Bug 2093842

Summary:	[RFE] Sample all packet drops
Product:	Red Hat Enterprise Linux Fast Datapath	Reporter:	Adrián Moreno <amorenoz>
Component:	OVN	Assignee:	OVN Team <ovnteam>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Jianlin Shi <jishi>
Severity:	unspecified	Docs Contact:
Priority:	high
Version:	FDP 20.E	CC:	ctrautma, dceara, jiji, mmichels
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-07-28 17:39:05 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Adrián Moreno 2022-06-06 07:59:36 UTC

Sometimes it's difficult to know what packets are being dropped by OVN and why. Two main reasons arise:

- Some drops are implicit. Some tables do not have an explicit drop action so packets that do not match any lflow are silently dropped by OVS.
- We lack packet information from explicit drops that would help debug why the packet was actually dropped.

In order to help debugging OVN issues, the proposal is to:
* Add a config flag that makes ovn-northd add an explicit drop action to all tables if needed
* Allow OVN to add a "sample" action to those explicit drop actions so dropped packets can be collected by an IPFIX collector. That way, they can be visualized and the header information can be used to further troubleshoot the problem.

This was a suggestion by Tim Rozet in a demo about per-flow OVN sampling.
Related to BZ2038867.

Comment 1 Adrián Moreno 2022-06-06 08:01:12 UTC

RFC sent: https://patchwork.ozlabs.org/project/ovn/cover/20220425111724.2981776-1-amorenoz@redhat.com/

Comment 2 Mark Michelson 2023-07-28 17:39:05 UTC

I'm closing this since the feature has been implemented and merged into OVN. This bug slipped through the cracks and we did not close it earlier.