that performs asynchronous DNS operations
  • firefox – Mozilla Firefox Web browser
  • libssh2 – A library implementing the SSH2 protocol
  • iptables – Tools for managing Linux kernel packet filtering capabilities

Packages with severe issues in IPv6 and dual-stack environments

Core system:

  • avahi – Local network service discovery
    • IPv6 turned off by default
    • nss-mdns doesn't do IPv6LL due to glibc limitations
  • glibc – The GNU libc libraries

Core tools:

Development:

IPv4 only packages

Following packages do not need any IPv6 testing as they contain IPv4 specific tools.

  • arptables
  • arpwatch

Unqualified packages

Following packages weren't categorized yet but are considered important enough to be checked for IPv6 support. Please extend the list with other high visibility packages. You can add more important packages here.

Core system:

  • abrt – Automatic bug detection and reporting tool
  • anaconda – Graphical system installer
  • apr – Apache Portable Runtime library
  • busybox – Statically linked binary providing simplified versions of system commands
    • It would be useful to check network related commands
  • docker – Automates deployment of containerized applications
    • IPv6 in /etc/resolv.conf
    • IPv6 on bridged networks
  • dracut – Initramfs generator using udev
  • firewalld – A firewall daemon with D-BUS interface providing a dynamic firewall
  • glib2/glib-networking – Networking support for GLib
  • grub2 – Bootloader with support for Linux, Multiboot and more
  • systemd – A System and Service Manager
  • yum – RPM package installer/updater/manager

Services:

  • bird – routing daemon
  • cups – Common Unix Printing System
  • dovecot – Secure imap and pop3 server
  • openswan/libreswan/strongswan – IPSEC implementation with IKEv1 and IKEv2 keying protocols
  • quagga – Routing daemon
  • sendmail – A widely used Mail Transport Agent (MTA)

Development:

  • bzr – Friendly distributed version control system
  • cvs – Concurrent Versions System
  • gdb – A GNU source-level debugger for C, C++, Fortran and other languages
  • mercurial – Mercurial – a distributed SCM

Other:

  • apr-util – Apache Portable Runtime Utility library
    • various networking tools including ping
  • gvfs – Backends for the gio framework in GLib
  • ipxe – A network boot loader
  • iptstate – A top-like display of IP Tables state table entries
  • ldns – Low–level DNS(SEC) library with API
  • lftp – A sophisticated file transfer program
  • libevent
  • libvirt – Library providing a simple virtualization API
  • net-tools – Basic networking tools
  • nmap – Network exploration tool and security scanner
  • nss-myhostname – glibc plugin for local system host name resolution
  • nss – Network Security Services
  • postgresql – PostgreSQL client programs
  • rsync – A program for synchronizing files over a network
  • squid – The Squid proxy caching server
  • sssd – System Security Services Daemon
  • syslinux – Simple kernel loader which boots from a FAT filesystem
  • tcpdump – A network traffic monitoring tool
  • telnet – The client program for the Telnet remote login protocol
  • traceroute – Traces the route taken by packets over an IPv4/IPv6 network
  • vinagre – VNC client for GNOME
  • vino – A remote desktop system for GNOME
  • virt-manager – Virtual Machine Manager
  • virt-viewer – Virtual Machine Viewer
  • wireshark – Network traffic analyzer
Retrieved from "https://fedoraproject.org/w/index.php?title=QA/Networking&oldid=430187"