Description of problem: OpenDaylight Carbon includes support for SNAT via Conntrack along with the existing mechanism which is Controller based. However, SNAT conntrack is not enabled by default. Inorder to use SNAT Conntrack mode, one has to explicitly set "conntrack" (PSB) in "etc/opendaylight/datastore/initial/config/netvirt-natservice-config.xml" before starting karaf. <natservice-config xmlns="urn:opendaylight:netvirt:natservice:config"> <nat-mode>conntrack</nat-mode> </natservice-config> We have to expose this configuration in puppet-opendaylight and tripleo.
The plan for Pike is to expose both SNAT options (controller-based and conntrack-based) in TripleO, and set the conntrack-based as default. If further testing will reveal major issues with conntrack, we will reconsider this - but the current assumption is that the conntrack based solution should be our focus from now on and that the feature is stable enough.
This topic was discussed again today, and the consensus was that we should take advantage of the fact the we have different environment files for OVS and OVS-DPDK, and have separate default for each. OVS should default to conntrack and OVS-DPDK to controller-based. Reason for this is that the required conntrack support is not available in OVS 2.7, which is the version we are targeting for Pike/RHOSP 12.
Stand-alone ODL will use controller to be default for both the cases. T-H-T will set default mechanism to conntrack for OVS and controller for OVS-DPDK. Cherry pick to Pike: https://review.openstack.org/#/c/501228/ Cherry pick to Carbon: https://git.opendaylight.org/gerrit/#/c/61778/
Fixed in version: puppet-opendaylight-4.2.0-0.20170905090706.7b618b1.el7.centos
Checked with openstack-tripleo-heat-templates-7.0.1-0.20170927205938.el7ost.noarch Default: cat /opt/opendaylight/etc/opendaylight/datastore/initial/config/netvirt-natservice-config.xml <natservice-config xmlns="urn:opendaylight:netvirt:natservice:config"> <nat-mode>conntrack</nat-mode> Adding OpenDaylightSNATMechanism: 'controller': cat /opt/opendaylight/etc/opendaylight/datastore/initial/config/netvirt-natservice-config.xml <natservice-config xmlns="urn:opendaylight:netvirt:natservice:config"> <nat-mode>controller</nat-mode>
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:3462