Bug 1836998

Summary: [OVN][DVR] Impossible to ping internet addresses from vm with FIP
Product: Red Hat OpenStack Reporter: Jakub Libosvar <jlibosva>
Component: python-networking-ovnAssignee: OSP Team <rhos-maint>
Status: CLOSED WONTFIX QA Contact: Eran Kuris <ekuris>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 13.0 (Queens)CC: apevec, ctrautma, dalvarez, ekuris, jamsmith, jishi, jlibosva, lhh, lorenzo.bianconi, majopela, rsafrono, scohen
Target Milestone: z12Keywords: Regression, Tracking, Triaged
Target Release: 13.0 (Queens)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Known Issue
Doc Text:
Because of a core OVN bug, virtual machines with floating IP (FIP) addresses cannot route to other networks in an ML2/OVN deployment with distributed virtual routing (DVR) enabled. Core OVN sets a bad next hop when routing SNAT IPv4 traffic from a VM with a floating ip with DVR enabled. Instead of the gateway IP, OVN sets the destination IP. As a result, the router sends an ARP request for an unknown IP instead of routing it to the gateway. + Before deploying a new overcloud with ML2/OVN, disable DVR by setting `NeutronEnableDVR: false` in an environment file. + If you have ML2/OVN in an existing deployment, perform the following steps: + . Set the `enable_distributed_floating_ip parameter` in the [ovs] section of neutron.conf to False. You should also set `NeutronEnableDVR: false` in an environment file used in any re-deployments so that the next re-deployment does not re-enable DVR. . Update the floating IP that requires external SNAT to work through the Neutron API (for example, by changing its description). + NOTE: Disabling DVR causes traffic to be centralized. All L3 traffic goes through the controller/network nodes. This may affect scale, data plane performance, and throughput.
Story Points: ---
Clone Of: 1836963 Environment:
Last Closed: 2023-07-18 10:44:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1834433, 1836976, 1840605    
Bug Blocks: