[GH-ISSUE #215] starting/stopping a jail with --net=br0 causes network hiccups #148

Closed
opened 2026-05-05 05:10:18 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @the8472 on GitHub (Jan 9, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/215

Symptoms:

  • ssh sessions and other network traffic into the box hang for several seconds after closing the jail
  • br0 somehow obtains additional SLAAC-addresses

Speculations on causes:

Originally created by @the8472 on GitHub (Jan 9, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/215 Symptoms: - ssh sessions and other network traffic into the box hang for several seconds after closing the jail - br0 somehow obtains additional SLAAC-addresses Speculations on causes: - [the host's end of the veth pair is brought up before adding it to the bridge.](https://github.com/netblue30/firejail/blob/master/src/firejail/network_main.c#L124-L128). maybe it should be added to the bridge first and then brought up - shutting down the veth pair / network namespace is missing some necessary cleanup steps
gitea-mirror 2026-05-05 05:10:18 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@netblue30 commented on GitHub (Jan 10, 2016):

I put in the veth pair fix you suggested. I'll have to find a way to shut down the interfaces when the namespace is destroyed.

<!-- gh-comment-id:170380545 --> @netblue30 commented on GitHub (Jan 10, 2016): I put in the veth pair fix you suggested. I'll have to find a way to shut down the interfaces when the namespace is destroyed.
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 22, 2018):

@the8472 Is this still an issue?

<!-- gh-comment-id:415119180 --> @chiraag-nataraj commented on GitHub (Aug 22, 2018): @the8472 Is this still an issue?
Author
Owner

@chiraag-nataraj commented on GitHub (May 21, 2019):

I'm going to close this for inactivity. @the8472, please feel free to re-open if you have more questions or if this is still an issue.

<!-- gh-comment-id:494592335 --> @chiraag-nataraj commented on GitHub (May 21, 2019): I'm going to close this for inactivity. @the8472, please feel free to re-open if you have more questions or if this is still an issue.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#148
No description provided.