Bug 2214303

Summary:	OSP Tracker: stateless traffic is sent to conntrack when LB is present
Product:	Red Hat OpenStack	Reporter:	Eduardo Olivares <eolivare>
Component:	openstack-neutron	Assignee:	Ihar Hrachyshka <ihrachys>
Status:	VERIFIED ---	QA Contact:	Eduardo Olivares <eolivare>
Severity:	high	Docs Contact:
Priority:	high
Version:	17.1 (Wallaby)	CC:	chrisw, ekuris, gregraka, gurpsing, ihrachys, jamsmith, mblue, scohen, skaplons
Target Milestone:	ga	Keywords:	TestOnly, Triaged
Target Release:	17.1	Flags:	eolivare: needinfo? (jamsmith)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ovn22.12-22.12.0-94.el8fdp	Doc Type:	Known Issue
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2215137
Bug Blocks:	1827598

Comment 1 Ihar Hrachyshka 2023-06-12 20:00:25 UTC

Please list ACL object in OVN northbound database. Thanks. I wonder if you have any `allow-related` ACL objects there.

Please also attach the output of `ovs-ofctl dump-flows br-int` for the node hosting the VM.

It may also help if you have access to the node so that I can check it live. Thanks.

Comment 9 Ihar Hrachyshka 2023-06-20 16:31:54 UTC

There's a OVN 22.12 build in brew available for the fix. Moving to MODIFIED.