Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1395153 - the route is unreachable via F5 server if the route name is different from the service name
the route is unreachable via F5 server if the route name is different from th...
Status: CLOSED ERRATA
Product: OpenShift Container Platform
Classification: Red Hat
Component: Routing (Show other bugs)
3.4.0
Unspecified Unspecified
high Severity medium
: ---
: ---
Assigned To: Rajat Chopra
zhaozhanqi
: Regression
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2016-11-15 04:53 EST by hongli
Modified: 2017-03-08 13 EST (History)
4 users (show)

See Also:
Fixed In Version:
Doc Type: No Doc Update
Doc Text:
undefined
Story Points: ---
Clone Of:
Environment:
Last Closed: 2017-01-18 07:55:01 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Origin (Github) 11921 None None None 2016-11-16 11:12 EST
Red Hat Product Errata RHBA-2017:0066 normal SHIPPED_LIVE Red Hat OpenShift Container Platform 3.4 RPM Release Advisory 2017-01-18 12:23:26 EST

  None (edit)
Description hongli 2016-11-15 04:53:40 EST
Description of problem:
the route is unreachable via F5 server if the route name is different from the service name.


Version-Release number of selected component (if applicable):
openshift v3.4.0.26+f7e109e
kubernetes v1.4.0+776c994
etcd 3.1.0-rc.0


How reproducible:
always

Steps to Reproduce:
1. oadm router f5router...
2. create pod and service
3. create route which route name is different from service name, like below:

[root@hongli-f5-master ~]# oc get route -n u1p1
NAME               HOST/PORT                                                PATH      SERVICES           PORT      TERMINATION
myroute            www.example.com                                                    service-unsecure   http      

Actual results:
Failed to curl the route.
#curl --resolve www.example.com:80:192.168.55.116 http://www.example.com
curl: (56) Recv failure: Connection reset by peer


Expected results:
curl should be successful


Additional info:
1. no this issue in v3.2.2.2 f5-router image
2. v3.3.1.4 f5-router image also has this issue
3. it is ok if route name same to service name, see example below (both name are called "service-unsecure")

NAME               HOST/PORT                                                PATH      SERVICES           PORT      TERMINATION
service-unsecure   www.example.com                                                    service-unsecure   http      

Then curl can get the result as expected:
curl --resolve www.example.com:80:192.168.55.116 http://www.example.com
Hello-OpenShift-1 http-8080
Comment 1 Rajat Chopra 2016-11-15 15:01:50 EST
Fix: https://github.com/openshift/origin/pull/11921
Comment 2 hongli 2016-11-17 01:46:25 EST
verified in v3.4.0.27 and the issue has been fixed.

openshift v3.4.0.27+dffa95c
kubernetes v1.4.0+776c994
etcd 3.1.0-rc.0
Comment 3 Troy Dawson 2016-11-17 09:31:52 EST
This has been merged into ocp and is in OCP v3.4.0.27 or newer.
Comment 6 errata-xmlrpc 2017-01-18 07:55:01 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:0066

Note You need to log in before you can comment on or make changes to this bug.