Bug 2115335

Summary: [ovn-dvr] dnat_snat traffic becomes centralized during VIP assigned for first time
Product: Red Hat Enterprise Linux Fast Datapath Reporter: OVN Bot <ovn-bot>
Component: ovn22.06Assignee: Mohammad Heib <mheib>
Status: CLOSED ERRATA QA Contact: Jianlin Shi <jishi>
Severity: high Docs Contact:
Priority: high    
Version: FDP 20.ACC: apevec, averdagu, bcafarel, ctrautma, dceara, jiji, lhh, majopela, mheib, mlavalle, ralonsoh, scohen
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovn22.06-22.06.0-30.el9fdp Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-10-11 13:02:20 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OVN Bot 2022-08-04 12:38:04 UTC
This is an automatically-generated clone of issue https://bugzilla.redhat.com/show_bug.cgi?id=2099288

Comment 3 Jianlin Shi 2022-09-21 06:03:20 UTC
reproduced on ovn22.06-22.06.0-27.el9:

[root@dell-per740-66 bz2099288]# rpm -qa | grep -E "openvswitch2.17|ovn22.06"                         
ovn22.06-22.06.0-27.el9fdp.x86_64                                                                     
openvswitch2.17-2.17.0-43.el9fdp.x86_64                                                               
ovn22.06-central-22.06.0-27.el9fdp.x86_64                                                             
ovn22.06-host-22.06.0-27.el9fdp.x86_64

+ ovn-sbctl list port_binding ls1-vir                                                                 
_uuid               : ab2e80d8-8c02-40f6-baee-7033ea5c3fc8
additional_chassis  : []                           
additional_encap    : []                                                                              
chassis             : []                                                                              
datapath            : 3403f4d0-6c44-4184-83d6-48ac4e87e5d7
encap               : []                           
external_ids        : {}                           
gateway_chassis     : []                           
ha_chassis_group    : []                           
logical_port        : ls1-vir                                                                         
mac                 : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
nat_addresses       : []                                                                              
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_port         : []                           
port_security       : []                           
requested_additional_chassis: []                                                                      
requested_chassis   : []                           
tag                 : []                           
tunnel_key          : 3                            
type                : virtual                      
up                  : false  
virtual_parent      : []                                                                              
+ ip netns exec ls1p1 ip addr add 192.168.1.11/24 dev ls1p1
+ ip netns exec ls1p1 arping -U -I ls1p1 -c 1 192.168.1.11                      
ARPING 192.168.1.11 from 192.168.1.11 ls1p1                                                           
Sent 1 probes (1 broadcast(s))                     
Received 0 response(s)                             
+ sleep 2                                          
+ ovn-sbctl list port_binding ls1-vir              
_uuid               : ab2e80d8-8c02-40f6-baee-7033ea5c3fc8
additional_chassis  : []                           
additional_encap    : []                           
chassis             : 532f7517-75f5-4ff3-99fd-d2fe01a997b7                      
datapath            : 3403f4d0-6c44-4184-83d6-48ac4e87e5d7                                            
encap               : []                           
external_ids        : {}                           
gateway_chassis     : []                           
ha_chassis_group    : []                           
logical_port        : ls1-vir    
mac                 : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
nat_addresses       : []                           
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_port         : []                           
port_security       : []                           
requested_additional_chassis: []
requested_chassis   : []                           
tag                 : []                           
tunnel_key          : 3                            
type                : virtual
up                  : true
virtual_parent      : ls1p1
+ ovn-nbctl set logical_switch_port ls1-vir 'type=""'
+ ovn-nbctl list logical_switch_port ls1-vir
_uuid               : a0b6ce43-b9a5-4982-aa81-0c126104acf2
addresses           : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
dhcpv4_options      : []
dhcpv6_options      : []
dynamic_addresses   : [] 
enabled             : [] 
external_ids        : {}
ha_chassis_group    : []
name                : ls1-vir
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_name         : []
port_security       : []
tag                 : []
tag_request         : []
type                : ""
up                  : false
+ ovn-nbctl --wait=hv sync
+ ovn-sbctl list port_binding ls1-vir
_uuid               : ab2e80d8-8c02-40f6-baee-7033ea5c3fc8
additional_chassis  : []
additional_encap    : []
chassis             : []
datapath            : 3403f4d0-6c44-4184-83d6-48ac4e87e5d7
encap               : []
external_ids        : {}
gateway_chassis     : []
ha_chassis_group    : []
logical_port        : ls1-vir
mac                 : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
nat_addresses       : []
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_port         : [] 
port_security       : []
requested_additional_chassis: []
requested_chassis   : [] 
tag                 : [] 
tunnel_key          : 3
type                : ""
up                  : true

<=== up is still true

virtual_parent      : []

Verified on ovn22.06-22.06.0-57.el9:

[root@dell-per740-66 bz2099288]# rpm -qa | grep -E "openvswitch2.17|ovn22.06"
openvswitch2.17-2.17.0-43.el9fdp.x86_64
ovn22.06-22.06.0-57.el9fdp.x86_64
ovn22.06-central-22.06.0-57.el9fdp.x86_64
ovn22.06-host-22.06.0-57.el9fdp.x86_64

+ ovn-sbctl list port_binding ls1-vir                                                                 
_uuid               : 334429e2-421f-4bd9-9eae-9208a5710dad
additional_chassis  : []     
additional_encap    : []                                                                              
chassis             : []                                                                              
datapath            : 4e68a1c7-01d2-409a-a9bd-04c5f7629221
encap               : []
external_ids        : {}
gateway_chassis     : []
ha_chassis_group    : []     
logical_port        : ls1-vir                                                                         
mac                 : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
nat_addresses       : []                                                                              
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_port         : []
port_security       : []        
requested_additional_chassis: []                                                                      
requested_chassis   : []
tag                 : []
tunnel_key          : 3      
type                : virtual
up                  : false  
virtual_parent      : []                                                                              
+ ip netns exec ls1p1 ip addr add 192.168.1.11/24 dev ls1p1
+ ip netns exec ls1p1 arping -U -I ls1p1 -c 1 192.168.1.11                      
ARPING 192.168.1.11 from 192.168.1.11 ls1p1                                                           
Sent 1 probes (1 broadcast(s))
Received 0 response(s)          
+ sleep 2               
+ ovn-sbctl list port_binding ls1-vir
_uuid               : 334429e2-421f-4bd9-9eae-9208a5710dad
additional_chassis  : []
additional_encap    : []     
chassis             : 900f352d-f411-484f-af88-fc1584188f1a                      
datapath            : 4e68a1c7-01d2-409a-a9bd-04c5f7629221                                                                                                                                                  
encap               : []               
external_ids        : {}         
gateway_chassis     : []                 
ha_chassis_group    : []              
logical_port        : ls1-vir    
mac                 : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
nat_addresses       : []
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_port         : []
port_security       : []
requested_additional_chassis: []
requested_chassis   : []
tag                 : []
tunnel_key          : 3
type                : virtual
up                  : true
virtual_parent      : ls1p1
+ ovn-nbctl set logical_switch_port ls1-vir 'type=""'
+ ovn-nbctl list logical_switch_port ls1-vir
_uuid               : a6190182-fa65-4261-8443-fcffb9ef3c7c
addresses           : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
dhcpv4_options      : []
dhcpv6_options      : []
dynamic_addresses   : []
enabled             : []
external_ids        : {}
ha_chassis_group    : []
name                : ls1-vir
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_name         : []
port_security       : []
tag                 : []
tag_request         : []
type                : ""
up                  : false
+ ovn-nbctl --wait=hv sync
+ ovn-sbctl list port_binding ls1-vir
_uuid               : e1f238d3-4037-482c-a482-82e2392378f0
additional_chassis  : []
additional_encap    : []
chassis             : []
datapath            : 4e68a1c7-01d2-409a-a9bd-04c5f7629221
encap               : []
external_ids        : {}
gateway_chassis     : []
ha_chassis_group    : []
logical_port        : ls1-vir
mac                 : ["00:00:00:01:01:11 192.168.1.11 2001::11"]
nat_addresses       : []
options             : {virtual-ip="192.168.1.11", virtual-parents="ls1p1,ls1p2"}
parent_port         : []
port_security       : []
requested_additional_chassis: []
requested_chassis   : []
tag                 : []
tunnel_key          : 5
type                : ""
up                  : false
virtual_parent      : []

Comment 4 Jianlin Shi 2022-09-29 05:14:54 UTC
set VERIFIED per comment 3

Comment 6 errata-xmlrpc 2022-10-11 13:02:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ovn22.06 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:6880