Bug 1538220
| Summary: | [GSS] [OCP 3.4.1] openshift-sdn partially deletes openflow rules leading to "no route to host" for service | |||
|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Francesco Marchioni <fmarchio> | |
| Component: | Networking | Assignee: | Dan Winship <danw> | |
| Status: | CLOSED ERRATA | QA Contact: | Meng Bo <bmeng> | |
| Severity: | high | Docs Contact: | ||
| Priority: | high | |||
| Version: | 3.4.1 | CC: | aloughla, andcosta, aos-bugs, atragler, bbennett, bmeng, danw, hongli, jkaur, pasik, pweil, rkhan, sukulkar, wmeng | |
| Target Milestone: | --- | |||
| Target Release: | 3.10.0 | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | Bug Fix | ||
| Doc Text: |
Cause: Incorrect management of OVS flows
Consequence: If two nodes rebooted and swapped IP addresses when they came back up, then other nodes might become unable to send traffic to pods on one or both of those nodes.
Fix: The code that manages OVS flows is now more careful to make the correct changes in cases of node IP reassignment.
Result: Pod-to-pod traffic should continue to work correctly even after nodes swap IP addresses.
|
Story Points: | --- | |
| Clone Of: | 1464191 | |||
| : | 1570394 (view as bug list) | Environment: | ||
| Last Closed: | 2018-07-30 19:09:00 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1464191, 1538227 | |||
| Bug Blocks: | 1570394, 1570395, 1570396 | |||
|
Comment 1
Ben Bennett
2018-01-29 14:40:05 UTC
Reporter has stated that they don't need a backport to 3.4, so I'm repurposing this bug for master/3.10, and will clone for 3.9, 3.8, and 3.7 backports. https://github.com/openshift/origin/pull/19080 https://github.com/openshift/origin/pull/19273 verified in atomic-openshift-3.10.0-0.46.0.git.0.02bb86f.el7 and cookies has been added for the nodes in ovs flow as below: OFPST_FLOW reply (OF1.3) (xid=0x2): cookie=0xcde0e385, duration=3822.038s, table=10, n_packets=3025, n_bytes=634211, priority=100,tun_src=172.18.5.45 actions=goto_table:30 cookie=0xcde0e385, duration=3822.038s, table=50, n_packets=3, n_bytes=126, priority=100,arp,arp_tpa=10.129.0.0/16 actions=move:NXM_NX_REG0[]->NXM_NX_TUN_ID[0..31],set_field:172.18.5.45->tun_dst,output:1 cookie=0xcde0e385, duration=3822.038s, table=90, n_packets=2271, n_bytes=266016, priority=100,ip,nw_dst=10.129.0.0/16 actions=move:NXM_NX_REG0[]->NXM_NX_TUN_ID[0..31],set_field:172.18.5.45->tun_dst,output:1 OS: Red Hat Enterprise Linux Server release 7.5 (Maipo) kernel: Linux ip-172-18-2-86.ec2.internal 3.10.0-862.el7.x86_64 #1 SMP Wed Mar 21 18:14:51 EDT 2018 x86_64 x86_64 x86_64 GNU/Linux Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1816 |