Description of problem:
When we are trying to use FIP traffic to instances on OVN-DVR setup while using VLAN tenant network type the traffic does not pass.
Because of limitations with VLAN tenant network type, we can't have distributed VLAN routing.
Vlan routing is centralized whether the deployment is DVR or not
Version-Release number of selected component (if applicable):
OpenStack/13.0-RHEL-7/2019-04-23.1
python-networking-ovn-metadata-agent-4.0.3-6.el7ost.noarch
openvswitch-ovn-host-2.9.0-103.el7fdp.x86_64
puppet-ovn-12.4.0-2.el7ost.noarch
python-networking-ovn-4.0.3-6.el7ost.noarch
novnc-0.6.1-1.el7ost.noarch
openvswitch-ovn-central-2.9.0-103.el7fdp.x86_64
openvswitch-ovn-common-2.9.0-103.el7fdp.x86_64
How reproducible:
100%
Steps to Reproduce:
1. Deploy OVN-DVR setup with VLAN tenant network type support
2. Create a VLAN network
3. Create an External network with a router
4. Boot instance & Assign FIP to the VM
5. open security group access
Ping to the FIP of the instance.
Actual results:
Traffic blocked
Expected results:
Traffic pass
Additional info:
python-networking-ovn should not set external_mac in the NAT table for the FIP which belongs to the logical port of a VLAN tenant logical switch.
Otherwise, the compute node which is binding the logical port will send the GARP where as the routing for VLAN tenant networks is centralized.