A host firewall marks packets for policy routing, but rp_filter on the return...

시나리오

Forward policy is correct, yet kernel …

단서

구독하면 이어서 볼 수 있어요

이 문제의 전체 시나리오와 점검 체크리스트, 복구 순서, 모범 풀이는 Pro 구독에서 열립니다.

구독 안내 보기

먼저 볼 것

점검 체크리스트

복구와 재발 방지

같이 보면 좋은 질문

현장에서 본 비슷한 케이스

다음으로 이어서 보기 좋은 문제

Linux Advanced

Policy routing marks the outbound packets correctly while rp_filter still rejects the asymmetric return path during a failover rehearsal

Forwarding is valid in one direction and kernel anti-spoofing defeats the other. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.

18 min

View problem

Linux Advanced

A direct firewall rule survives live reload while the nftables backend reorders chains on restart during a failover rehearsal

The runtime policy looked right and the boot-time chain order changed how packets were really evaluated. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.

18 min

View problem

Linux Advanced

A network bond remains up while carrier checks miss the upstream loss mode that only changed traffic quality during a failover rehearsal

The link never reports down and the service path is still broken in practice. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.

18 min

View problem

Linux Advanced

A bond reports link up while only one member still honors the new VLAN tagging profile and traffic quality becomes asymmetric during a failover rehearsal

The aggregate interface remains healthy by state and not by real forwarding behavior. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.

18 min

View problem

A host firewall marks packets for policy routing, but rp_filter on the return path still drops asymmetric replies after failover

Policy routing marks the outbound packets correctly while rp_filter still rejects the asymmetric return path during a failover rehearsal

A direct firewall rule survives live reload while the nftables backend reorders chains on restart during a failover rehearsal

A network bond remains up while carrier checks miss the upstream loss mode that only changed traffic quality during a failover rehearsal

A bond reports link up while only one member still honors the new VLAN tagging profile and traffic quality becomes asymmetric during a failover rehearsal