Bug 1837558
Summary: | [OVN][DVR] Impossible to ping internet addresses from vm with FIP | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Jakub Libosvar <jlibosva> |
Component: | python-networking-ovn | Assignee: | RHOS Maint <rhos-maint> |
Status: | CLOSED EOL | QA Contact: | Eran Kuris <ekuris> |
Severity: | urgent | Docs Contact: | |
Priority: | urgent | ||
Version: | 16.0 (Train) | CC: | akaris, apevec, averi, batkisso, ctrautma, dalvarez, ekuris, gkadam, jamsmith, jishi, jlibosva, lhh, lorenzo.bianconi, majopela, mchappel, nlevinki, rsafrono, scohen |
Target Milestone: | async | Keywords: | Regression, Tracking, Triaged |
Target Release: | 16.0 (Train on RHEL 8.1) | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Known Issue | |
Doc Text: |
Because of a core OVN bug, virtual machines with floating IP (FIP) addresses cannot route to other networks in an ML2/OVN deployment with distributed virtual routing (DVR) enabled. Core OVN sets a bad next hop when routing SNAT IPv4 traffic from a VM with a floating ip with DVR enabled. Instead of the gateway IP, OVN sets the destination IP. As a result, the router sends an ARP request for an unknown IP instead of routing it to the gateway.
+
Before deploying a new overcloud with ML2/OVN, disable DVR by setting `NeutronEnableDVR: false` in an environment file.
+
If you have ML2/OVN in an existing deployment, perform the following steps:
+
. Set the `enable_distributed_floating_ip parameter` in the [ovs] section of neutron.conf to False. You should also set `NeutronEnableDVR: false` in an environment file used in any re-deployments so that the next re-deployment does not re-enable DVR.
. Update the floating IP that requires external SNAT to work through the Neutron API (for example, by changing its description).
+
NOTE: Disabling DVR causes traffic to be centralized. All L3 traffic goes through the controller/network nodes. This may affect scale, data plane performance, and throughput.
|
Story Points: | --- |
Clone Of: | 1836963 | Environment: | |
Last Closed: | 2021-07-04 09:19:46 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1834433 | ||
Bug Blocks: |
Comment 4
Jakub Libosvar
2020-06-11 09:00:02 UTC
*** Bug 1851731 has been marked as a duplicate of this bug. *** Hello! Is this specific bug fixed on the latest OSP 16.1.2 release? ()[root@controller-1 /]# rpm -qa | grep ovn ovn2.13-host-2.13.0-37.el8fdp.x86_64 ovn2.13-2.13.0-37.el8fdp.x86_64 Thanks! (In reply to Andrea Veri from comment #7) > Hello! > > Is this specific bug fixed on the latest OSP 16.1.2 release? > > ()[root@controller-1 /]# rpm -qa | grep ovn > ovn2.13-host-2.13.0-37.el8fdp.x86_64 > ovn2.13-2.13.0-37.el8fdp.x86_64 > > Thanks! It's fixed on OSP16.1.2, see https://bugzilla.redhat.com/show_bug.cgi?id=1836963 |