Bug 1623087

Summary: [RFE] OVN native L4LB for east-west traffic
Product: OpenShift Container Platform Reporter: Daniel Mellado <dmellado>
Component: NetworkingAssignee: Luis Tomas Bolivar <ltomasbo>
Networking sub component: kuryr QA Contact: GenadiC <gcheresh>
Status: CLOSED ERRATA Docs Contact:
Severity: high    
Priority: high CC: amuller, asegurap, dalvarez, itbrown, ltomasbo, oblaut, racedoro, sclewis
Version: 4.4Keywords: FutureFeature, TestOnly, Triaged
Target Milestone: ---   
Target Release: 4.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-05-04 11:12:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1635261    
Bug Blocks:    

Description Daniel Mellado 2018-08-28 12:55:27 UTC 
Description of problem:

OVN native L4LB for east-west traffic
-------------------------------------

Kuryr implements clusterIP (east-west traffic) services not by using iptables redirect clauses (kube-proxy) but using amphora driver backed Octavia Load balancers. This has an evidently high cost in memory/core resources as well as it adds extra hops that deteriorate the data plane performance (pod -> router -> LB amphora -> router -> service pod).

This feature is about optionally replacing the clusterIP services backing with OVN’s native load balancers (only TCP traffic). This would have the communication be directly pod -> service pod since OVN’s L4 load balancer is distributed just like its router. This would not apply to load balancer service types.


Additional info:
Comment 2 Luis Tomas Bolivar 2018-10-02 11:00:15 UTC 
Adding related upstream patch sets
Comment 3 Luis Tomas Bolivar 2018-10-02 11:04:10 UTC 
This will also depend on the fix for these two:
- https://bugs.launchpad.net/networking-ovn/+bug/1794260
- https://storyboard.openstack.org/#!/story/2003833
Comment 17 Itzik Brown 2020-01-30 14:18:20 UTC 
Checked with 4.4.0-0.nightly-2020-01-24-045907
Ran kuryr_tempest_plugin.tests.scenario.test_service.TestServiceScenario.test_pod_service_curl and verified that the LB of the service is using ovn as a backend
Comment 19 errata-xmlrpc 2020-05-04 11:12:48 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0581