soft lockup - may be related to wireguard (backported)

Wang Jian larkwang at gmail.com
Mon May 4 14:49:57 CEST 2020


Jason A. Donenfeld <Jason at zx2c4.com> 于2020年5月4日周一 下午1:26写道:
>
> Are you routing wireguard over wireguard, or something interesting like that?
>
> Is ipsec being used?

I don't think I have any fancy use cases. But wireguard over pppoe?

Other details are
- nftable's iptables compatible mode is used, along with ipset
- pppoe link is default route, and wg-quick is configured to install
additional default route into new created routing table (2000)
- ipset matches are used to MARK traffic to specific destinations in
mangle table, PREROUTING & OUTPUT, for both v4 and v6
- ip rules are added to match the fwmark and lookup new routing table
(2000, so go out via wireguard interface) for forwarded traffic and
output traffic

Here is the list of loaded kmod.

# lsmod
Module                  Size  Used by
pppoe                  20480  2
pppox                  16384  1 pppoe
ppp_generic            49152  6 pppox,pppoe
slhc                   20480  1 ppp_generic
wireguard              94208  0
curve25519_x86_64      49152  1 wireguard
libcurve25519          49152  2 curve25519_x86_64,wireguard
libchacha20poly1305    16384  1 wireguard
chacha_x86_64          28672  1 libchacha20poly1305
poly1305_x86_64        28672  1 libchacha20poly1305
ip6_udp_tunnel         16384  1 wireguard
udp_tunnel             16384  1 wireguard
libblake2s             16384  1 wireguard
blake2s_x86_64         20480  1 libblake2s
libblake2s_generic     20480  1 blake2s_x86_64
libchacha              16384  1 chacha_x86_64
cfg80211              839680  0
rfkill                 28672  1 cfg80211
8021q                  40960  0
garp                   16384  1 8021q
stp                    16384  1 garp
mrp                    20480  1 8021q
llc                    16384  2 stp,garp
xt_mark                16384  4
xt_set                 16384  4
nft_chain_nat          16384  8
xt_MASQUERADE          20480  3
xt_TCPMSS              16384  5
xt_nat                 16384  2
nf_nat                 53248  3 xt_nat,nft_chain_nat,xt_MASQUERADE
nft_counter            16384  25
xt_tcpudp              20480  7
ipt_REJECT             16384  3
nf_reject_ipv4         16384  1 ipt_REJECT
xt_state               16384  0
xt_conntrack           16384  4
xt_multiport           20480  2
nft_compat             20480  34
nf_tables             176128  93 nft_compat,nft_counter,nft_chain_nat
ip_set_hash_ip         45056  2
ip_set_hash_net        53248  3
ip_set                 57344  3 ip_set_hash_ip,xt_set,ip_set_hash_net
nfnetlink              16384  4 nft_compat,nf_tables,ip_set
binfmt_misc            24576  1
intel_powerclamp       20480  0
nls_ascii              16384  1
coretemp               20480  0
snd_hda_codec_realtek   126976  1
nls_cp437              20480  1
vfat                   20480  1
snd_hda_codec_generic    94208  1 snd_hda_codec_realtek
fat                    86016  1 vfat
ledtrig_audio          16384  2 snd_hda_codec_generic,snd_hda_codec_realtek
snd_hda_codec_hdmi     73728  1
snd_hda_intel          53248  0
snd_intel_dspcfg       24576  1 snd_hda_intel
snd_hda_codec         163840  4
snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec_realtek
evdev                  28672  3
gma500_gfx            221184  1
efi_pstore             16384  0
snd_hda_core          102400  5
snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,snd_hda_codec_realtek
snd_hwdep              16384  1 snd_hda_codec
snd_pcm               131072  4
snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,snd_hda_core
drm_kms_helper        233472  1 gma500_gfx
pcspkr                 16384  0
efivars                20480  1 efi_pstore
snd_timer              40960  1 snd_pcm
iTCO_wdt               16384  0
snd                   106496  8
snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hwdep,snd_hda_intel,snd_hda_codec,snd_hda_codec_realtek,snd_timer,snd_pcm
sg                     36864  0
iTCO_vendor_support    16384  1 iTCO_wdt
soundcore              16384  1 snd
i2c_algo_bit           16384  1 gma500_gfx
watchdog               28672  1 iTCO_wdt
acpi_cpufreq           28672  1
button                 24576  0
tcp_bbr                20480  36
sch_cake               32768  3
nf_conntrack          172032  5
xt_conntrack,nf_nat,xt_state,xt_nat,xt_MASQUERADE
nf_defrag_ipv6         24576  1 nf_conntrack
nf_defrag_ipv4         16384  1 nf_conntrack
loop                   40960  0
drm                   585728  3 drm_kms_helper,gma500_gfx
efivarfs               16384  1
ip_tables              32768  0
x_tables               53248  12
xt_conntrack,nft_compat,xt_multiport,xt_state,xt_tcpudp,xt_nat,xt_set,ipt_REJECT,ip_tables,xt_MASQUERADE,xt_TCPMSS,xt_mark
autofs4                53248  2
ext4                  765952  1
crc16                  16384  1 ext4
mbcache                16384  1 ext4
jbd2                  135168  1 ext4
btrfs                1478656  0
xor                    24576  1 btrfs
zstd_decompress        90112  1 btrfs
zstd_compress         188416  1 btrfs
raid6_pq              122880  1 btrfs
crc32c_generic         16384  2
libcrc32c              16384  3 nf_conntrack,nf_nat,btrfs
sd_mod                 57344  3
ahci                   40960  2
libahci                45056  1 ahci
libata                290816  2 libahci,ahci
e1000e                290816  0
ehci_pci               20480  0
uhci_hcd               53248  0
scsi_mod              253952  3 sd_mod,libata,sg
ehci_hcd               98304  1 ehci_pci
i2c_i801               32768  0
usbcore               315392  3 ehci_pci,ehci_hcd,uhci_hcd
ptp                    20480  1 e1000e
lpc_ich                28672  0
mfd_core               20480  1 lpc_ich
pps_core               24576  1 ptp
usb_common             16384  3 usbcore,ehci_hcd,uhci_hcd
video                  53248  1 gma500_gfx


More information about the WireGuard mailing list