Bug 1602404

Summary:	[Netvirt] Sporadic failures Random ping failure in snat conntrack mode
Product:	Red Hat OpenStack	Reporter:	Aswin Suryanarayanan <asuryana>
Component:	opendaylight	Assignee:	Aswin Suryanarayanan <asuryana>
Status:	CLOSED ERRATA	QA Contact:	Noam Manos <nmanos>
Severity:	high	Docs Contact:
Priority:	high
Version:	13.0 (Queens)	CC:	aadam, asuryana, jchhatba, joflynn, jschluet, mkolesni, nyechiel, sgaddam
Target Milestone:	z2	Keywords:	Triaged, ZStream
Target Release:	13.0 (Queens)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	Netvirt
Fixed In Version:	opendaylight-8.3.0-2.el7ost	Doc Type:	Bug Fix
Doc Text:	Some flows were missing from the SNAT table and the flow programming generated an error due to a missing group. As a result, SNAT traffic from compute, where the flow is missing, failed and affected most of the traffic. As a result, the flow programming now waits for the group to be added. The group is always present and SNAT works.	Story Points:	---
Clone Of:		Environment:	N/A
Last Closed:	2018-08-29 16:20:16 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Aswin Suryanarayanan 2018-07-18 10:03:23 UTC

Description of problem: The table 26 entry in a non-napt switch is missing since the flow is programmed before the group.


Version-Release number of selected component (if applicable):


How reproducible: This is a random bug and happens when we try creating routers multiple times.


Steps to Reproduce:
1.
2.
3.

Actual results:Ping from all vms to external n/w should work


Expected results: Ping fails for vms in compute where the flow is missing 



Additional info: [1] fails due to the same reason.

[1]https://jenkins.opendaylight.org/releng/job/netvirt-csit-1node-openstack-queens-upstream-stateful-snat-conntrack-fluorine/128/

Comment 11 Joanne O'Flynn 2018-08-14 09:45:43 UTC

This bug is marked for inclusion in the errata but does not currently contain draft documentation text. To ensure the timely release of this advisory please provide draft documentation text for this bug as soon as possible.

If you do not think this bug requires errata documentation, set the requires_doc_text flag to "-".


To add draft documentation text:

* Select the documentation type from the "Doc Type" drop down field.

* A template will be provided in the "Doc Text" field based on the "Doc Type" value selected. Enter draft text in the "Doc Text" field.

Comment 12 Noam Manos 2018-08-14 11:01:10 UTC

Upstream passed:
https://jenkins.opendaylight.org/releng/view/netvirt/job/netvirt-csit-1node-1cmb-0ctl-0cmp-openstack-queens-upstream-stateful-snat-conntrack-fluorine/21/robot/openstack/03%20external%20network/

Downstream passed as well:
https://rhos-qe-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/view/DFG/view/opendaylight/view/odl-netvirt/job/DFG-opendaylight-odl-netvirt-13_director-rhel-virthost-3cont_2comp-ipv4-vxlan-ha-csit/241/robot/L2%20&%20L3%20&%20External%20Network%20&%20Ha%20L2%20&%20Ha%20L3%20&%20Vpn%20Basic%20&%20Vpn%20Basic%20Ipv6%20&%20Ha%20L3%20Block%20Port%20&%20Neutron%20Security%20Group/External%20Network/

Comment 14 errata-xmlrpc 2018-08-29 16:20:16 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:2598