Bug 1222775

Summary:	Tracker for IPV6 router is not working with VRRP
Product:	Red Hat OpenStack	Reporter:	Ofer Blaut <oblaut>
Component:	openstack-neutron	Assignee:	Nir Magnezi <nmagnezi>
Status:	CLOSED ERRATA	QA Contact:	Alexander Stafeyev <astafeye>
Severity:	high	Docs Contact:
Priority:	high
Version:	8.0 (Liberty)	CC:	amuller, chrisw, jschluet, mburns, mlopes, nyechiel, oblaut, tfreger, vcojot, yeylon
Target Milestone:	ga
Target Release:	8.0 (Liberty)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-neutron-7.0.1-8.el7ost	Doc Type:	Bug Fix
Doc Text:	Prior to this update, the fix for BZ#1215177 added the 'garp_master_repeat 5' and 'garp_master_refresh 10' options to Keepalived configuration. Consequently however, Keepalived continuously spammed the network with Gratuitous ARP (GARP) broadcasts; in addition, instances would lose their IPv6 default gateway settings. As a result of these issues, the IPv6 router stopped working with VRRP. This update addresses these issues by dropping the 'repeat' and 'refresh' Keepalived options. This fixes the IPv6 bug but re-introduces the bug described in BZ#1215177. To resolve this, use the 'delay' option instead. As a result, Keepalived sends a GARP when it transitions to 'MASTER', and then waits a number of seconds (determined by the delay option), and sends another GARP. Use an aggressive 'delay' setting to make sure that when the node boots and the L3/L2 agents start, there is enough time for the L2 agent to wire the ports.	Story Points:	---
Clone Of:
Clones:	1300580 1300584 (view as bug list)		Environment:
Last Closed:	2016-04-07 21:01:29 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1300580, 1300584

Description Ofer Blaut 2015-05-19 07:16:59 UTC

Description of problem:

IPV6 router is not working with VRRP


attached one bug for 
Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. create VRRP setup and configure ipv6 subnet with SLAAC
tested without failover 

2. radvd is working but VMs will not get ip address 
3. same configuration but without VRRP enabled will work 

Tested with cirros and RHEL 7.1 images
Actual results:


router and subnet are created but VM will not get IPV6
I don't see any RA accepted on the VM 

Same results in Juno and kilo 

Expected results:


Additional info:

Comment 1 Assaf Muller 2015-11-18 22:55:43 UTC

All issues with IPv6 and L3 HA have been resolved AFAIK. Moving to MODIFIED.

Comment 2 Sridhar Gaddam 2015-11-19 07:38:35 UTC

Yes, I'm not aware of any known IPv6 issues in Neutron L3 HA. 
Small note: Minimum version of keepalived has to be v1.2.10 (or above) [https://review.openstack.org/#/c/168781/]

Comment 3 Nir Yechiel 2015-11-19 08:49:07 UTC

This should be tested with RHEL OSP 8 by Ofer's team, as part of the overall OSP director support for IPv6 based deployments. Ofer, is there an existing BZ tracking this so we can link between the bugs?

Comment 4 Toni Freger 2015-11-23 07:44:04 UTC

Nir, I don't see how it related to installer we are talking here about two Neutron's features IPV6 and VRRP.
When this bug will be ON_QA my team will work on it.

Comment 7 Assaf Muller 2015-12-01 22:06:36 UTC

IPv6 is supposedly entirely broken with L3 HA:
https://bugs.launchpad.net/neutron/+bug/1520517

Comment 13 Assaf Muller 2016-01-22 21:33:07 UTC

Verification for the latest issue fixed (https://review.openstack.org/#/c/268348/).

Create a IPv6 SLAAC subnet, HA router, VM
Console in to VM, execute `watch "ip route | grep default"`
Verify that default gateway ip route doesn't goes away over a period of a couple of minutes.

Comment 14 Nir Magnezi 2016-01-24 08:58:30 UTC

(In reply to Assaf Muller from comment #13)
> Verification for the latest issue fixed
> (https://review.openstack.org/#/c/268348/).
> 
> Create a IPv6 SLAAC subnet, HA router, VM
> Console in to VM, execute `watch "ip route | grep default"`
> Verify that default gateway ip route doesn't goes away over a period of a
> couple of minutes.

Minor correction to the ip route command: For IPv6 default route use:

ip -6 route

Comment 16 Alexander Stafeyev 2016-01-26 11:59:31 UTC

[root@overcloud-controller-0 ~]# rpm -qa | grep neutr
openstack-neutron-7.0.1-8.el7ost.noarch


Tested with cirros instance : 

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1400 qdisc pfifo_fast qlen 1000
    link/ether fa:16:3e:13:f1:c7 brd ff:ff:ff:ff:ff:ff
    inet 21.0.0.5/24 brd 21.0.0.255 scope global eth0
    inet6 3001::f816:3eff:fe13:f1c7/64 scope global dynamic 
       valid_lft 86396sec preferred_lft 14396sec
    inet6 fe80::f816:3eff:fe13:f1c7/64 scope link 
       valid_lft forever preferred_lft forever
$ 

Instance received IPv6 address. 


( added a failover to the test and worked well)

Comment 18 errata-xmlrpc 2016-04-07 21:01:29 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0603.html