Bug 2171906

Summary: permitted_ethertypes doesn't work as expected even though the flows are present
Product: Red Hat OpenStack Reporter: David Hill <dhill>
Component: openstack-neutronAssignee: Rodolfo Alonso <ralonsoh>
Status: ON_QA --- QA Contact: Bharath M V <bmv>
Severity: high Docs Contact:
Priority: high    
Version: 16.2 (Train)CC: aruffin, averdagu, chrisw, jjoyce, jmitterm, mburns, mflusche, ralonsoh, schhabdi, scohen
Target Milestone: z6Keywords: Triaged
Target Release: 16.2 (Train on RHEL 8.4)Flags: dhill: needinfo-
ralonsoh: needinfo? (stepma2)
Hardware: x86_64   
OS: All   
Whiteboard:
Fixed In Version: openstack-neutron-15.3.5-2.20230711185017.63bac0f.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description David Hill 2023-02-20 20:14:33 UTC 
Description of problem:
permitted_ethertypes doesn't work as expected even though the flows are present:
~~~
 cookie=0x8fb7fcf7f9710893, duration=95846.751s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x21,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.751s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x21,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.751s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x21,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.561s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x23,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.561s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x23,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.561s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x23,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.454s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x24,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.454s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x24,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.454s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x24,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.315s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x26,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.315s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x26,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.315s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x26,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.191s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x28,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.191s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x28,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.191s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x28,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.084s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x22,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.083s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x22,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.083s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x22,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.590s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x29,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.590s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x29,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.590s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x29,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.412s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2c,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.412s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2c,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.412s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2c,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.298s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2d,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.298s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2d,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.298s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2d,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.165s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2a,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.164s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2a,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.164s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2a,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.002s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2b,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.002s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2b,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.002s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2b,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95839.481s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2e,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95839.481s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2e,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95839.481s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2e,dl_type=0x4008 actions=resubmit(,94)
~~~

Version-Release number of selected component (if applicable):
Latest 16.2.4

How reproducible:
This customer at least

Steps to Reproduce:
1.  Add etertype 0x4008 with port security enabled
2.
3.

Actual results:
Packets are blocked

Expected results:
No packets should be blocked

Additional info:
Comment 3 Stephen Ma 2023-02-21 16:39:34 UTC 
How to reproduce: In addition to having port-security enabled on the sending and receiving ports, the VM sending the packets and the VM receiving the packets are HOSTED ON DIFFERENT compute nodes.
Comment 7 Rodolfo Alonso 2023-03-03 11:44:28 UTC 
Hi Stephen:

Along with the information provided, can you share in the customer case the datapath port information of the receiver host (compute-2)? I would like to match the dp flows and the OVS ports.
  $ ovs-appctl dpctl/dump-flows

Regards.