Bug 1994624
| Summary: | [4.8.z backport] On an IPv6 single stack cluster traffic between master nodes is sent via default gw instead of local subnet | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Jaime Caamaño Ruiz <jcaamano> |
| Component: | Networking | Assignee: | Jaime Caamaño Ruiz <jcaamano> |
| Networking sub component: | ovn-kubernetes | QA Contact: | Ross Brattain <rbrattai> |
| Status: | CLOSED ERRATA | Docs Contact: | |
| Severity: | urgent | ||
| Priority: | unspecified | CC: | rbrattai |
| Version: | 4.8 | ||
| Target Milestone: | --- | ||
| Target Release: | 4.8.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
* Previously, when using IPv6 DHCP, node interface addresses might be leased with a `/128` prefix. Consequently, OVN-Kubernetes uses the same prefix to infer the node's network and routes any other address traffic, including traffic to other cluster nodes, through the gateway. With this update, OVN-Kubernetes inspects the node's routing table and checks for the wider routing entry for the node's interface address and uses that prefix to infer the node's network. As a result, traffic to other cluster nodes is no longer routed through the gateway. (link:https://bugzilla.redhat.com/show_bug.cgi?id=1994624[*BZ#1994624*])
|
Story Points: | --- |
| Clone Of: | 1980135 | Environment: | |
| Last Closed: | 2021-10-12 06:01:19 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1980135 | ||
| Bug Blocks: | |||
|
Description
Jaime Caamaño Ruiz
2021-08-17 14:57:18 UTC
Verified on 4.8.0-0.nightly-2021-10-06-061456
ovn-nbctl --no-leader-only --columns=_uuid,enabled,external_ids,ipv6_prefix,ipv6_ra_configs,mac,name,,networks --format=table find Logical_Router_Port
_uuid enabled external_ids ipv6_prefix ipv6_ra_configs mac name networks
------------------------------------ ------- ------------------------- ----------- --------------- ------------------- --------------------------------- -------------------------
371ebbc8-d199-483d-aedc-587b30190461 [] {gateway-physical-ip=yes} [] {} "52:54:00:9a:a7:53" rtoe-GR_master-0-0-o48e1-0.qe.lab ["fd2e:6f44:5dd8::71/64"]
b9836daa-75aa-4293-97d7-a931905344f7 [] {gateway-physical-ip=yes} [] {} "52:54:00:92:66:6f" rtoe-GR_master-0-1-o48e1-0.qe.lab ["fd2e:6f44:5dd8::89/64"]
c527de0b-27f3-4bbe-813b-b7fb60edf37d [] {gateway-physical-ip=yes} [] {} "52:54:00:7e:5c:e6" rtoe-GR_master-0-2-o48e1-0.qe.lab ["fd2e:6f44:5dd8::70/64"]
# ip l sh baremetal-0
260: baremetal-0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
link/ether 52:54:00:16:e9:1a brd ff:ff:ff:ff:ff:ff
# tcpdump -i baremetal-0 -ennn tcp port 6443 and ether host 52:54:00:16:e9:1a
dropped privs to tcpdump
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on baremetal-0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
^C
0 packets captured
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.8.14 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:3682 |