Bug 2024599

Summary: [OSP16.2/RHEL8.4][ML2-OVN][Hw-Offload] DVR DNAT Floating IP connection is not offloaded to HW due to uncommitted Connection Tracking zone
Product: Red Hat OpenStack Reporter: Karrar Fida <kfida>
Component: openvswitchAssignee: Haresh Khandelwal <hakhande>
Status: VERIFIED --- QA Contact: Eran Kuris <ekuris>
Severity: high Docs Contact:
Priority: high    
Version: 16.2 (Train)CC: apevec, arn, bcafarel, chrisw, ctrautma, ekuris, hakhande, itailev, jiji, jishi, jlibosva, jraju, lhh, majopela, mleitner, nusiddiq, scohen, supadhya, twilson
Target Milestone: z3Keywords: TestOnly, Triaged
Target Release: 16.2 (Train on RHEL 8.4)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1984953 Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2043187    
Bug Blocks: 2131355    

Comment 11 Vadim Khitrin 2022-06-12 18:45:50 UTC 
Verified on RHOS-16.2-RHEL-8-20220603.n.1

Traffic with floating IP is offloaded:
[root@computehwoffload-0 ~]# cat /proc/net/nf_conntrack | grep 8789 | grep '10.10.119.64' | grep 'OFFLOAD'
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45832 dport=8789 src=10.10.119.64 dst=10.10.119.76 sport=8789 dport=45832 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=1 use=3
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45832 dport=8789 src=10.10.119.64 dst=20.20.220.194 sport=8789 dport=45832 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=9 use=3
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45834 dport=8789 src=10.10.119.64 dst=10.10.119.76 sport=8789 dport=45834 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=1 use=3
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45834 dport=8789 src=10.10.119.64 dst=20.20.220.194 sport=8789 dport=45834 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=9 use=27
ipv4     2 tcp      6 src=10.10.119.76 dst=10.10.119.64 sport=45832 dport=8789 src=20.20.220.136 dst=10.10.119.76 sport=8789 dport=45832 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=3 use=3
ipv4     2 tcp      6 src=10.10.119.76 dst=10.10.119.64 sport=45834 dport=8789 src=20.20.220.136 dst=10.10.119.76 sport=8789 dport=45834 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=3 use=3
[root@computehwoffload-0 ~]# cat /proc/net/nf_conntrack | grep 8030 | grep '10.10.119.67' | grep 'OFFLOAD'
ipv4     2 udp      17 src=20.20.220.140 dst=10.10.119.67 sport=8030 dport=8030 src=10.10.119.67 dst=10.10.119.90 sport=8030 dport=8030 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=3 use=3
ipv4     2 udp      17 src=20.20.220.140 dst=10.10.119.67 sport=8030 dport=8030 src=10.10.119.67 dst=20.20.220.140 sport=8030 dport=8030 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=9 use=3