-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
netobserv-1.9
-
None
-
Quality / Stability / Reliability
-
False
-
-
None
-
Moderate
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
When IPsec is enabled and Network Observability enables the "IPSec" eBPF feature, all UDP-encrypted packets are reported as 0 bytes and 0 packets.
Steps to Reproduce:
1. Enable IPsec in OVN-Kubernets. 2. Enable the "IPSec" feature in eBPF Agent when creating the FlowCollector instance. 3. In OCP web console, go to Observe > Network Traffic, Traffic flows table 4. Set filter so "IPSec Status" != n/a. 5. Maximize the browser window or OCP web console, or remove some columns so you can see the "IPSec Status" column (last column).
Actual results:
All UDP-encrypted packets, indicated by the "L3 Layer Protocol" column, will show 0 bytes and 0 packets.
Expected results:
The number of bytes and packets should be greater than 0. eBPF Agent sees the UDP-encapsulated packet, which contains the encyrpted IPsec payload. Therefore, bytes and packets should not be 0.