Bug 1694849

Summary: Virtual router IPV6 forwarding is disabled
Product: Red Hat OpenStack Reporter: Cristian Muresanu <cmuresan>
Component: openstack-tripleo-heat-templatesAssignee: Emilien Macchi <emacchi>
Status: CLOSED DUPLICATE QA Contact: Sasha Smolyak <ssmolyak>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 10.0 (Newton)CC: aschultz, ccamposr, cmuresan, cristian.muresanu, mburns, skaplons
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-06-24 13:59:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Cristian Muresanu 2019-04-01 20:31:41 UTC
Description of problem:

virtual router ipv6 forwarding  is disabled

Version-Release number of selected component (if applicable):

[stack@spielberg ~]$ openstack module list
+------------------+--------+
| Field            | Value  |
+------------------+--------+
| aodhclient       | 0.7.0  |
| heatclient       | 1.5.2  |
| ironicclient     | 1.7.1  |
| keystoneclient   | 3.5.1  |
| magnumclient     | 2.3.1  |
| mistralclient    | 2.1.2  |
| muranoclient     | 0.11.1 |
| novaclient       | 6.0.2  |
| openstackclient  | 3.2.1  |
| os_client_config | 1.21.1 |
| swiftclient      | 3.1.0  |
| tripleoclient    | 5.4.6  |
+------------------+--------+

How reproducible:


Steps to Reproduce:

1. Install overcloud using  as described in: Reference Architectures 2017 Hyper-converged Red Hat OpenStack Platform 10 and Red HatCeph Storage 2
2.  create external ipv6  network:
openstack network create --share --external --provider-physical-network datacentre  --provider-network-type vlan --provider-segment ### example.-v6.net1
3. create external ipv6 subnet 
openstack subnet create --no-dhcp --ip-version 6 --subnet-range 0:0:A::/64  --gateway 0:A::1  --network example-v6.net1 example-v6.subnet1
4. Create internal ipv6 network
openstack network create internal.example-v6.net1
5 . create internal ipv6 subnet
openstack subnet create --no-dhcp --ip-version 6 --subnet-range 0:A::/64 --gateway 0:A::1  --network internal.example-v6.net1 internal.example-v6.subnet1
6. create router
openstack router create example-v6.router1
7. assign router gateway
neutron router-gateway-set --enable-snat --fixed-ip ip_address="0:A::20"  example-v6-router1 example-v6.net1
8. assign internal subnet network to router
 openstack router add subnet example-v6-router1 example-internal-v6.subnet1
9.  create image: 
glance image-create --name $1 --min-disk 90 --min-ram 4096 --disk-format qcow2 --container-format bare --property vm_mode=hvm --property hypervisor_type=kvm --property hw_qemu_guest_agent=yes --property architecture=x86_64 --property os_type=linux --property os_distro=rhel --property os_version=7.4 --property hw_disk_bus=virtio --property hw_scsi_model=virtio-scsi --property hw_rng_model=virtio --property hw_vif_model=virtio --property img-config-drive=mandatory --file /home/stack/images/$1
10.  Launch instance using image created above:
Nova boot --flavor 4x8x90x0x0 --image test.image --hint group=0be92344-0bc1-49f5-a391-2ae5c005d6ec --availability-zone nova --nic port-id=$cis01Port --security-group vSPC_Common_secgroup --config-drive True --file /etc/openldap/certs/createTLS.sh=createTLS.sh --file /home/ium/cis/initCIS.sh=initCIS.sh --user-data userData  test.instance

11. Security  for instance
•ALLOW IPv4 icmp from 0.0.0.0/0
•ALLOW IPv6 1-65535/tcp from ::/0
•ALLOW IPv6 to ::/0
•ALLOW IPv4 1-65535/udp from 0.0.0.0/0
•ALLOW IPv4 1-65535/tcp from 0.0.0.0/0
•ALLOW IPv6 1-65535/udp from ::/0
•ALLOW IPv6 icmp from ::/0
•ALLOW IPv4 to 0.0.0.0/0

12.    Log into instance and ping ipv6 gateway
ping6 2001:4888:a03:34c0:c0:a::1
Actual Results: 
no replay
Expected results:
[root@solktxesw06vspc-c-hp-cis-02 ~]# ping6 2001:4888:a03:34c0:c0:a::1
PING 2001:4888:a03:34c0:c0:a::1(2001:4888:a03:34c0:c0:a:0:1) 56 data bytes
64 bytes from 2001:4888:a03:34c0:c0:a:0:1: icmp_seq=1 ttl=63 time=1.76 ms
64 bytes from 2001:4888:a03:34c0:c0:a:0:1: icmp_seq=2 ttl=63 time=1.12 ms

Expected results:
expect to see virtual routeripv6 forwarding enabled

Additional info:
Execute this command  on each vrouter to correct:
ip netns exec <qrouter-5bc8bf56-4bcb-42cc-9c45-ace4432a88f1> sysctl -w net.ipv6.conf.all.forwarding=1 

We are not able to deliver updates to our product to the customer

This is documented in OSP7 Bug 1309319 as well

Comment 4 Red Hat Bugzilla 2023-09-14 05:26:18 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days