Bug 1779115

Summary:	[OVN] Traffic not getting blocked when it should within the same Logical Switch
Product:	Red Hat Enterprise Linux Fast Datapath	Reporter:	Dumitru Ceara <dceara>
Component:	ovn2.12	Assignee:	Dumitru Ceara <dceara>
Status:	CLOSED ERRATA	QA Contact:	ying xu <yinxu>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	FDP 19.G	CC:	ctrautma, dalvarez, dceara, jishi, kfida, ralongi, yinxu
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1778164	Environment:
Last Closed:	2020-01-21 06:20:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1778164
Bug Blocks:

Comment 3 ying xu 2019-12-19 06:20:56 UTC

reproduced on version ovn2.12-15
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   ovn_test_port_group_change
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-nbctl show' (Expected 0, got 0)
:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-sbctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovs-vsctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg1 ports="f73abfe3-ced4-4786-81cc-0e6bd87bafda caddb3ec-6cfb-47f5-ac4b-261da1054573"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg2 ports="ca16596c-dbe4-42a3-bd93-a8e2239c1ce4"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl list Port_Group' (Expected 0, got 0)
:: [ 00:49:38 ] :: [   PASS   ] :: hv1 vm0 ping others pass. 
:: [ 00:50:14 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:50:25 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:50:36 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm1 pass. 
:: [ 00:56:12 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:56:44 ] :: [   PASS   ] :: hv1 vm0 can't ping hv0 vm1 pass. 
:: [ 00:56:55 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:57:03 ] :: [   PASS   ] :: Command 'ovn_port_group_change' (Expected 0, got 0)


verified on version ovn2.12-19
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   ovn_test_port_group_change
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-nbctl show' (Expected 0, got 0)
:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-sbctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovs-vsctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg1 ports="f73abfe3-ced4-4786-81cc-0e6bd87bafda caddb3ec-6cfb-47f5-ac4b-261da1054573"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg2 ports="ca16596c-dbe4-42a3-bd93-a8e2239c1ce4"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl list Port_Group' (Expected 0, got 0)
:: [ 00:49:38 ] :: [   PASS   ] :: hv1 vm0 ping others pass. 
:: [ 00:50:14 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:50:25 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:50:36 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm1 pass. 
:: [ 00:56:12 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:56:44 ] :: [   PASS   ] :: hv1 vm0 can't ping hv0 vm1 pass. 
:: [ 00:56:55 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:57:03 ] :: [   PASS   ] :: Command 'ovn_port_group_change' (Expected 0, got 0)

Comment 4 ying xu 2019-12-19 06:23:55 UTC

sorry for the mistake.

reproduced on version ovn2.12-15
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   ovn_test_port_group_change
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 21:36:43 ] :: [   PASS   ] :: Command 'ovn-nbctl show' (Expected 0, got 0)
:: [ 21:36:43 ] :: [   PASS   ] :: Command 'ovn-sbctl show' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovs-vsctl show' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg1 ports="bc7934f6-e63c-4f70-80c8-6e3ead79d4b3 2bffe56d-8381-4986-9850-d2165013f100"' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg2 ports="af49d0ea-c454-4eab-a303-7674a2eb9539"' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovn-nbctl list Port_Group' (Expected 0, got 0)
:: [ 21:40:35 ] :: [   PASS   ] :: hv1 vm0 ping others pass. 
:: [ 21:41:11 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 21:41:23 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 21:41:34 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm1 pass. 
:: [ 21:42:10 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 21:42:21 ] :: [   FAIL   ] :: hv1 vm0 ping hv0 vm1 pass,but should fail. 
:: [ 21:42:33 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 21:42:40 ] :: [   PASS   ] :: Command 'ovn_port_group_change' (Expected 0, got 0)
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Comment 6 errata-xmlrpc 2020-01-21 06:20:15 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0167