Bug 1422082 – Module ip_conntrack_proto_sctp should be loaded when using netfilter/conntrack [Pike]

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1422082 - Module ip_conntrack_proto_sctp should be loaded when using netfilter/conntrack [Pike]

Summary:	Module ip_conntrack_proto_sctp should be loaded when using netfilter/conntrac...

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	openstack-tripleo-heat-templates (Show other bugs)
Sub Component:
Version:	10.0 (Newton)
Hardware:	Unspecified Unspecified

Priority	medium Severity medium
Target Milestone:	ga
Target Release:	12.0 (Pike)
Assigned To:	Itzik Brown
QA Contact:	Itzik Brown
Docs Contact:

URL:
Whiteboard:
Keywords:	Triaged

Duplicates:	1450647 (view as bug list)
Depends On:
Blocks:	1426911 1426912
	Show dependency tree / graph

Reported:	2017-02-14 07:43 EST by Itzik Brown
Modified:	2018-10-18 03:24 EDT (History)
CC List:	7 users (show)

See Also:
Fixed In Version:	openstack-tripleo-heat-templates-7.0.0-0.20170616123155.el7ost
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Clones:	1426911 1426912 (view as bug list)
Environment:	N/A
Last Closed:	2017-12-13 16:08:54 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Launchpad	1664192	None	None	None	2017-02-14 07:43 EST
OpenStack gerrit	436964	None	None	None	2017-02-22 13:23 EST
Red Hat Product Errata	RHEA-2017:3462	normal	SHIPPED_LIVE	Red Hat OpenStack Platform 12.0 Enhancement Advisory	2018-02-15 20:43:25 EST

Groups: None (edit)

Description Itzik Brown 2017-02-14 07:43:03 EST

Description of problem:
When running SCTP and using conntrack (e.g. in OpenDaylight) there is a need to load the ip_conntrack_proto_sctp module in the overcloud nodes.


Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-5.2.0-3.el7ost.noarch
puppet-tripleo-5.5.0-2.el7ost.noarch

How reproducible:


Steps to Reproduce:
1.On the compute nodes run lsmod |grep nf_conntrack_proto_sctp
2.Verify the nf_conntrack_proto_sctp is not loaded
3.

Actual results:


Expected results:


Additional info:

Comment 2 Nir Yechiel 2017-02-22 13:19:02 EST

To clarify, the ip_conntrack_proto_sctp module is needed for all networking backends that implement Neutron Security Groups using OVS conntrack, so that they can match/filter based on SCTP traffic. This list currently include ML2/OVS (via the OVS firewall driver), OVN, and OpenDaylight.

Comment 3 Red Hat Bugzilla Rules Engine 2017-02-22 13:19:07 EST

This bugzilla has been removed from the release and needs to be reviewed and Triaged for another Target Release.

Comment 6 Nir Yechiel 2017-02-26 05:28:41 EST

Merged in master.

Comment 7 Ofer Blaut 2017-05-15 02:41:12 EDT

*** Bug 1450647 has been marked as a duplicate of this bug. ***

Comment 14 Itzik Brown 2017-12-11 08:12:38 EST

In RHEL 7.4 this is not a module anymore.
 
Verified by adding a security group rule with SCTP and Sending SCTP traffic between RHEL images.

On RHOS12 with OpenDaylight setup.
openstack-tripleo-heat-templates-7.0.3-10.el7ost.noarch

Comment 17 errata-xmlrpc 2017-12-13 16:08:54 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:3462

Note You need to log in before you can comment on or make changes to this bug.