ip6tables并发执行3000条替换命令后环境卡死

**【缺陷描述】：ip6tables并发执行3000条替换命令后环境卡死
**【缺陷所属的os版本】（如openEuler-22.03-LTS，参考命令"cat /etc/os-release"结果）**
NAME="openEuler"
VERSION="24.03 (LTS-SP2)"
ID="openEuler"
VERSION_ID="24.03"
PRETTY_NAME="openEuler 24.03 (LTS-SP2)"
ANSI_COLOR="0;31"
**【内核版本】（如kernel-5.10.0-60.138.0.165，参考命令"uname -r"结果）**
6.6.0-94.0.0.98.oe2403sp2.aarch64
**【缺陷所属软件及版本号】（如kernel-5.10.0-60.138.0.165，参考命令"rpm -q 包名"结果）**
iptables-1.8.9-10.oe2403sp2.aarch64
**【环境信息】**
虚拟机
**【问题复现步骤】：请描述具体的操作步骤**
先并发执行10000条替换命令，
ip6tables -t nat -F PREROUTING
checkresult $?
for (( a = 1; a<=2 ; a++ )); do
    for (( b = 1; b<=5; b++ )); do
        for (( c = 1; c<=5; c++ )); do
            for (( d = 1; d<=5; d++ )); do
                for (( e = 1; e<=5; e++ )); do
                    for (( f = 1; f<=8; f++ )); do
                        ip6tables -t nat -I PREROUTING -s CDCD:910A:2222:5498:8475:1111:39$f$e:$a$b$c$d -p tcp --dport 20 -j ACCEPT
                    done
                done
            done
        done
    done
done
再并发执行3000条替换命令
for (( j = 1; j <= 3000; j++ )); do
        ip6tables -w -t nat -R PREROUTING $j -s CDCD:910A:2222:5498:8475:1111:3900:4321 -p tcp --dport $[$j+3000] -j ACCEPT &
done
**【实际结果】**，请描述出问题的结果和影响
卡死
**【期望结果】**，请描述出期望的结果和影响
正常执行，不会卡死
**二、缺陷分析结构反馈**
影响性分析说明：

缺陷严重等级:(Critical/High/Moderate/Low)

缺陷根因说明:

受影响版本排查(受影响/不受影响):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

修复是否涉及abi变化(是/否):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

src-openEuler/iptables
关闭

内容风险标识

评论 (10)

src-openEuler/iptables关闭 .gitee-modal { width: 500px !important; }

内容风险标识