Bug 1422082 - Module ip_conntrack_proto_sctp should be loaded when using netfilter/conntrack [Pike]
Summary: Module ip_conntrack_proto_sctp should be loaded when using netfilter/conntrac...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 10.0 (Newton)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ga
: 12.0 (Pike)
Assignee: Itzik Brown
QA Contact: Itzik Brown
URL:
Whiteboard:
: 1450647 (view as bug list)
Depends On:
Blocks: 1426911 1426912
TreeView+ depends on / blocked
 
Reported: 2017-02-14 12:43 UTC by Itzik Brown
Modified: 2018-10-18 07:24 UTC (History)
7 users (show)

Fixed In Version: openstack-tripleo-heat-templates-7.0.0-0.20170616123155.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1426911 1426912 (view as bug list)
Environment:
N/A
Last Closed: 2017-12-13 21:08:54 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1664192 0 None None None 2017-02-14 12:43:02 UTC
OpenStack gerrit 436964 0 None None None 2017-02-22 18:23:00 UTC
Red Hat Product Errata RHEA-2017:3462 0 normal SHIPPED_LIVE Red Hat OpenStack Platform 12.0 Enhancement Advisory 2018-02-16 01:43:25 UTC

Description Itzik Brown 2017-02-14 12:43:03 UTC 
Description of problem:
When running SCTP and using conntrack (e.g. in OpenDaylight) there is a need to load the ip_conntrack_proto_sctp module in the overcloud nodes.


Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-5.2.0-3.el7ost.noarch
puppet-tripleo-5.5.0-2.el7ost.noarch

How reproducible:


Steps to Reproduce:
1.On the compute nodes run lsmod |grep nf_conntrack_proto_sctp
2.Verify the nf_conntrack_proto_sctp is not loaded
3.

Actual results:


Expected results:


Additional info:
Comment 2 Nir Yechiel 2017-02-22 18:19:02 UTC 
To clarify, the ip_conntrack_proto_sctp module is needed for all networking backends that implement Neutron Security Groups using OVS conntrack, so that they can match/filter based on SCTP traffic. This list currently include ML2/OVS (via the OVS firewall driver), OVN, and OpenDaylight.
Comment 3 Red Hat Bugzilla Rules Engine 2017-02-22 18:19:07 UTC 
This bugzilla has been removed from the release and needs to be reviewed and Triaged for another Target Release.
Comment 6 Nir Yechiel 2017-02-26 10:28:41 UTC 
Merged in master.
Comment 7 Ofer Blaut 2017-05-15 06:41:12 UTC 
*** Bug 1450647 has been marked as a duplicate of this bug. ***
Comment 14 Itzik Brown 2017-12-11 13:12:38 UTC 
In RHEL 7.4 this is not a module anymore.
 
Verified by adding a security group rule with SCTP and Sending SCTP traffic between RHEL images.

On RHOS12 with OpenDaylight setup.
openstack-tripleo-heat-templates-7.0.3-10.el7ost.noarch
Comment 17 errata-xmlrpc 2017-12-13 21:08:54 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:3462
Note You need to log in before you can comment on or make changes to this bug.