Bug 1837558

Summary: [OVN][DVR] Impossible to ping internet addresses from vm with FIP
Product: Red Hat OpenStack Reporter: Jakub Libosvar <jlibosva>
Component: python-networking-ovnAssignee: RHOS Maint <rhos-maint>
Status: CLOSED EOL QA Contact: Eran Kuris <ekuris>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 16.0 (Train)CC: akaris, apevec, averi, batkisso, ctrautma, dalvarez, ekuris, gkadam, jamsmith, jishi, jlibosva, lhh, lorenzo.bianconi, majopela, mchappel, nlevinki, rsafrono, scohen
Target Milestone: asyncKeywords: Regression, Tracking, Triaged
Target Release: 16.0 (Train on RHEL 8.1)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Known Issue
Doc Text:
Because of a core OVN bug, virtual machines with floating IP (FIP) addresses cannot route to other networks in an ML2/OVN deployment with distributed virtual routing (DVR) enabled. Core OVN sets a bad next hop when routing SNAT IPv4 traffic from a VM with a floating ip with DVR enabled. Instead of the gateway IP, OVN sets the destination IP. As a result, the router sends an ARP request for an unknown IP instead of routing it to the gateway. + Before deploying a new overcloud with ML2/OVN, disable DVR by setting `NeutronEnableDVR: false` in an environment file. + If you have ML2/OVN in an existing deployment, perform the following steps: + . Set the `enable_distributed_floating_ip parameter` in the [ovs] section of neutron.conf to False. You should also set `NeutronEnableDVR: false` in an environment file used in any re-deployments so that the next re-deployment does not re-enable DVR. . Update the floating IP that requires external SNAT to work through the Neutron API (for example, by changing its description). + NOTE: Disabling DVR causes traffic to be centralized. All L3 traffic goes through the controller/network nodes. This may affect scale, data plane performance, and throughput.
Story Points: ---
Clone Of: 1836963 Environment:
Last Closed: 2021-07-04 09:19:46 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1834433    
Bug Blocks:    

Comment 4 Jakub Libosvar 2020-06-11 09:00:02 UTC
This BZ is a tracker to make sure we include ovn2.11-2.11.1-47.el7fdn into ovn images for OSP 16 compose.

Comment 6 Jakub Libosvar 2020-06-30 11:34:58 UTC
*** Bug 1851731 has been marked as a duplicate of this bug. ***

Comment 7 Andrea Veri 2020-12-02 11:54:11 UTC
Hello!

Is this specific bug fixed on the latest OSP 16.1.2 release?

()[root@controller-1 /]# rpm -qa | grep ovn
ovn2.13-host-2.13.0-37.el8fdp.x86_64
ovn2.13-2.13.0-37.el8fdp.x86_64

Thanks!

Comment 8 Roman Safronov 2020-12-02 12:19:58 UTC
(In reply to Andrea Veri from comment #7)
> Hello!
> 
> Is this specific bug fixed on the latest OSP 16.1.2 release?
> 
> ()[root@controller-1 /]# rpm -qa | grep ovn
> ovn2.13-host-2.13.0-37.el8fdp.x86_64
> ovn2.13-2.13.0-37.el8fdp.x86_64
> 
> Thanks!

It's fixed on OSP16.1.2, see https://bugzilla.redhat.com/show_bug.cgi?id=1836963