18: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN group default qlen 1000
link/ether 52:54:00:a3:5d:70 brd ff:ff:ff:ff:ff:ff
19: br-f1cc82c94312: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:a4:fe:b9:71 brd ff:ff:ff:ff:ff:ff
inet <IP_ADDRESS>/16 brd <IP_ADDRESS> scope global br-f1cc82c94312
valid_lft forever preferred_lft forever
inet6 fe80::42:a4ff:fefe:b971/64 scope link
valid_lft forever preferred_lft forever
20: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:25:e0:a4:12 brd ff:ff:ff:ff:ff:ff
inet <IP_ADDRESS>/16 brd <IP_ADDRESS> scope global docker0
valid_lft forever preferred_lft forever
27932: vethc8151ce@if27931: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-f1cc82c94312 state UP group default
link/ether 8e:95:1b:cd:3e:db brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet6 fe80::8c95:1bff:fecd:3edb/64 scope link
valid_lft forever preferred_lft forever
27934: veth8d1a36f@if27933: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-f1cc82c94312 state UP group default
link/ether 12:c1:ba:9c:56:f7 brd ff:ff:ff:ff:ff:ff link-netnsid 1
inet6 fe80::10c1:baff:fe9c:56f7/64 scope link
valid_lft forever preferred_lft forever
20258: lxc42b55c05e186@if20257: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 66:db:d6:6f:84:fa brd ff:ff:ff:ff:ff:ff link-netnsid 22
inet6 fe80::64db:d6ff:fe6f:84fa/64 scope link
valid_lft forever preferred_lft forever
36: vethe3c71ac@if35: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-f1cc82c94312 state UP group default
link/ether 22:a4:d1:0d:af:2a brd ff:ff:ff:ff:ff:ff link-netnsid 3
inet6 fe80::20a4:d1ff:fe0d:af2a/64 scope link
valid_lft forever preferred_lft forever
19494: lxc2963da96bb11@if19493: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether ee:9e:7f:7c:2a:ae brd ff:ff:ff:ff:ff:ff link-netnsid 15
inet6 fe80::ec9e:7fff:fe7c:2aae/64 scope link
valid_lft forever preferred_lft forever
38: veth3d7d3e5@if37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-f1cc82c94312 state UP group default
link/ether 2e:13:1d:84:f6:0f brd ff:ff:ff:ff:ff:ff link-netnsid 2
inet6 fe80::2c13:1dff:fe84:f60f/64 scope link
valid_lft forever preferred_lft forever
47: cilium_net@cilium_host: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 3e:5a:e0:4f:52:74 brd ff:ff:ff:ff:ff:ff
inet6 fe80::3c5a:e0ff:fe4f:5274/64 scope link
valid_lft forever preferred_lft forever
48: cilium_host@cilium_net: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 52:29:6a:e2:fd:05 brd ff:ff:ff:ff:ff:ff
inet <IP_ADDRESS>/32 scope global cilium_host
valid_lft forever preferred_lft forever
inet6 fd00:1032:0:1::b494/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5029:6aff:fee2:fd05/64 scope link
valid_lft forever preferred_lft forever
50: lxc_health@if49: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether f6:aa:01:6f:e6:98 brd ff:ff:ff:ff:ff:ff link-netnsid 4
inet6 fe80::f4aa:1ff:fe6f:e698/64 scope link
valid_lft forever preferred_lft forever
52: lxc4f60da5b4ed0@if51: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 26:ea:72:74:b3:c1 brd ff:ff:ff:ff:ff:ff link-netnsid 5
inet6 fe80::24ea:72ff:fe74:b3c1/64 scope link
valid_lft forever preferred_lft forever
54: lxcd49a48a7a001@if53: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether ce:60:79:1c:98:ca brd ff:ff:ff:ff:ff:ff link-netnsid 6
inet6 fe80::cc60:79ff:fe1c:98ca/64 scope link
valid_lft forever preferred_lft forever
56: lxc7194c065da1a@if55: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 86:89:11:64:00:00 brd ff:ff:ff:ff:ff:ff link-netnsid 7
inet6 fe80::8489:11ff:fe64:0/64 scope link
valid_lft forever preferred_lft forever
58: lxcaf7c86f701ff@if57: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 4e:03:47:cb:45:15 brd ff:ff:ff:ff:ff:ff link-netnsid 8
inet6 fe80::4c03:47ff:fecb:4515/64 scope link
valid_lft forever preferred_lft forever
60: lxc36a2685d3e2a@if59: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 8a:c9:ec:7a:8c:04 brd ff:ff:ff:ff:ff:ff link-netnsid 9
inet6 fe80::88c9:ecff:fe7a:8c04/64 scope link
valid_lft forever preferred_lft forever
62: lxc58b124cd61a6@if61: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 8a:ea:8c:a8:9d:66 brd ff:ff:ff:ff:ff:ff link-netnsid 10
inet6 fe80::88ea:8cff:fea8:9d66/64 scope link
valid_lft forever preferred_lft forever
64: lxc2a7faa8a59ed@if63: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 16:2e:50:1d:e0:66 brd ff:ff:ff:ff:ff:ff link-netnsid 11
inet6 fe80::142e:50ff:fe1d:e066/64 scope link
valid_lft forever preferred_lft forever
66: lxc37642323953c@if65: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether da:c8:33:e9:3b:7c brd ff:ff:ff:ff:ff:ff link-netnsid 12
inet6 fe80::d8c8:33ff:fee9:3b7c/64 scope link
valid_lft forever preferred_lft forever
68: lxc738b33e6e720@if67: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 2a:c0:ad:58:5c:30 brd ff:ff:ff:ff:ff:ff link-netnsid 13
inet6 fe80::28c0:adff:fe58:5c30/64 scope link
valid_lft forever preferred_lft forever
70: lxce2ab67773d6a@if69: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 2a:91:3c:9b:96:af brd ff:ff:ff:ff:ff:ff link-netnsid 14
inet6 fe80::2891:3cff:fe9b:96af/64 scope link
valid_lft forever preferred_lft forever
19060: lxc9ff78da8a182@if19059: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether ca:c0:26:00:77:e0 brd ff:ff:ff:ff:ff:ff link-netnsid 19
inet6 fe80::c8c0:26ff:fe00:77e0/64 scope link
valid_lft forever preferred_lft forever
19062: lxc44eefdd8bd83@if19061: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether aa:b1:50:69:9f:3f brd ff:ff:ff:ff:ff:ff link-netnsid 20
inet6 fe80::a8b1:50ff:fe69:9f3f/64 scope link
valid_lft forever preferred_lft forever
19064: lxc11d619e05d59@if19063: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 32:d9:d1:60:a3:cd brd ff:ff:ff:ff:ff:ff link-netnsid 21
inet6 fe80::30d9:d1ff:fe60:a3cd/64 scope link
valid_lft forever preferred_lft forever
19942: lxcbd6fc56c24b4@if19941: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether f2:37:b2:08:54:9f brd ff:ff:ff:ff:ff:ff link-netnsid 16
inet6 fe80::f037:b2ff:fe08:549f/64 scope link
valid_lft forever preferred_lft forever
19944: lxcd65c2a82d1e4@if19943: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether b6:1e:92:9f:d8:81 brd ff:ff:ff:ff:ff:ff link-netnsid 17
inet6 fe80::b41e:92ff:fe9f:d881/64 scope link
valid_lft forever preferred_lft forever
19946: lxc30e5b1cee159@if19945: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether fe:b0:c1:50:cb:99 brd ff:ff:ff:ff:ff:ff link-netnsid 18
inet6 fe80::fcb0:c1ff:fe50:cb99/64 scope link
valid_lft forever preferred_lft forever
[root@CNCP-MS-03 ~]# ip r
default via <IP_ADDRESS> dev ens3
<IP_ADDRESS>/24 via <IP_ADDRESS> dev ens3 proto kernel
<IP_ADDRESS>/24 via <IP_ADDRESS> dev cilium_host proto kernel src <IP_ADDRESS>
<IP_ADDRESS> dev cilium_host proto kernel scope link
<IP_ADDRESS>/24 via <IP_ADDRESS> dev ens3 proto kernel
<IP_ADDRESS>/16 dev ens5 scope link metric 1002
<IP_ADDRESS>/16 dev ens3 scope link metric 1006
<IP_ADDRESS>/16 dev bond0 scope link metric 1010
<IP_ADDRESS>/16 dev bond0.3901 scope link metric 1011
<IP_ADDRESS>/16 dev bond0.3902 scope link metric 1012
<IP_ADDRESS>/16 dev bond0.3911 scope link metric 1013
<IP_ADDRESS>/16 dev bond0.3912 scope link metric 1014
<IP_ADDRESS>/16 dev bond0.3913 scope link metric 1015
<IP_ADDRESS>/16 dev bond0.3914 scope link metric 1016
<IP_ADDRESS>/24 dev ens3 proto kernel scope link src <IP_ADDRESS>
<IP_ADDRESS>/16 dev docker0 proto kernel scope link src <IP_ADDRESS> linkdown
<IP_ADDRESS>/16 dev br-f1cc82c94312 proto kernel scope link src <IP_ADDRESS>
<IP_ADDRESS>/24 dev virbr0 proto kernel scope link src <IP_ADDRESS> linkdown
[root@CNCP-MS-03 ~]# ip neigh
<IP_ADDRESS> dev br-f1cc82c94312 lladdr 02:42:ac:12:00:08 REACHABLE
<IP_ADDRESS> dev ens3 lladdr 5c:a7:21:3f:42:e6 REACHABLE
<IP_ADDRESS> dev ens3 lladdr 5c:a7:21:3f:41:a2 REACHABLE
<IP_ADDRESS> dev br-f1cc82c94312 lladdr 02:42:ac:12:00:03 REACHABLE
<IP_ADDRESS> dev ens3 lladdr 70:c6:dd:79:a7:96 REACHABLE
<IP_ADDRESS> dev br-f1cc82c94312 lladdr 02:42:ac:12:00:07 STALE
<IP_ADDRESS> dev ens3 lladdr bc:22:47:02:ff:ca STALE
<IP_ADDRESS> dev br-f1cc82c94312 lladdr 02:42:ac:12:00:02 STALE
<IP_ADDRESS> dev ens3 lladdr 5c:a7:21:3f:41:a2 REACHABLE
<IP_ADDRESS> dev ens3 lladdr 5c:a7:21:3f:43:2e STALE
fe80::d7:f1ff:fe00:0 dev ens3 lladdr 02:d7:f1:00:00:00 STALE
fe80::22ce:2aff:fe72:6e04 dev ens3 lladdr 20:ce:2a:72:6e:04 STALE
fe80::5ea7:21ff:fe3f:41a2 dev ens3 lladdr 5c:a7:21:3f:41:a2 router STALE
fe80::22ce:2aff:fe71:e388 dev ens3 lladdr 20:ce:2a:71:e3:88 STALE
fe80::4211:75ff:fe80:5aaf dev ens3 lladdr 40:11:75:80:5a:af STALE
fe80::5ea7:21ff:fe3f:42e6 dev ens3 lladdr 5c:a7:21:3f:42:e6 router DELAY
fe80::22ce:2aff:fe71:de79 dev ens3 lladdr 20:ce:2a:71:de:79 STALE
fe80::44c7:45ff:fe25:650f dev ens3 lladdr 46:c7:45:25:65:0f STALE
fe80::22ce:2aff:fe71:e1d1 dev ens3 lladdr 20:ce:2a:71:e1:d1 STALE
fe80::22ce:2aff:fe71:e389 dev ens3 lladdr 20:ce:2a:71:e3:89 STALE
fe80::22ce:2aff:fe71:dea1 dev ens3 lladdr 20:ce:2a:71:de:a1 STALE
2408:8631:c02:ffa2::4002 dev ens3 lladdr 5c:a7:21:3f:42:e6 router REACHABLE
fe80::4211:75ff:fe80:5aac dev ens3 lladdr 40:11:75:80:5a:ac STALE
fe80::22ce:2aff:fe71:e2bf dev ens3 lladdr 20:ce:2a:71:e2:bf STALE
fe80::22ce:2aff:fe72:64de dev ens3 lladdr 20:ce:2a:72:64:de STALE
fe80::21e:8ff:fe33:8d3d dev ens3 lladdr 00:1e:08:33:8d:3d STALE
fe80::22ce:2aff:fe72:64ae dev ens3 lladdr 20:ce:2a:72:64:ae STALE
fe80::22ce:2aff:fe72:63ae dev ens3 lladdr 20:ce:2a:72:63:ae STALE
fe80::72c6:ddff:fe79:a7df dev bond0.3911 lladdr 70:c6:dd:79:a7:df router STALE
fe80::d0bd:1cff:fe6b:99a8 dev ens3 lladdr d2:bd:1c:6b:99:a8 STALE
2408:8631:c02:ffa2::1 dev ens3 lladdr 70:c6:dd:79:a7:96 router STALE
fe80::b83a:b7ff:fe18:2ab9 dev ens3 lladdr ba:3a:b7:18:2a:b9 STALE
fe80::5c45:2eff:fe51:136b dev ens3 lladdr 5e:45:2e:51:13:6b STALE
fe80::5427:6aff:fe45:309e dev ens3 lladdr 56:27:6a:45:30:9e STALE
2408:8631:c02:ffa2::b dev ens3 lladdr 5c:a7:21:3f:41:a2 router REACHABLE
fe80::56f8:7361:fa75:5a3a dev bond0.3901 lladdr 00:0c:29:3d:6d:cc STALE
fe80::72c6:ddff:fe79:a796 dev ens3 lladdr 70:c6:dd:79:a7:96 router STALE
fe80::4211:75ff:fe80:5aae dev ens3 lladdr 40:11:75:80:5a:ae STALE
fe80::22ce:2aff:fe71:e2c1 dev ens3 lladdr 20:ce:2a:71:e2:c1 STALE
fe80::8010:71ff:fe2e:6ac dev bond0.3912 lladdr 82:10:71:2e:06:ac STALE
fe80::e8bf:8bff:fe0a:d6d6 dev ens3 lladdr ea:bf:8b:0a:d6:d6 STALE
fe80::4211:75ff:fe80:6de7 dev ens3 lladdr 40:11:75:80:6d:e7 STALE

hi @glazychev-art
I feel that there may be a conflict between cilium and nsm, causing nsm to not be able to support functions. What do you think?

kubectl exec -it -n nsm-system ${FORWARDER_NSC} vppctl

hi @glazychev-art
kubectl exec -it -n nsm-system ${FORWARDER_NSC} vppctl
vpp# show int
Name               Idx    State  MTU (L3/IP4/IP6/MPLS)     Counter          Count
host-eth0                         1      up     1500/1500/1500/1500 rx packets                   286
rx bytes                   65041
tx packets                    97
tx bytes                    4074
drops                        286
ip4                           84
ip6                           12
local0                            0     down          0/0/0/0
tap0                              3      up     1446/1446/1446/1446 rx packets                    96
rx bytes                    4436
drops                         96
vxlan_tunnel0                     2      up     1446/1446/1446/1446 tx packets                    96
tx bytes                    7892
vpp# show int addr
host-eth0 (up):
L3 <IP_ADDRESS>/32
local0 (dn):
tap0 (up):
L2 xconnect vxlan_tunnel0
vxlan_tunnel0 (up):
L2 xconnect tap0
vpp# show hardware-interface
Name                Idx   Link  Hardware
host-eth0                          1     up   host-eth0
Link speed: unknown
RX Queues:
queue thread         mode
0     main (0)       interrupt
TX Queues:
TX Hash: [name: hash-eth-l34 priority: 50 description: Hash ethernet L34 headers]
queue shared thread(s)
0     no     0
Ethernet address f2:f5:36:5f:9d:64
Linux PACKET socket interface v2
FEATURES:
RX Queue 0:
block size:10485760 nr:1  frame size:10240 nr:1024 next frame:350
TX Queue 0:
block size:10485760 nr:1  frame size:10240 nr:1024 next frame:145
available:1024 request:0 sending:0 wrong:0 total:1024
local0                             0    down  local0
Link speed: unknown
local
tap0                               3     up   tap0
Link speed: unknown
RX Queues:
queue thread         mode
0     main (0)       adaptive
TX Queues:
TX Hash: [name: hash-eth-l34 priority: 50 description: Hash ethernet L34 headers]
queue shared thread(s)
0     no     0
Ethernet address 02:fe:bd:23:6b:4d
VIRTIO interface
instance 0
RX QUEUE : Total Packets
0 : 144
TX QUEUE : Total Packets
0 : 0
vxlan_tunnel0                      2     up   vxlan_tunnel0
Link speed: unknown
Ethernet address 02:fe:59:44:8f:ad
vpp# show errors
Count                  Node                              Reason               Severity
161            vxlan4-encap                good packets encapsulated        error
113        acl-plugin-in-ip4-fa                 ACL deny packets            error
113        acl-plugin-in-ip4-fa                 checked packets             error
162             arp-reply             IP4 source address not local to sub   error
1             arp-reply             IP4 source address matches local in   error
2              ip4-arp                     ARP requests throttled         info
159              ip4-arp                       ARP requests sent            info
161             l2-output                      L2 output packets            error
161              l2-input                       L2 input packets            error
12           ethernet-input                        no error                error
124           ethernet-input                    l3 mac mismatch             error
vpp# show acl-plugin acl
acl-index 0 count 4 tag {nsm-vppinit-denyall-ingress}
0: ipv6 permit src ::/0 dst ::/0 proto 58 sport 134 dport 0
1: ipv6 permit src ::/0 dst ::/0 proto 58 sport 136 dport 0
2: ipv4 deny src <IP_ADDRESS>/0 dst <IP_ADDRESS>/0 proto 0 sport 0 dport 0
3: ipv6 deny src ::/0 dst ::/0 proto 0 sport 0 dport 0
applied inbound on sw_if_index: 1
applied outbound on sw_if_index:
used in lookup context index: 1
acl-index 1 count 4 tag {nsm-vppinit-denyall-egress}
0: ipv6 permit src ::/0 dst ::/0 proto 58 sport 133 dport 0
1: ipv6 permit src ::/0 dst ::/0 proto 58 sport 135 dport 0
2: ipv4 deny src <IP_ADDRESS>/0 dst <IP_ADDRESS>/0 proto 0 sport 0 dport 0
3: ipv6 deny src ::/0 dst ::/0 proto 0 sport 0 dport 0
applied inbound on sw_if_index:
applied outbound on sw_if_index: 1
used in lookup context index: 0
acl-index 2 count 1 tag {nsm-pinhole port 4789}
0: ipv4 permit src <IP_ADDRESS>/0 dst <IP_ADDRESS>/32 proto 17 sport 0-65535 dport 4789
applied inbound on sw_if_index: 1
applied outbound on sw_if_index:
used in lookup context index: 1
acl-index 3 count 1 tag {nsm-pinhole port 4789}
0: ipv4 permit src <IP_ADDRESS>/32 dst <IP_ADDRESS>/0 proto 17 sport 0-65535 dport 4789
applied outbound on sw_if_index: 1
used in lookup context index: 0

hi @glazychev-art
kubectl exec -it -n nsm-system ${FORWARDER_NSC} vppctl trace add af-packet-input 1000
sleep 20 # wait a few seconds here
kubectl exec -it -n nsm-system ${FORWARDER_NSC} vppctl show trace max 1000 > ${FORWARDER_NSC}_trace.log
[
forwarder-vpp-tm64s_trace.log
](url)

hi @glazychev-art
kubectl exec -it -n nsm-system ${FORWARDER_NSE} vppctl
vpp# show int
Name               Idx    State  MTU (L3/IP4/IP6/MPLS)     Counter          Count
host-eth0                         1      up     1500/1500/1500/1500 rx packets                    24
rx bytes                    1344
tx packets                    13
tx bytes                     546
drops                         24
ip6                           12
local0                            0     down          0/0/0/0
tap0                              2      up     1446/1446/1446/1446 rx packets                    12
rx bytes                     936
drops                         12
ip6                            1
vxlan_tunnel0                     3      up     1446/1446/1446/1446 tx packets                    11
tx bytes                    1242
vpp# show int addr
host-eth0 (up):
L3 <IP_ADDRESS>/32
local0 (dn):
tap0 (up):
L2 xconnect vxlan_tunnel0
vxlan_tunnel0 (up):
L2 xconnect tap0
vpp# show hardware-interface
Name                Idx   Link  Hardware
host-eth0                          1     up   host-eth0
Link speed: unknown
RX Queues:
queue thread         mode
0     main (0)       interrupt
TX Queues:
TX Hash: [name: hash-eth-l34 priority: 50 description: Hash ethernet L34 headers]
queue shared thread(s)
0     no     0
Ethernet address 26:70:a5:2c:c9:f8
Linux PACKET socket interface v2
FEATURES:
RX Queue 0:
block size:10485760 nr:1  frame size:10240 nr:1024 next frame:25
TX Queue 0:
block size:10485760 nr:1  frame size:10240 nr:1024 next frame:14
available:1024 request:0 sending:0 wrong:0 total:1024
local0                             0    down  local0
Link speed: unknown
local
tap0                               2     up   tap0
Link speed: unknown
RX Queues:
queue thread         mode
0     main (0)       adaptive
TX Queues:
TX Hash: [name: hash-eth-l34 priority: 50 description: Hash ethernet L34 headers]
queue shared thread(s)
0     no     0
Ethernet address 02:fe:1b:92:c8:6c
VIRTIO interface
instance 0
RX QUEUE : Total Packets
0 : 13
TX QUEUE : Total Packets
0 : 0
vxlan_tunnel0                      3     up   vxlan_tunnel0
Link speed: unknown
Ethernet address 02:fe:bc:77:b8:7b
vpp# show errors
Count                  Node                              Reason               Severity
1             null-node                      blackholed packets           error
12            vxlan4-encap                good packets encapsulated        error
13             arp-reply             IP4 source address not local to sub   error
1              ip4-arp                     ARP requests throttled         info
11              ip4-arp                       ARP requests sent            info
12             l2-output                      L2 output packets            error
12              l2-input                       L2 input packets            error
12           ethernet-input                        no error                error
vpp# show acl-plugin acl
acl-index 0 count 4 tag {nsm-vppinit-denyall-ingress}
0: ipv6 permit src ::/0 dst ::/0 proto 58 sport 134 dport 0
1: ipv6 permit src ::/0 dst ::/0 proto 58 sport 136 dport 0
2: ipv4 deny src <IP_ADDRESS>/0 dst <IP_ADDRESS>/0 proto 0 sport 0 dport 0
3: ipv6 deny src ::/0 dst ::/0 proto 0 sport 0 dport 0
applied inbound on sw_if_index: 1
applied outbound on sw_if_index:
used in lookup context index: 1
acl-index 1 count 4 tag {nsm-vppinit-denyall-egress}
0: ipv6 permit src ::/0 dst ::/0 proto 58 sport 133 dport 0
1: ipv6 permit src ::/0 dst ::/0 proto 58 sport 135 dport 0
2: ipv4 deny src <IP_ADDRESS>/0 dst <IP_ADDRESS>/0 proto 0 sport 0 dport 0
3: ipv6 deny src ::/0 dst ::/0 proto 0 sport 0 dport 0
applied inbound on sw_if_index:
applied outbound on sw_if_index: 1
used in lookup context index: 0
acl-index 2 count 1 tag {nsm-pinhole port 4789}
0: ipv4 permit src <IP_ADDRESS>/0 dst <IP_ADDRESS>/32 proto 17 sport 0-65535 dport 4789
applied inbound on sw_if_index: 1
applied outbound on sw_if_index:
used in lookup context index: 1
acl-index 3 count 1 tag {nsm-pinhole port 4789}
0: ipv4 permit src <IP_ADDRESS>/32 dst <IP_ADDRESS>/0 proto 17 sport 0-65535 dport 4789
applied outbound on sw_if_index: 1
used in lookup context index: 0

hi @glazychev-art
kubectl exec -it -n nsm-system ${FORWARDER_NSE} vppctl trace add af-packet-input 1000
sleep 20 # wait a few seconds here
kubectl exec -it -n nsm-system ${FORWARDER_NSE} vppctl show trace max 1000 > ${FORWARDER_NSE}_trace.log
forwarder-vpp-nr7qr_trace.log

hi @glazychev-art
If you feel that the vpp-forward information above is lacking, you can see this attachment.
forwarder-vpp-tm64s_trace.log
forwarder-vpp-nr7qr_trace.log

Hi @316953425 ,
Thank you very much, this is very useful information!

I feel that there may be a conflict between cilium and nsm, causing nsm to not be able to support functions. What do you think?

You are right. More specifically, I think that VPP doesn't work with the cilium setup. I found a workaround locally, but there is one more thing:
Still unclear why the forwarder doesn't work if hostNetwork: true is set?
If you don't mind, could you please repeat these steps, but without point 3?
I slightly modified the instructions, added more VPP commands, and also indicated that ping should be started with the -i flag
Thanks! You really help a lot!

9.  Whether it is Kernel2IP2Kernel or Kernel2Ethernet2Kernel, I can ping it, but the pod is always in PodInitializing.
Kernel2IP2Kernel:

Could you please share
kubectl describe pod -n ns-kernel2ethernet2kernel alpine

kubectl describe pod -n ns-kernel2ethernet2kernel alpine

thanks
apl.txt
use the artgl/cmd-forwarder-vpp:cilium_test image

kubectl describe pod -n ns-kernel2ethernet2kernel alpine

thanks apl.txt
use the artgl/cmd-forwarder-vpp:cilium_test image

As far as I can see, the pod now has a Running state.
It took some time to download the image ghcr.io/networkservicemesh/cmd-nsc:v1.11.1

@316953425
But I think we haven't solved all the problems yet.
Previously, we tried to use nс for alpine pods:
https://github.com/networkservicemesh/deployments-k8s/issues/10581#issuecomment-1827211733
https://github.com/networkservicemesh/deployments-k8s/issues/10581#issuecomment-1827282829
Can we do the same thing, but on nodes?
You can either go directly to the nodes (if possible), or deploy alpine pods on different nodes with hostNetwork: true and do nc

hi @glazychev-art
see this for alpine always in PodInitializing
kubectl describe pod -n ns-kernel2ip2kernel alpine
Name:         alpine
Namespace:    ns-kernel2ip2kernel
Priority:     0
Node:         cncp-ms-03/<IP_ADDRESS>
Start Time:   Wed, 29 Nov 2023 15:47:38 +0800
Labels:       app=alpine
              spiffe.io/spiffe-id=true
Annotations:  k8s.v1.cni.cncf.io/network-status:
                [{
                    "name": "cilium",
                    "interface": "eth0",
                    "ips": [
                        "fd00:1032:0:1::ac1b",
                        "<IP_ADDRESS>"
                    ],
                    "mac": "de:8a:52:8a:47:82",
                    "default": true,
                    "dns": {},
                    "gateway": [
                        "fd00:1032:0:1::b494",
                        "<IP_ADDRESS>"
                    ]
                }]
              networkservicemesh.io: kernel://kernel2ip2kernel/nsm-1
Status:       Pending
IP:           <IP_ADDRESS>
IPs:
  IP:  <IP_ADDRESS>
  IP:  fd00:1032:0:1::ac1b
Init Containers:
  cmd-nsc-init:
    Container ID:   docker://ac85aae24e1084d1d00c5e1d0ec514a3fc8a35484d9b2c68be68486f7c54ec18
    Image:          ghcr.io/networkservicemesh/cmd-nsc-init:v1.11.1
    Image ID:       docker-pullable://ghcr.io/networkservicemesh/cmd-nsc-init@sha256:ab1d77fa389b0d39ba781c1acedfba141e4cdc1a72d959910056a35d682f5427
    Port:           <none>
    Host Port:      <none>
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Wed, 29 Nov 2023 15:47:40 +0800
      Finished:     Wed, 29 Nov 2023 15:47:49 +0800
    Ready:          True
    Restart Count:  0
    Limits:
      cpu:     200m
      memory:  80Mi
    Requests:
      cpu:     100m
      memory:  40Mi
    Environment:
      NSM_LOG_LEVEL:           INFO
      SPIFFE_ENDPOINT_SOCKET:  unix:///run/spire/sockets/agent.sock
      POD_NAME:                alpine (v1:metadata.name)
      NSM_NETWORK_SERVICES:    kernel://kernel2ip2kernel/nsm-1
      NSM_NAME:                $(POD_NAME)-4b24758c-d8e6-4fd2-b25a-cd175e41c082
    Mounts:
      /run/spire/sockets from spire-agent-socket (ro)
      /var/lib/networkservicemesh from nsm-socket (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-2hv7h (ro)
Containers:
  alpine:
    Container ID:
    Image:         alpine:3.15.0
    Image ID:
    Port:          <none>
    Host Port:     <none>
    Command:
      /bin/sh
      -c
      trap : TERM INT; sleep infinity & wait
    State:          Waiting
      Reason:       PodInitializing
    Ready:          False
    Restart Count:  0
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-2hv7h (ro)
  cmd-nsc:
    Container ID:
    Image:          ghcr.io/networkservicemesh/cmd-nsc:v1.11.1
    Image ID:
    Port:           <none>
    Host Port:      <none>
    State:          Waiting
      Reason:       PodInitializing
    Ready:          False
    Restart Count:  0
    Limits:
      cpu:     200m
      memory:  80Mi
    Requests:
      cpu:     100m
      memory:  40Mi
    Environment:
      NSM_LOG_LEVEL:           INFO
      SPIFFE_ENDPOINT_SOCKET:  unix:///run/spire/sockets/agent.sock
      POD_NAME:                alpine (v1:metadata.name)
      NSM_NETWORK_SERVICES:    kernel://kernel2ip2kernel/nsm-1
      NSM_NAME:                $(POD_NAME)-4b24758c-d8e6-4fd2-b25a-cd175e41c082
    Mounts:
      /run/spire/sockets from spire-agent-socket (ro)
      /var/lib/networkservicemesh from nsm-socket (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-2hv7h (ro)
Conditions:
  Type              Status
  Initialized       True
  Ready             False
  ContainersReady   False
  PodScheduled      True
Volumes:
  kube-api-access-2hv7h:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
  spire-agent-socket:
    Type:          HostPath (bare host directory volume)
    Path:          /run/spire/sockets
    HostPathType:  Directory
  nsm-socket:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/networkservicemesh
    HostPathType:  Directory
QoS Class:         Burstable
Node-Selectors:    <none>
Tolerations:       node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                   node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type    Reason          Age   From               Message
  ----    ------          ----  ----               -------
  Normal  Scheduled       67s   default-scheduler  Successfully assigned ns-kernel2ip2kernel/alpine to cncp-ms-03
  Normal  AddedInterface  66s   multus             Add eth0 [fd00:1032:0:1::ac1b/128 <IP_ADDRESS>/32] from cilium
  Normal  Pulled          66s   kubelet            Container image "ghcr.io/networkservicemesh/cmd-nsc-init:v1.11.1" already present on machine
  Normal  Created         65s   kubelet            Created container cmd-nsc-init
  Normal  Started         65s   kubelet            Started container cmd-nsc-init
  Normal  Pulled          55s   kubelet            Container image "alpine:3.15.0" already present on machine
  Normal  Created         55s   kubelet            Created container alpine
  Normal  Started         55s   kubelet            Started container alpine
  Normal  Pulling         55s   kubelet            Pulling image "ghcr.io/networkservicemesh/cmd-nsc:v1.11.1"

kubectl describe pod -n ns-kernel2ethernet2kernel alpine
Name:         alpine
Namespace:    ns-kernel2ethernet2kernel
Priority:     0
Node:         cncp-ms-03/<IP_ADDRESS>
Start Time:   Wed, 29 Nov 2023 15:51:26 +0800
Labels:       app=alpine
              spiffe.io/spiffe-id=true
Annotations:  k8s.v1.cni.cncf.io/network-status:
                [{
                    "name": "cilium",
                    "interface": "eth0",
                    "ips": [
                        "fd00:1032:0:1::4dae",
                        "<IP_ADDRESS>"
                    ],
                    "mac": "d2:af:f5:c2:3d:2d",
                    "default": true,
                    "dns": {},
                    "gateway": [
                        "fd00:1032:0:1::b494",
                        "<IP_ADDRESS>"
                    ]
                }]
              networkservicemesh.io: kernel://kernel2ethernet2kernel/nsm-1
Status:       Pending
IP:           <IP_ADDRESS>
IPs:
  IP:  <IP_ADDRESS>
  IP:  fd00:1032:0:1::4dae
Init Containers:
  cmd-nsc-init:
    Container ID:   docker://83aad383e15915fc64cd4e113c7ec021d08df014623574b367b427f9ce497698
    Image:          ghcr.io/networkservicemesh/cmd-nsc-init:v1.11.1
    Image ID:       docker-pullable://ghcr.io/networkservicemesh/cmd-nsc-init@sha256:ab1d77fa389b0d39ba781c1acedfba141e4cdc1a72d959910056a35d682f5427
    Port:           <none>
    Host Port:      <none>
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Wed, 29 Nov 2023 15:51:28 +0800
      Finished:     Wed, 29 Nov 2023 15:51:36 +0800
    Ready:          True
    Restart Count:  0
    Limits:
      cpu:     200m
      memory:  80Mi
    Requests:
      cpu:     100m
      memory:  40Mi
    Environment:
      NSM_LOG_LEVEL:           INFO
      SPIFFE_ENDPOINT_SOCKET:  unix:///run/spire/sockets/agent.sock
      POD_NAME:                alpine (v1:metadata.name)
      NSM_NETWORK_SERVICES:    kernel://kernel2ethernet2kernel/nsm-1
      NSM_NAME:                $(POD_NAME)-f58167f0-fbc9-4673-b2be-41815d911c22
    Mounts:
      /run/spire/sockets from spire-agent-socket (ro)
      /var/lib/networkservicemesh from nsm-socket (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-gdbgh (ro)
Containers:
  alpine:
    Container ID:
    Image:         alpine:3.15.0
    Image ID:
    Port:          <none>
    Host Port:     <none>
    Command:
      /bin/sh
      -c
      trap : TERM INT; sleep infinity & wait
    State:          Waiting
      Reason:       PodInitializing
    Ready:          False
    Restart Count:  0
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-gdbgh (ro)
  cmd-nsc:
    Container ID:
    Image:          ghcr.io/networkservicemesh/cmd-nsc:v1.11.1
    Image ID:
    Port:           <none>
    Host Port:      <none>
    State:          Waiting
      Reason:       PodInitializing
    Ready:          False
    Restart Count:  0
    Limits:
      cpu:     200m
      memory:  80Mi
    Requests:
      cpu:     100m
      memory:  40Mi
    Environment:
      NSM_LOG_LEVEL:           INFO
      SPIFFE_ENDPOINT_SOCKET:  unix:///run/spire/sockets/agent.sock
      POD_NAME:                alpine (v1:metadata.name)
      NSM_NETWORK_SERVICES:    kernel://kernel2ethernet2kernel/nsm-1
      NSM_NAME:                $(POD_NAME)-f58167f0-fbc9-4673-b2be-41815d911c22
    Mounts:
      /run/spire/sockets from spire-agent-socket (ro)
      /var/lib/networkservicemesh from nsm-socket (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-gdbgh (ro)
Conditions:
  Type              Status
  Initialized       True
  Ready             False
  ContainersReady   False
  PodScheduled      True
Volumes:
  kube-api-access-gdbgh:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
  spire-agent-socket:
    Type:          HostPath (bare host directory volume)
    Path:          /run/spire/sockets
    HostPathType:  Directory
  nsm-socket:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/networkservicemesh
    HostPathType:  Directory
QoS Class:         Burstable
Node-Selectors:    <none>
Tolerations:       node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                   node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type    Reason          Age   From               Message
  ----    ------          ----  ----               -------
  Normal  Scheduled       49s   default-scheduler  Successfully assigned ns-kernel2ethernet2kernel/alpine to cncp-ms-03
  Normal  AddedInterface  48s   multus             Add eth0 [fd00:1032:0:1::4dae/128 <IP_ADDRESS>/32] from cilium
  Normal  Pulled          48s   kubelet            Container image "ghcr.io/networkservicemesh/cmd-nsc-init:v1.11.1" already present on machine
  Normal  Created         47s   kubelet            Created container cmd-nsc-init
  Normal  Started         47s   kubelet            Started container cmd-nsc-init
  Normal  Pulled          38s   kubelet            Container image "alpine:3.15.0" already present on machine
  Normal  Created         38s   kubelet            Created container alpine
  Normal  Started         37s   kubelet            Started container alpine
  Normal  Pulling         37s   kubelet            Pulling image "ghcr.io/networkservicemesh/cmd-nsc:v1.11.1"

Can we do the same thing, but on nodes?
You can either go directly to the nodes (if possible), or deploy alpine pods on different nodes with hostNetwork: true and do nc

hi @glazychev-art
I understand what you mean：
1、deploy nsm with hostNetwork: true
2、In one node exec : nc -l -u -p 51820
3、In another node exec ：nc -u  51820 and, and send messages
Am I understanding correctly?

As far as I can see, the pod now has a Running state. It took some time to download the image ghcr.io/networkservicemesh/cmd-nsc:v1.11.1

hi @glazychev-art
After a long time ,alpine automatically changed to running, I didn’t do anything
I think this time is a bit long, maybe there are some problems

<IP_ADDRESS> is the node ip
Am I understanding correctly?

Yes, you are.
This looks very strange.
Question: does Kernel2IP2Kernel work with the image artgl/cmd-forwarder-vpp:cilium_test and hostNetwork: true for forwarder?

After a long time ,alpine automatically changed to running, I didn’t do anything
I think this time is a bit long, maybe there are some problems

There is no problem here, downloading the docker image may take some time

<IP_ADDRESS> is the node ip
Am I understanding correctly?

Yes, you are. This looks very strange. Question: does Kernel2IP2Kernel work with the image artgl/cmd-forwarder-vpp:cilium_test and hostNetwork: true for forwarder?

After a long time ,alpine automatically changed to running, I didn’t do anything
I think this time is a bit long, maybe there are some problems

There is no problem here, downloading the docker image may take some time

hi @glazychev-art
Kernel2IP2Kernel work with the image artgl/cmd-forwarder-vpp:cilium_test
but remove hostNetwork: true for forwarder
If with hostNetwork: true  for forwarder
spire agent and server can not start

If with hostNetwork: true for forwarder
spire agent and server can not start

This shouldn't happen I think.
Could you try to redeploy everything (including spire), but wait until spire-agents and spire-server are ready before NSM deploying

If with hostNetwork: true for forwarder
spire agent and server can not start

This shouldn't happen I think. Could you try to redeploy everything (including spire), but wait until spire-agents and spire-server are ready before NSM deploying

hi @glazychev-art
with the image artgl/cmd-forwarder-vpp:cilium_test
with hostNetwork: true
deploy spire
delploy nsm
delploy kernel2ethernet2kernel
is right?

hi @glazychev-art
with the image artgl/cmd-forwarder-vpp:cilium_test
not with hostNetwork: true
deploy spire
delploy nsm
delploy kernel2ethernet2kernel

spire agent and server work well

Try just deploying spire. Don't deploy NSM yet.
Wait until spire is Running

Try just deploying spire. Don't deploy NSM yet. Wait until spire is Running

hi @glazychev-art
my env already deploy spire nsm and kernel2ethernet2kernel
current forward.yam is :
with the image artgl/cmd-forwarder-vpp:cilium_test
not with hostNetwork: true
I'm a little unsure
Do you mean to directly redeploy spire? No need to redeploy nsm and kernel2ethernet2kernel.

Does forward.yaml need to use cmd-forwarder-vpp:cilium_test and hostNetwork: true?
thanks

Please delete:

kernel2ethernet2kernel
NSM
spire

Redeploy spire again and wait Running state for agents and server
hi @glazychev-art
with the image artgl/cmd-forwarder-vpp:cilium_test
with hostNetwork: true

???

At the moment it doesn't matter to us

with the image artgl/cmd-forwarder-vpp:cilium_test
with hostNetwork: true

because we haven't deployed NSM yet. It's right?
Could you please share
kubectl describe ds -n spire

kubectl describe ds -n spire
hi @glazychev-art

[root@CNCP-MS-01 deployments-k8s-release-v1.11.1]# kubectl describe ds -n spire
Name:           spire-agent
Selector:       app=spire-agent
Node-Selector:  <none>
Labels:         app=spire-agent
Annotations:    deprecated.daemonset.template.generation: 1
Desired Number of Nodes Scheduled: 3
Current Number of Nodes Scheduled: 3
Number of Nodes Scheduled with Up-to-date Pods: 3
Number of Nodes Scheduled with Available Pods: 3
Number of Nodes Misscheduled: 0
Pods Status:  3 Running / 0 Waiting / 0 Succeeded / 0 Failed
Pod Template:
  Labels:           app=spire-agent
  Service Account:  spire-agent
  Init Containers:
   init:
    Image:      gcr.io/spiffe-io/wait-for-it
    Port:       <none>
    Host Port:  <none>
    Args:
      -t
      30
      spire-server:8081
    Environment:  <none>
    Mounts:       <none>
   init-bundle:
    Image:      gcr.io/spiffe-io/wait-for-it
    Port:       <none>
    Host Port:  <none>
    Command:
      sh
      -c
      t=0; until [ -f /run/spire/bundle/bundle.crt 2>&1 ] || [ $t -eq 60 ]; do t=`expr $t + 1`; sleep 1; done
    Environment:  <none>
    Mounts:
      /run/spire/bundle from spire-bundle (rw)
  Containers:
   spire-agent:
    Image:      ghcr.io/spiffe/spire-agent:1.6.1
    Port:       <none>
    Host Port:  <none>
    Args:
      -config
      /run/spire/config/agent.conf
    Liveness:     exec [/opt/spire/bin/spire-agent healthcheck -socketPath /run/spire/sockets/agent.sock] delay=15s timeout=3s period=60s #success=1 #failure=2
    Readiness:    exec [/opt/spire/bin/spire-agent healthcheck -socketPath /run/spire/sockets/agent.sock --shallow] delay=5s timeout=1s period=5s #success=1 #failure=3
    Environment:  <none>
    Mounts:
      /run/spire/bundle from spire-bundle (rw)
      /run/spire/config from spire-config (ro)
      /run/spire/sockets from spire-agent-socket (rw)
      /var/run/secrets/tokens from spire-token (rw)
  Volumes:
   spire-config:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      spire-agent
    Optional:  false
   spire-bundle:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      spire-bundle
    Optional:  false
   spire-agent-socket:
    Type:          HostPath (bare host directory volume)
    Path:          /run/spire/sockets
    HostPathType:  DirectoryOrCreate
   spire-token:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  7200
Events:
  Type    Reason            Age    From                  Message
  ----    ------            ----   ----                  -------
  Normal  SuccessfulCreate  4m40s  daemonset-controller  Created pod: spire-agent-6cwrq
  Normal  SuccessfulCreate  4m39s  daemonset-controller  Created pod: spire-agent-hf6lv
  Normal  SuccessfulCreate  4m39s  daemonset-controller  Created pod: spire-agent-84rx8

Thanks!
Please don't forget for spire kubectl apply -f https://raw.githubusercontent.com/networkservicemesh/deployments-k8s/v1.11.1/examples/spire/single_cluster/clusterspiffeid-template.yaml
Now, please deploy NSM
with the image artgl/cmd-forwarder-vpp:cilium_test and hostNetwork: true
Is spire still Running?

because we haven't deployed NSM yet. It's right?

hi @glazychev-art
yes spire is running
with the image artgl/cmd-forwarder-vpp:cilium_test and hostNetwork: true
deploy NSM done

Ok, cool
Please, deploy Kernel2Ethernet2Kernel

Ok, cool Please, deploy Kernel2Ethernet2Kernel

hi @glazychev-art
done

Is ping working between NSC and NSE now?

Okay, got it, thank you very much!
This is strange to me.
In that case, it would be great if you could share your environment.
Can I somehow make the same cluster as yours?

Okay, got it, thank you very much! This is strange to me.
In that case, it would be great if you could share your environment. Can I somehow create the same cluster as yours?

hi @glazychev-art
I think if you are in need, I can try my best to help you, as long as I know how to deal with it

No, I mean k8s-cluster.
You sent me a cilium CNI config.
Which k8s provider are you using? For example, AWS, AKS, GKE?

No, I mean k8s-cluster. You sent me a cilium CNI config.
Which k8s provider are you using? For example, AWS, AKS, GKE?

hi @glazychev-art
I installed the k8s cluster locally and used three physical servers.

hi @glazychev-art
I deploy spire
I deploy NSM
with the image artgl/cmd-forwarder-vpp:cilium_test
remove hostNetwork: true
I deploy Kernel2IP2Kernel and Kernel2Ethernet2Kernel
it work well
but when i deploy other pod yaml as followed:
---
apiVersion: v1
kind: Pod
metadata:
  name: alpine
  labels:
    app: alpine

  annotations:
    networkservicemesh.io: kernel://kernel2ip2kernel/nsm-a,kernel://kernel2ethernet2kernel/nsm-b
spec:
  containers:
  - name: alpine
    image: alpine:3.15.0
    imagePullPolicy: IfNotPresent
    # simple `sleep` command would work
    # but we need `trap` to be able to delete pods quckly
    command: ["/bin/sh", "-c", "trap : TERM INT; sleep infinity & wait"]
  affinity:
    podAntiAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        - topologyKey: kubernetes.io/hostname
          labelSelector:
            matchExpressions:
              - key: app
                operator: In
                values:
                  - nse-kernel

it can not start
error log :
Uploading log.txt…

Thank you very much for the script, but unfortunately I cannot reproduce your problem.
I can suggest the following:

Follow this script, but please skip steps 3, 7, 8, 9, 10

On the node where NSE is deployed, please run tcpdump. We are interested in frames with dst: <NSE_Node_IP> (for example, <IP_ADDRESS>) port 4789

2. On the node where NSE is deployed, please run tcpdump. We are interested in frames with dst: <NSE_Node_IP> (for example, <IP_ADDRESS>) port 4789

hi @glazychev-art
see it
a.cap.txt
See if there is the information you want here. Change the file suffix.

Yes, thank you.
As I can see, the required traffic does not arrive at the NSE node.
Can we collect the same but from the NSC node?

Yes, thank you. As I can see, the required traffic does not arrive at the NSE node.
Can we collect the same but from the NSC node?

HI @glazychev-art

no package too

@316953425
Actually we are interested in UDP
Then can we collect frames from NSE node again?

This tcpdump flag doesn't help either?
tcpdump -i ens3 udp port 4789 --immediate-mode

tcpdump -i ens3 udp port 4789 --immediate-mode

hi @glazychev-art
no package

Ok, thanks
Correct me if I'm wrong: this example worked for you on NSM v1.6.1, right?

Correct me if I'm wrong: this example worked for you on NSM v1.6.1, right?
hi @glazychev-art
v1.6.1 v1.11.0 v1.11.1 master is not working properly

hi @glazychev-art
I have built three environments, but none of them work if I use cilium. Have you reproduced using cilium locally?

Got it. So far I'm having problems with cilium on my servers.
I was only able to reproduce the problem without hostNetwork: true, so we fixed it.
Question: have you tried other CNI plugins? For example flannel?
https://github.com/flannel-io/flannel

Got it. So far I'm having problems with cilium on my servers. I was only able to reproduce the problem without hostNetwork: true, so we fixed it.
Question: have you tried other CNI plugins? For example flannel? https://github.com/flannel-io/flannel

hi @glazychev-art
i not try other cni

It would be great if you could check another CNI.
This way we could determine whether the problem is really in the cilium CNI plugin or somewhere in the configuration of your servers.

Got it. So far I'm having problems with cilium on my servers.
I was only able to reproduce the problem without hostNetwork: true, so we fixed it.

hi @glazychev-art
On the server you use cilium, is there any problem if you use hostNetwork: true?

hi @glazychev-art
I found that the ip prefix of the nsm-1 interface of nsc and nse is /32. How can I let nsc or nse get the ip prefix of the interface to be /24?

I found that the ip prefix of the nsm-1 interface of nsc and nse is /32. How can I let nsc or nse get the ip prefix of the interface to be /24?

This is a separate topic.
In short, NSM allocates /32 addresses for P2P connections. You can look at these chain elements in more detail:
https://github.com/networkservicemesh/cmd-nse-icmp-responder/blob/main/main.go#L208
https://github.com/networkservicemesh/sdk/tree/main/pkg/networkservice/ipam/groupipam
https://github.com/networkservicemesh/sdk/tree/main/pkg/networkservice/ipam/point2pointipam

On the server you use cilium, is there any problem if you use hostNetwork: true?

On my local cluster, cilium works fine with hostNetwork: true. But maybe my configuration is different.
I believe that the problem may also be in the configuration of your servers.
So to find out, can you please remove cilium and try other CNI plugin (eg flannel)?

Yes, please

Yes, please

hi @glazychev-art
see it
cilium.yaml.txt

So, I've tested cilium on standalone servers with Ubuntu 20.04 on which kubernetes is installed, using this cilium guide:
https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/
cilium install --version 1.14.4
And it works well for me with hostNetwork: true on forwarders.
Perhaps checking your cilium installation will help you:
https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/#validate-the-installation

I used only cilium install --version 1.14.4, without any changes
Config (I removed a few Secrets from there):
cilium_config.txt

It seems like this one is fixed by https://github.com/networkservicemesh/cmd-forwarder-vpp/pull/1003.
If it's still reproducing, feel free to reopen.
(Also, I've renamed the ticket from 'Urgent' to 'ASAP' label because we want to add this to the release notes)


Uncaught Error: spawn mono ENOENT

[Enter steps to reproduce below:]

ctrl + alt + o to open AtomSharp
get exception

Atom Version: 0.166.0
System: Mac OS X 10.10.1
Thrown From: Atom Core
Stack Trace
Uncaught Error: spawn mono ENOENT
At events.js:85

Error: spawn mono ENOENT
  at exports._errnoException (util.js:742:11)
  at Process.ChildProcess._handle.onexit (child_process.js:1051:32)
  at child_process.js:1142:20
  at process._tickCallback (node.js:378:11)

Commands
     -1:07.9 project-manager:toggle (atom-text-editor.editor.is-focused)
     -1:06.6 core:confirm (atom-text-editor.editor.mini)
 18x -0:36.7 core:backspace (atom-text-editor.editor.mini)
     -0:00.0 omnisharp-atom:toggle (atom-text-editor.editor.is-focused)

Config
{
  "core": {},
  "editor": {
    "fontSize": 13,
    "invisibles": {}
  }
}

Installed Packages
# User
color-picker, v1.2.6
jshint, v1.1.3
language-cshtml, v0.1.0
linter, v0.9.1
omnisharp-atom, v0.1.6
project-manager, v1.14.1

# Dev
No dev packages

Looks like a duplicate of https://github.com/OmniSharp/omnisharp-atom/issues/42.


Try different Travis script

Just some minor questions, a green CI is more important ;)

When changing the --append to --add on the appveyor build, it actually breaks the build. It installs pytest 3.2.2 instead of 5.2

Ah, that was specifically for Python 3.5, and that's because conda-forge does not build packages anymore for 3.5 (so therefore only getting old packages).
Sidenote: many packages are starting to drop 3.5 support (eg pandas will do so in the next release), so we can also think about that


Feat - Enable positioning of columns on tables

It would be quite useful to allow developers to specify where additional columns should appear on tables. Currently adding columns just puts them at the end, this could be problematic if developers want to add important information to a table, it may not be visible without scrolling.
This PR adds an after method to columns which reference the field they should render after.

@alecritson if we're implementing after, should we also support before?

I did think about this but I thought it would be useful for Lunar to retain at least some control in what the first column is.


feat(spanner): add samples for Array of Proto columns

This PR adds samples to perform insert and read operations on Array of Proto columns - Array of Proto Messages and Proto Enum.

Please review this PR after reviewing PR-2777.


[Visual Bug] 🐛 tqdm progress bar with leave=False leaves whitespace

Applies To

[X] Notebooks (.ipynb files)
[ ] Interactive Window and/or Cell Scripts (.py files with #%% markers)

What happened?
https://github.com/microsoft/vscode-jupyter/assets/27844407/175cdf08-330e-4477-abe5-94d29f04c980
The bug isn't observed from the jupyter CLI:
https://github.com/microsoft/vscode-jupyter/assets/27844407/504aa6d9-7074-452b-819a-87355db36cc6

Someone has submitted a fix to tqdm for it: https://github.com/tqdm/tqdm/pull/1504
Is there anything that VS Code jupyter can do to fix this visual bug in VS Code?
VS Code Version
Version: 1.84.2 Commit: 1a5daa3a0231a0fbba4f14db7ec463cf99d7768e Date: 2023-11-09T10:52:57.054Z (1 wk ago) Electron: 25.9.2 ElectronBuildId: 24603566 Chromium: 114.0.5735.289 Node.js: 18.15.0 V8: <IP_ADDRESS>-electron.0 OS: Darwin arm64 23.0.0
Jupyter Extension Version
v2023.10.1100000000
Jupyter logs
No response
Coding Language and Runtime Version
Python 3.9
Language Extension Version (if applicable)
No response
Anaconda Version (if applicable)
conda 23.9.0
Running Jupyter locally or remotely?
Remote

Duplicate of https://github.com/microsoft/vscode-jupyter/issues/9397


Create a toolset for visualizing various metrics for the OpenEBS repositories

Toolset to visualize GitHub activity using Grafana dashboards. we can refer to this https://github.com/cncf/devstats repo for further help.

An early version of the devstats for openebs is available at https://devstats.openebs.io


remove dependency to abapOpenChecks

parsing of FORM and PERFORM can be done quite easily, with a piece of custom code

Dummy, placing the image in the cloud,

Is removing this dependency still a goal?
I would like to use formfactor standalone on older systems <7,02 so, abapGit and abapOpenChecks would not exists there.

I think this project is basically obsolete, plus it was an experiment
now, 7 years later, I'd do it in a different way, if needed


Add In-World UI example

What problem does this solve or what need does it fill?
In relation to #5476, we need example(s) showcasing how to setup and use UI in-world.
What solution would you like?
Examples showcasing the following features:

How to display UI in the world
Display multiple separate UI elements in the world
How to interact with in-world UI

These can be one and the same example, or multiple depending on how big they need to be in order to showcase what they need. Just showing a couple of different UI elements that isn't 100% camera-facing with buttons that can be pressed should be enough to showcase what we need, but feel free to come up with something more interesting.

Marking as blocked since the feature is not implemented yet.


Cannot open file in Spyder editor; only getting linux error: setNativeLocks failed: “No locks available”

## Problem Description
Hello,
I'm trying to access my files on the Spyder 3.2.8 editor, but any time I double-click on the file the editor freezes and I can't navigate it. Meanwhile, the error: setNativeLocks failed: "No locks available" continuously pops up in the Linux terminal I open Spyder with.
For some context, I did recently update from version 3.1.4 to 3.2.8. I also mainly use my own environment I created in anaconda, but the result is the same inside or outside the environment. I've reinstalled/reset spyder, and restarted my computer.

**UPDATE: I was told chances are this is probably a bug.
What steps will reproduce the problem?

Opening Spyder in or out of created conda environment
Clicking the "open file" tab in top left of editor
Trying to open or save a file. I also tried dragging the file in place but I'm unable to edit or scroll down.

## Package Versions

Spyder: 3.2.8
Python: 2.7
Qt: 5.6.2

Dependencies
IPython >=4.0;<6.0:  5.3.0 (OK)
cython >=0.21     :  0.25.2 (OK)
jedi >=0.9.0      :  0.10.2 (OK)
nbconvert >=4.0   :  5.1.1 (OK)
numpy >=1.7       :  1.12.1 (OK)
pandas >=0.13.1   :  0.20.1 (OK)
psutil >=0.3      :  5.2.2 (OK)
pycodestyle >=2.3 :  2.3.1 (OK)
pyflakes >=0.5.0  :  1.5.0 (OK)
pygments >=2.0    :  2.2.0 (OK)
pylint >=0.25     :  1.6.4 (OK)
qtconsole >=4.2.0 :  4.3.0 (OK)
rope >=0.9.4      :  0.9.4 (OK)
sphinx >=0.6.6    :  1.5.6 (OK)
sympy >=0.7.3     :  1.0 (OK)

Thanks for reporting. Seems rather unlikely to be a Spyder bug and rather something specific to your machine/environment/filesystem. You OS and version isn't listed above as is requested by the issue template, although from your screenshots its clearly Linux of some sort. Are you using a NFS filesystem of some sort? Some googling suggested making sure your disk isn't nearly full, and starting the lock service with e.g. sudo systemctl start rpc-statd Beyond that, please try the steps listed in the Spyder Troubleshooting Guide, specifically the Basic First Aid and Emergency CPR sections, which resolve the great majority of Spyder installation issues.
If it still isn't working, please describe in detail the circumstances in which the error occurred, and post the information listed in relevant subsection of the Calling for Help section as a comment to this issue, and we'll try to help if we can. Otherwise, your issue will likely have to be closed after one week (7 days). Thanks, and best of luck!

Is your home mounted in an NFS file system?

Hi everyone, my issue was solved; turns out there was a configuration

Glad you got it fixed @ariannajojo !


Add a Specular Glossiness to Metallic Roughness conversion step to workflows.

Add a Specular Glossiness to Metallic Roughness conversion step to workflows.
Refactored texture loading and packing utils into generic textures utils.
Resolved packing, resizing and compressing texture issues with sRGB and alpha channels.
Update draco build to allow for ARM.
Also includes #34 and #35.

Did you have a collection of test assets that are typically used?

I start with all the gltf samples, that's a quick and easy litmus test. I also use a few assets from actual apps, and more recently I've been using a few from Poly, Remix3D and some environments. If you need help I can send some assets on Monday.
Roberto

From: Jamie Marconi<EMAIL_ADDRESS>Sent: Saturday, July 7, 2018 1:09:28 PM
To: Microsoft/glTF-Toolkit
Cc: Roberto Sonnino; Comment
Subject: Re: [Microsoft/glTF-Toolkit] Add a Specular Glossiness to Metallic Roughness conversion step to workflows. (#36)
Did you have a collection of test assets that are typically used?
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHubhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2FglTF-Toolkit%2Fpull%2F36%23issuecomment-403240082&data=02|01|robertos%40microsoft.com|04f43b40f8ed4a00e7db08d5e4458c0c|72f988bf86f141af91ab2d7cd011db47|1|0|636665909710895142&sdata=PeeD%2BaOCwIJaCpB2WnCyRdCgRwddH8BSGq3LaLCZ6eQ%3D&reserved=0, or mute the threadhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAAl8Brq4ALwcProISSai9VpgPwJWbr_qks5uERV4gaJpZM4VGK_0&data=02|01|robertos%40microsoft.com|04f43b40f8ed4a00e7db08d5e4458c0c|72f988bf86f141af91ab2d7cd011db47|1|0|636665909710895142&sdata=jmjt7PoZxr4rhKp1AevmfHgb4%2FSGoc5sggicEXdXK7w%3D&reserved=0.

@najadojo Let me know if I can help you to complete this PR - lots of goodness here :)

I haven't completed testing these changes yet and I've been moved on to other work... I'll try and finish that up in my free time.

@Dharnidharka this last commit will fix #39, using mesh compressed assets as input. You can grab a release binary on the artifacts page.

@robertos this PR is ready for merging.

@najadojo Thank you for the fix :)


Support for Compound clips

It would be a gread addition if Metaburner was able to analyze compound clips as well. During the editing process we work in reels, so we have Reel 1, 2 and 3 - each around 30 mins - in compound clips and I'd like to skip the process of "Break Apart Item" each time I need to add the metaburner title.

How would that work exactly?
Do you just want "Primary Storyline - Inside Container - 1st Video Clip" to be able to "look inside" Compound Clips, like it can Sync Clip's currently?

In our case I would like to open the compound clip in its own timeline, place the marker on top of all clips and then drag-drop the compound clip on the metaburner tool.

Oh, I see what you mean now.

This will be added in the next beta.

Just tested this with inside two of our compound clips and got the following error message:

Metaburner Renderer - 1.0.7 (35).log


About the latent average code for your 256 stylegan2 generator

Thanks for sharing your work!! I noticed that "latent_avg" is saved in the "stylegan2-ffhq-config-f.pt", while your self_training 256 stylegan2 did not got such a element. Is it possible to get such a element for the 256 stylegan2? Many thanks~. Have a nice day~.

It is (running) average of latent codes, so I think you can replace it with plain average of latent vectors.

Thanks for your respond! How could I get plain average of latent vectors for the 256 stylegan generator,thanks for your help~~~~~.Have a nice day.

You can use generator.mean_latent(n_sample_for_average)

It works! Thanks for your help~.


Undo & redo

perhaps even enable Cmd Z?

thanks for logging this. thought i already had!

[ ] should be cmd+z & cmd+shift+z so it behaves like most apps
[ ] should support all tools where applicable

i wonder if we can use the CE https://codepen.io/samthor/pen/WJvLxd for this? keep it hidden, update it, and use it for undo? might be a clever partial impl we can put in temporarily? @samthor

👍
The undoer code lives here canonically: https://github.com/samthor/undoer
It's got challenges on e.g. Edge but you don't care about that. :)

why'd you close?

@argyleink it is been a long time and there is no update on this

still a feature worth hacking on


regexp-matches ignores global 'g' flag

This friendly guy ignores global setting when used in the context of scalar function regexp-matches.
Postgres:
select regexp_matches('#abc #def #ghi', '(#[^\s]*)', 'g');
 regexp_matches
----------------
 {#abc}
 {#def}
 {#ghi}
(3 rows)

CrateDB:
select regexp_matches('#abc #def #ghi', '(#[^\s]*)', 'g');
 ['#abc']
----------
 {"#abc"}
(1 row)

Use case:
https://community.crate.io/t/regexp-matches-with-global-flag-returns-wrong-data/232/2

This is a documented behaviour as CrateDB uses Lucene Regular Expressions on regexp_matches. See https://crate.io/docs/crate/reference/en/latest/general/builtins/scalar.html#regular-expression-functions and https://crate.io/docs/crate/reference/en/latest/general/builtins/scalar.html#flags.


Don't change the batch size, it's fixed according to the original paper. I'll remove this parameter soon.

Don't change the batch size, it's fixed according to the original paper. I'll remove this parameter soon.
thank you, and will wait for it
and regarding to "normal_segments_scores" tensor, how to get segments score of all 800 videos?


HADOOP-16112. Delete the baseTrashPath's subDir leads to don't modify baseTrashPath

1223

 Quality gate: Failed
5 Issues

 4 Code issues
 1 Anti-patterns

Details


Update Travis config.

remove Ruby 1.9.3 since Jekyll 3.x doesn't work on it
specify sudo: false and more ruby versions
cache gems

Ok, it seems the dev gems don't get installed...

@parkr: With my limited Ruby(gems) knowledge I can't make this work. Please check the changes and if you have any idea how to make this work let me know.


Support to array element ranges

One can reference a range of elements in an array with the to keyword:

$.myArray[0 to 5]
$.myArray[10 to last - 1]

I'll look into this one first. Seems simple.

Reference examples of valid element accessor syntax:
$[1 to last]
$[1, 3 to 5]
$[1, 3 to 0.5 * last]
$[0, last-1 to last, 5]  <- from spec
wildcard accessor would be stand-alone, I think: [*]
More elaborate expressions might be allowed by Postgres, e.g. [last - ((7+1)*last/2)], but I question where those are of practical use.
The spec mentions wff and defines it as a well-formed expression, but doesn't define 'well-formed expression'.

Parser completed in #13. Thanks Jeff!


Set the upper bound on databricks-sql-connector.

Description
Sets the upper bound on databricks-sql-connector.
databricks-sql-connector 2.0.0 has been released, but it has a dependency issue.

Thanks! merging.


CLOUD-58094 docker properties removed on ui

@schfeca75

Jenkins build finished, all tests passed.
Refer to this link for build results: http://ci.sequenceiq.com/job/cloudbreak-pull-request/2534/


Problem with jagged arrays as parameter on TestEngine

Summary or solution description
Updated the unit tests that expected failures when passing arrays as arguments
https://github.com/CityOfZion/neo3-boa/blob/d43476809c443a958b3bdda27b2295fd864c3a25/boa3_test/tests/compiler_tests/test_list.py#L314-L322

Task linked: CU-3e03c95 Problem with jagged arrays as parameter on TestEngine


Image

The hero image is too light and therefore makes the text blend in too much

A new image was put in that conveyed the same message but would now have a better contrast to the text in front of it,


proper initialization when added via storyboard

proper initialization when added via storyboard and iOS9 mask to bounds issue

Hey,
Thank you for the merge request.
I was testing your changes but I could not see what this is fixing?
I still have the same issue when I add BBButon via storyboard -> badge is not working because customView is nil.
Was this merge the fix for this?


Qrcode size is increased dramaticaly when improving quality

I'm trying to use this library for generating QrCode for an application like this
QRCodeGenerator qrgen = new QRCodeGenerator();
QRCodeData qrdata = qrgen.CreateQrCode(info, QRCodeGenerator.ECCLevel.Q);
QRCode qr = new QRCode(qrdata);
Bitmap bmp = qr.GetGraphic(7);
for me the bandwith and size is very important. when usign GetGraphic(7) the quality is good but the size of the QrCode is 750k although the data in he info variable is only 127 caracters long.
and if I use qr.GetGraphic(1);
the size is acceptable 15k but the image quality is nearly unscannable (I have to make the picture big to scan it get scanned successfuly only a few times)
when using online QrCode generators (this one for example (https://www.the-qrcode-generator.com/)) the generated image quality is very good and also lighweight :4k
I don't know why is that specialy for this very tiny piece of text.
Type of issue
[x] Bug
[] Question (e.g. about handling/usage)
[ ] Request for new feature/improvement

The method you are using generates a bitmap image.
Try using the png example.
https://github.com/codebude/QRCoder/wiki/Advanced-usage---QR-Code-renderers#25-pngbyteqrcode-renderer-in-detail

Thank you so much that's much much better now.You're the best


chore: uningnore and add cargo.lock file

When kept up to date, this makes it possible to build any git version
with the same versions of crates that were used for any version, without
it, you can only use the current versions. This makes bugs in semver
compatible code difficult to detect.
The Cargo.lock file is not used by downstream consumers of the crate, so
it is safe to include it in the repository (and recommended by the Rust
docs).
This helps with issue https://github.com/ratatui/ratatui/issues/1433.

I'm not sure about this.

and recommended by the Rust docs

Can you share some links to that? AFAIK libraries shouldn't commit Cargo.lock since it might cause problems with the crates.io package and so on. I need to dig up on my issue list to find an example of that.

https://doc.rust-lang.org/cargo/faq.html#why-have-cargolock-in-version-control
https://blog.rust-lang.org/2023/08/29/committing-lockfiles.html


Incorrectly detected number plates on test snapshots

Closing as a duplicate of #1.

Take a look at https://github.com/oskopek/javaanpr/blob/master/docs/howto-use-reports.adoc. Keeping open for reference to improve the detection algorithm.


Importing existent accounts

If I understood correctly emerald import command would replace existent key data for address if such address already in vault. It can lead to situation when user accidentally replace working keys with another key, encrypted by another passphrase.
As a solution we can introduce additional parameters:
-f - force to replace existent keys. User must explicitly ask to replace.
-i - ignore existent keys. This is safe option.
What do you think ?

We not prohibiting replacement for exisitng aacount because of  update command.
Maybe, we should add -f option, but skip -i as it's will be default behaviour

So, import command doesn't replace existent ? if so we can leave it as is but update documentation


Basic v10 Compatiblity fix - Proposal

Hi,
I tried to fix the module for v10, so you have less work to do.
Not sure if all functions work properly but maybe the code changes save some time for yourself during the update.
Thanks for the nice module.
Regards

Ah there is already a working branch.
Never mind. I'll leave this open, maybe it still helps.

The official port for v10 is now available. Thanks you for your work!


Restore TLDRLegal as "additional resource"

I noticed that TLDRLegal was taken down due to concerns around spam -- we did a big sweep of content in between then and now.
Would be cool to be back on this page, esp given the history of us and ChooseALicense! Feel free to reach out at kevin (at) tldrlegal.com beforehand as well.

Kinda tangential, but since we're on the subject: I wish TLDRLegal would become more wiki-like, perhaps with the data being hosted in a github repo or something like that. It could then become a potential good resource for a community-curated list of licenses, aiming at being exhaustive, even listing projects using each license -- see discussion at #377 for context and details.
I'm saying this because a while ago I tried to update the page on the ISC license and had to wait for months for the change to be reviewed. I even offered to help maintain the data / review change requests at the time, but got no answer to that, IIRC. TLDRLegal's potential is great, but such a centralized curation model is neither practical nor aligned with the FOSS ethos.

@xizhao do you keep spam off the home page? I don't have much confidence with it currently linking to tldrlegal.com/license/hx711_spi which looks like a nonsense entry named for a hardware part and with some C source code as the fulltext. That's not spam I suppose, but could easily be, and is at the least confusing to someone learning about licenses. I'm somewhat embarrassed, and to be a bit hyperbolic, consider it bad internet citizenship, to link to sites featuring spam.
In any case I'll leave this open pending other comments, esp given that I don't know the history between you and ChooseALicense!

@waldyrious That's a good point.  Maybe somewhere in between is to start w/ a more active moderation staff, as right now it's just (me) + summary authors that have the ability to merge changes.  The curation is still decentralized in the sense that account holders of summary submissions have full ability to merge/edit, but if account holders go in-active, it falls to my once-every-few-weeks sweep of things.  Sorry I missed your note -- I just checked my email looking for your username, are you still interested in getting more involved?
@mlinksva That instance doesn't look like spam -- I think maybe a misunderstanding of the "Submit" function (i.e. author wanted to license code under certain terms by putting it on TLDR).  You've got a point though, maybe featuring "newest" submissions on the homepage isn't a great idea and there has to be a level of curation -- the vision of TLDR is more of a self-moderated index and I was imagining this would be a way for newer submissions to get visibility. Do you have any ideas around this?
We have a quality control initiative here: https://tldrlegal.com/verified that tries to distinguish certain types of content w/ a nice "verified" badge.
RE: history, TLDR began around 2012, and there was some light discussion around collaboration since 2013ish around the inception of ChooseALicense -- I think there was some initial sharing of data and more recently a conversation with @benbalter around Open Sourcing TLDR and moving it to GitHub.
It's quite an effort and we haven't quite gotten around to it (my fault for lack of time/resources), but I think there's a general consensus that's a direction we want to go.  VCS and merging features of GH are far more powerful/polished than those on TLDR; albeit potentially alienating for non-devs.

@xizhao I didn't send an email, IIRC -- we chatted a bit over twitter: https://twitter.com/waldyrious/status/579320670254948352. I would love to still help, but my availability is reduced at the moment. In any case, I'd rather participate as any other user in a wiki-like system, than be granted curator privileges in a more centralized workflow. I understand if that isn't immediately possible, but I thought I'd drop the suggestion :)

maybe featuring "newest" submissions on the homepage isn't a great idea and there has to be a level of curation

@xizhao exactly. The hx711_spi isn't itself spam, but is a demonstration that there's no barrier to garbage including spam appearing on the home page. If you remove the 'newest' column or filter out stuff from it that has seen zero review I'd be a lot more comfortable pointing people learning about licenses to tldrlegal.
As for open sourcing TLDR, putting the code under and open license and in a public repository is the obvious first step. Just do it. :smile: Using pull requests as a new or the only means of moderating site content is a completely different and I'd bet big project. Which having the code be open source can only help.

ps @xizhao CI is failing this PR because TLDRLegal's certificate chain is incomplete https://www.ssllabs.com/ssltest/analyze.html?d=tldrlegal.com&latest ... you probably need to concatenate your CA's certificate with the one you installed. Both should have been provided when you obtained the certificate for your domain.

@xizhao is there any chance that you'd take "newest" off the homepage?
Before we can merge this, I think that both the issue with "newest" and the certificate chain would need to be resolved.

Closing for now, @xizhao let us know when the two items @kytrinyx mentions are resolved.


Testing patch application

Made to test https://github.com/2i2c-org/hub-user-image-template/issues/11#issuecomment-1091063788


fix: generate consul_acl_master_token when not provided

Hi!
The acl.yml task was never used to generate consul_acl_master_token as the variable was present in default variables.
Removing the variable will generate a new random uuid and set it as consul_acl_master_token.
Because of the dependency with the configuration role, it is necessary to launch acl role before the configuration one.

Thanks!


Icons should depict the button

"Donation Total" and "Pause Donation" buttons should have corresponding icons.

https://xd.adobe.com/view/319a403f-183f-4eb6-bdbe-9cd9dc9c4450-64c9/screen/dd95cdec-f34d-4f99-8e01-376fe8bd1602/
https://xd.adobe.com/view/319a403f-183f-4eb6-bdbe-9cd9dc9c4450-64c9/screen/38c286c2-3c34-4a36-a030-bb3203cec88d/

Icons are not same as mentioned in xd link.
Tested on dev app v2.0.75(455)

Verified this issue on dev app v2.0.75(465)


[Project Addition] AI Generated vs Real Images Classification using DL

Deep Learning Simplified Repository (Proposing new issue)
:red_circle: Project Title : AI Generated vs Real Images Classification using DL
:red_circle: Aim : Classifying images based on whether they were AI Generated or Real images ( clicked or painted by humans ).
:red_circle: Dataset : https://www.kaggle.com/datasets/cashbowman/ai-generated-images-vs-real-images
:red_circle: Approach : Creating custom CNN and CNN-Attention based models as well as 5 pre-trained models for binary classification task.

📍 Follow the Guidelines to Contribute in the Project :

You need to create a separate folder named as the Project Title.
Inside that folder, there will be four main components.

Images - To store the required images.
Dataset - To store the dataset or, information/source about the dataset.
Model - To store the machine learning model you've created using the dataset.
requirements.txt - This file will contain the required packages/libraries to run the project in other machines.

Inside the Model folder, the README.md file must be filled up properly, with proper visualizations and conclusions.

:red_circle::yellow_circle: Points to Note :

The issues will be assigned on a first come first serve basis, 1 Issue == 1 PR.
"Issue Title" and "PR Title should be the same. Include issue number along with it.
Follow Contributing Guidelines & Code of Conduct before start Contributing.

:white_check_mark: To be Mentioned while taking the issue :

Full name : Arihant Bhandari
GitHub Profile Link : https://github.com/Arihant-Bhandari
Email ID<EMAIL_ADDRESS>Participant ID (if applicable): Arihant Bhandari (eternal_insight)
Approach for this Project : using pretrained and custom cnn models for classification
What is your participant role? (Mention the Open Source program)
GSSoC 2024 Contributor

Happy Contributing 🚀
All the best. Enjoy your open source journey ahead. 😎

hi @abhisheks008 this is the next project i want to take on. pls assign this to me, thank you for the same.

Assigned @Arihant-Bhandari

@abhisheks008 i had something on the side i wanted to discuss with you beforehand.
i had a project i worked on previously, using NVIDIA stock data, and created RNNs for opening and closing prediction.
can it be considered for submission if i were to create ANNs for the same, so in total there will be 4 models ANN and RNN for opening and closing respectively ?


#71 Replaced /? with /int in win32

Closes: #71

PR-Codex overview
This PR focuses on making changes to the win32 function in win32.eo and updating the version number in pom.xml.
Detailed summary

Updated the usage of the win32 function in win32.eo to include the /int argument.
Updated the version number in pom.xml from 0.29.5 to 0.29.6.
Added a comment in pom.xml to turn on the duplicate finder, with a note about an issue that needs to be resolved.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@yegor256 please have a look

@rultor merge

@rultor merge

@yegor256 OK, I'll try to merge now. You can check the progress of the merge here

@rultor merge

@yegor256 Done! FYI, the full log is here (took me 3min)


Do not remove http/https component of evidence URLs

URLs without the leading http/https are corrupted by ECOS, so retain them...

Added "https://" to evidence links from iDigBio.


Update highlights

Add @type.builtin highlight to scalar types

Fix @variable highlight having a higher priority than @type for identifiers in type_declaration

This is dependent on #5 otherwise tree-sitter will error Query error at 6:41. Invalid node type f16

Thanks, I can confirm that the @type.builtin highlights work properly.
Are you sure that the @variable highlighting issue was actually fixed by this change? I could only get it to work if I moved the first line ((identifier) @variable) below the (type_declaration (identifier) @type) line. I was testing it using the tree-sitter highlight command. I couldn't find any bit of information that would say something about the order of the queries.

I was basing it off how it looks in neovim. After a bit of testing with tree-sitter highlight It looks like they use two different systems to specify priority. I also found this tree-sitter issue tree-sitter/tree-sitter/issues/1374 which seems to be the same problem.
what I understand from testing neovim, it prioritizes smaller highlights, so in the case of
(identifier) @variable
(type_declaration) @type

@variable wins. But if two queries have the same size it uses the one that came last, so in the case of
(identifier) @variable
(type_declaration (identifier) @type)

@type wins.
from what I understand from tree-sitter highlight it looks like it does the exact opposite. I'm not sure.
In a test, the larger highlight always won regardless of if it came before or after another query
(variable_identifier_declaration) @comment
(identifier) @variable
; and
(identifier) @variable
(variable_identifier_declaration) @comment

@comment  wins in both cases.
When testing for which highlight has priority when they have the same size
; @variable wins
(identifier) @variable
(type_declaration (identifier) @type)
; @type wins
(type_declaration (identifier) @type)
(identifier) @variable

the query that came first got the priority.
also, through this I found out the current (attribute (identifier) @attribute) highlight at the bottom of the file only works for neovim, not tree-sitter highlight.

I'll rework the pr to be tree-sitter highlight specific, and move the @type priority thing to a nvim-treesitter pr

changed the commit to

Add @type.builtin highlight to builtin scalar types

Fix @variable highlight priority

Add @punctuation.delimiter highlight to ->

added the -> highlight part to keep it in sync with nvim-treesitter

Previously a whole bunch of highlights were getting covered up due to @variable being defined before them.

top is this commit, bottom is master

Thank you for your extensive investigation!


Algorithms and code snippets in TypeScript.

Issue #41 : Some main  Algorithms  are added in Type Script.

Closing this as the algorithms are in markdown files.


post-jira-comment-with-build-details 0.1.8

New Pull Request Checklist
Please mark the points which you did / accept.

[x] I read the Step Development Guideline
[x] I have a test for my Step, which can be run with bitrise run test (in the step's repository)
[x] I did run stepman audit --step-yml ./step.yml (in the step's repository - note, stepman is part of the Bitrise CLI, you don't have to install it separately)
[x] I read and accept the Abandoned Step policy

Awesome, thank you! 😊


DataChannel: support adding data channels after signaling

Currently PeerConnection.CreateDataChannel doesn't open a data channel. It assumes the channel will be opened when the network manager is started. This doesn't happen if a data channel is created (with in-band negotiation) after signaling.
We also have to take into account that the OnOpen callback can only be registered after the RTCDataChannel is returned to the user. But we can't assume OnOpen will always be set. Related: w3c/ortc#873.

Hey @backkem
If the first point was fixed I think we can close this!
For the second point we check if it is already open, and then fire the callback right away https://github.com/pion/webrtc/blob/master/datachannel.go#L192
please re-open if I am wrong though :) I did a little sleuthing, but I am not 100% confident

@Sean-Der @backkem
https://github.com/pion/webrtc/issues/834#issuecomment-532320752
As this ticket is closed, if pion receives offer without m=application 9 UDP/DTLS/SCTP webrtc-datachannel can still establish data-channel? (just trying to understand if this is possble now..)

I need to confirm, but I am pretty sure the Offerer must create a datachannel (otherwise it will not start up the SCTP subsystem)
I will confirm with Chromium, but I think if you add one video track in the offerer, and then create a DataChannel in the answerer you will not have Datachannels. So this isn't a constraint on our side (I really need to confirm this though) then we can close out that other ticket!

I see, I thought so too - thanks. I wasn't fully sure what the expected behavior in WebRTC protocol spec, either and I need to go back to the spec.

I will get a jsfiddle going and resolve that other ticket! Sorry been a busy week :(
Thanks for responding to tickets so much and helping people on Slack, really awesome to see how much people are helping each other out :)


fisher: Korean data

Summary
I think reading cn data's keys (4776, 4869, 4870, 4871, ...)
https://github.com/quisquous/cactbot/blob/e27c33a34f69e5ba53ac4937e7a9468b57d78f29/ui/fisher/static-data.js#L8-L12
and read data which matches those keys from https://raw.githubusercontent.com/Ra-Workspace/ffxiv-datamining-ko/master/csv/Item.csv can solve Korean data extraction.
Like,
4776,"말름미역",
4869,"멜토르 망둥이",
4870,"로민사 멸치",
4871,"손가락새우",

For place names, https://raw.githubusercontent.com/Ra-Workspace/ffxiv-datamining-ko/master/csv/PlaceName.csv
Tackle uses same csv as fish data. (Item.csv)
If there's no matching key, skip it. (It's because of patch version differences.)
SaintCoinach problem for me
I made some logic in my head, but I couldn't develop it.
I did success reading that csv file, but having problem with SaintCoinach and cannot test and debug now.
subprocess.CalledProcessError: Command 'C:\SaintCoinach\SaintCoinach.Cmd.exe "C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn" "lang de" "exd PlaceName"' returned non-zero exit status<PHONE_NUMBER>.
Am I only having this problem? I have latest patches. (SaintCoianch and FFXIV)

This is what I've added Korean translation for fisher.js.
static-data.zip
I did this with javascript by myself, using browser console. (dealing with json object.)
So, I cannot make changes to python program.

I would recommend not using SaintCoinach here (because then I can't update this, because I don't have the Korean version).  I have also had a lot of errors with SaintCoinach in the past.
What about doing something like what gen_hunt_data.py does, with update_raw_csv, where it gets the csv from Ra-Workspace/ffxiv-datamining-ko/master/csv/.  It will probably take a little bit of refactoring to make this all work, since everything else is using xivapi-like things, but that would be the way I would recommend.

I mean, I was not trying to get data for Korean from SaintCoinach, I meant I couldn't run original python program which makes international version data, it returns error to me.

Does SaintCoinach work if you call it outside of Python?
Maybe I need to think about replacing the use of SaintCoinach with downloading csv or ffxivapi.  That seems more reliable for everybody, especially with different versions.

It is perfectly a problem with SaintCoinach executable. I have same error with running it own, not calling from other program.
I have latest SaintCoinach but don't know why.


Don't offer times in the past when rescheduling a message

In certain cases (e.g., leaving Zulip open for a while after starting to edit a scheduled message), the previously scheduled time offered in the scheduling UI will be in the past. If that's the case, the previously scheduled time should not be shown in the menu.

@amanagr @karlstolley FYI, in case one of you wants to put up a quick fix for this one.


Sumtree sampling

For all the lofty talk about numerical rounding errors in #59, they are unavoidable even with the improved method. This fix simply checks whether the sampled priority happens to be zero, and if so it walks backwards over the leafs until it finds a nonzero priority node. If the backwards walk has not found anything, it performs a forward walk instead.
This has been tested against the JuliaRL_PrioritizedDQN_CartPole experiment in ReinforcementLearningExperiments.jl with 30 different seeds.

Looks good! Can you add a test to this?

Sorry for the confusion with the tests. Should be good to go now

I don't have permissions to merge @HenriDeh. Could you merge?