Bug 989645

Summary: Add VXLAN Support to the Open vSwitch Plugin
Product: Red Hat OpenStack Reporter: Perry Myers <pmyers>
Component: openstack-neutronAssignee: Assaf Muller <amuller>
Status: CLOSED CURRENTRELEASE QA Contact: Ofer Blaut <oblaut>
Severity: high Docs Contact:
Priority: high    
Version: 3.0CC: chrisw, hateya, lpeer, mlopes, oblaut, rkukura, sclewis, sputhenp, yeylon
Target Milestone: asyncKeywords: FutureFeature, OtherQA, ZStream
Target Release: 4.0   
Hardware: Unspecified   
OS: Unspecified   
URL: https://blueprints.launchpad.net/neutron/+spec/ovs-vxlan-lisp-tunnel
Whiteboard:
Fixed In Version: openstack-neutron-2013.2-0.3.b2.el6ost Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of:
: 1003413 (view as bug list) Environment:
Last Closed: 2013-12-20 13:39:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1010322    
Bug Blocks: 975499, 1003413, 1003415    
Attachments:
Description Flags
OVS logs
none
OVS logs working with GRE none

Comment 2 Ofer Blaut 2013-12-03 06:21:49 UTC
Created attachment 831888 [details]
OVS logs

VXLAN is not working,
DHCP request is not going out of the compute node to the DHCP server,
iptables is off and TCPDUMP doesn't show packets egress the compute node

Comment 4 Ofer Blaut 2013-12-03 10:04:40 UTC
Created attachment 831960 [details]
OVS logs working with GRE

Comment 8 Assaf Muller 2013-12-16 14:49:37 UTC
* Setup RHOS 4.0 latest repos (2013-12-12.1)
* Installed using Packstack: One controller (Everything on it), 2 additional * compute nodes. All 3 are VMs on different physical hosts running RHEL 6.5
* Disabled firewall on controller
* SELinux is in permissive mode
* Disabled firewall on compute nodes for VNC

* In /etc/neutron/plugin.ini, for all hypervisors:
  Under [OVS]
  tenant_network_type=vxlan
  tunnel_type=vxlan
  Under [AGENT]
  tunnel_types=vxlan

* On all hypervisors:
  ovs-vsctl emer-reset && service openstack-openvswitch-agent restart

* Deleted network that was created as GRE, recreated it

I have connectivity between instances running on different hypervisors.

Comment 9 Bob Kukura 2013-12-16 19:26:54 UTC
You shouldn't need to disable the firewall, but probably do need to open UDP port 4789 on all nodes where openvswitch-agent runs for VXLAN.

Comment 10 Assaf Muller 2013-12-17 08:39:50 UTC
Oh absolutely - I'm not suggesting to disable any firewalls, I'm just stating what steps I took to make it to work.

Comment 11 Ofer Blaut 2013-12-18 10:02:21 UTC
I have retested VXLAN on latest puddle with the same configuration as Assaf mentioned.

Traffic works between two VMs on different hosts 
Traffic works between VM and router and floating ip is used to gate the internet

openstack-neutron-2013.2-16.el6ost.noarch
openstack-neutron-openvswitch-2013.2-16.el6ost.noarch
kernel-2.6.32-431.1.2.el6.x86_64 

attached PCAP