Bug 2245944

Summary: Revisit OVN's logic of flushing conntrack for LR
Product: Red Hat Enterprise Linux Fast Datapath Reporter: OVN Bot <ovn-bot>
Component: ovn23.09Assignee: lorenzo bianconi <lorenzo.bianconi>
Status: CLOSED ERRATA QA Contact: ying xu <yinxu>
Severity: medium Docs Contact:
Priority: medium    
Version: FDP 23.DCC: amusil, ctrautma, jiji, lorenzo.bianconi, mmichels
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovn23.09-23.09.0-41.el9fdp Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-01-24 11:18:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OVN Bot 2023-10-24 17:17:00 UTC
This is an automatically-generated clone of issue https://bugzilla.redhat.com/show_bug.cgi?id=2193323

Comment 3 ying xu 2023-12-05 06:48:36 UTC
verified on version:
# rpm -qa|grep ovn
ovn23.09-23.09.0-73.el9fdp.x86_64
ovn23.09-central-23.09.0-73.el9fdp.x86_64
ovn23.09-host-23.09.0-73.el9fdp.x86_64




# ovn-nbctl lb-add lb1 172.16.1.101:8080 192.168.1.2:80,192.168.2.2:80 udp -- set load_balancer lb1 options:ct_flush=true
[root@dell-per740-53 load_balance]# ovn-nbctl lr-lb-add R2 lb1
[root@dell-per740-53 load_balance]# 
[root@dell-per740-53 load_balance]# 
[root@dell-per740-53 load_balance]# ip netns exec alice1 ncat --udp 172.16.1.101 8080 <<< h
[root@dell-per740-53 load_balance]# ip netns exec alice1 ncat --udp 172.16.1.101 8080 <<< h
[root@dell-per740-53 load_balance]# ip netns exec alice1 ncat --udp 172.16.1.101 8080 <<< h
[root@dell-per740-53 load_balance]# ip netns exec alice1 ncat --udp 172.16.1.101 8080 <<< h
[root@dell-per740-53 load_balance]# ip netns exec alice1 ncat --udp 172.16.1.101 8080 <<< h
[root@dell-per740-53 load_balance]# ip netns exec alice1 ncat --udp 172.16.1.101 8080 <<< h
[root@dell-per740-53 load_balance]# ovs-appctl dpctl/dump-conntrack|grep udp.*172.16.1.10
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=60102,dport=8080),reply=(src=192.168.1.2,dst=172.16.1.3,sport=80,dport=60102),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=49471,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=49471),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=46900,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=46900),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=44087,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=44087),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=57879,dport=8080),reply=(src=192.168.1.2,dst=172.16.1.3,sport=80,dport=57879),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=56608,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=56608),zone=3,mark=2
[root@dell-per740-53 load_balance]# ovs-appctl dpctl/dump-conntrack|grep udp.*172.16.1.10
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=60102,dport=8080),reply=(src=192.168.1.2,dst=172.16.1.3,sport=80,dport=60102),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=49471,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=49471),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=46900,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=46900),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=44087,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=44087),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=57879,dport=8080),reply=(src=192.168.1.2,dst=172.16.1.3,sport=80,dport=57879),zone=3,mark=2
udp,orig=(src=172.16.1.3,dst=172.16.1.101,sport=56608,dport=8080),reply=(src=192.168.2.2,dst=172.16.1.3,sport=80,dport=56608),zone=3,mark=2
[root@dell-per740-53 load_balance]# ovn-nbctl lb-del lb1
[root@dell-per740-53 load_balance]# ovs-appctl dpctl/dump-conntrack|grep udp.*172.16.1.10
[root@dell-per740-53 load_balance]# 


set verified.

Comment 5 errata-xmlrpc 2024-01-24 11:18:13 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ovn23.09 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2024:0392