Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1450647

Summary:	"other protocols" conntrack should be enabled by default
Product:	Red Hat OpenStack	Reporter:	Alexander Stafeyev <astafeye>
Component:	openstack-tripleo-heat-templates	Assignee:	Emilien Macchi <emacchi>
Status:	CLOSED DUPLICATE	QA Contact:	Arik Chernetsky <achernet>
Severity:	high	Docs Contact:
Priority:	medium
Version:	11.0 (Ocata)	CC:	abregman, amuller, chrisw, mburns, nyechiel, oblaut, rhel-osp-director-maint, srevivo
Target Milestone:	Upstream M3	Keywords:	Triaged
Target Release:	12.0 (Pike)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-05-15 06:41:12 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Alexander Stafeyev 2017-05-14 11:21:59 UTC

Description of problem:
In order to enable  sctp security group using ovs-conntrack (ovs FW driver) we need to enable this manually on the compute nodes as following: 

  modprobe ip_conntrack_proto_sctp

Version-Release number of selected component (if applicable):
rhos 11 

How reproducible:
100%



Actual results:
We need to enable "other protocols" for conntrack support

Expected results:
If we did not have to enable any other protocols in previos FW driver ' the same should be with the ovs FW driver. 

Director should enable this by default when setting the fw driver to ovs.

Comment 1 Arie Bregman 2017-05-14 19:10:50 UTC

This module already loaded:

https://github.com/openstack/tripleo-heat-templates/blob/master/puppet/services/kernel.yaml#L38

Comment 2 Ofer Blaut 2017-05-15 06:41:12 UTC


*** This bug has been marked as a duplicate of bug 1422082 ***