Bug 1475273 – [ODL/NetVirt] Traffic between two VMs having FIP is not working if the VMs are in the same compute node

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1475273 - [ODL/NetVirt] Traffic between two VMs having FIP is not working if the VMs are in the same compute node

Summary:	[ODL/NetVirt] Traffic between two VMs having FIP is not working if the VMs ar...

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	opendaylight (Show other bugs)
Sub Component:
Version:	10.0 (Newton)
Hardware:	All All

Priority	high Severity high
Target Milestone:	beta
Target Release:	13.0 (Queens)
Assigned To:	Aswin Suryanarayanan
QA Contact:	Itzik Brown
Docs Contact:

URL:
Whiteboard:
Keywords:	Triaged

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-07-26 07:04 EDT by Aswin Suryanarayanan
Modified:	2018-10-18 03:18 EDT (History)
CC List:	3 users (show)

See Also:	1464061
Fixed In Version:	opendaylight-8.0.0-1.el7ost
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:	N/A
Last Closed:	2018-06-27 09:33:47 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
OpenDaylight gerrit	60991	None	None	None	2017-08-02 06:43 EDT
Red Hat Product Errata	RHEA-2018:2086	None	None	None	2018-06-27 09:34 EDT

Groups: None (edit)

Description Aswin Suryanarayanan 2017-07-26 07:04:42 EDT

Description of problem:
Traffic between Two VM having FIP is not working if the VM are in the same compute node when Openstack is installed with Opendaylight as the network controller.

The packet is dropped by security groups which is implemented using ovs-conntrack. The netfilter fails to receive some of the packets submitted from the pipeline and marks it as invalid.

Version-Release number of selected component (if applicable):


How reproducible:
A Openstack setup with opendaylight is required.
Steps to Reproduce:
1.Spawn two VM in the same compute node. 
2.Assosiate  FIP both the vms
3.SSH from vm1 to vm2 using the FIP

Actual results:
SSH should succeed.

Expected results:
SSH is failing

Additional info: Thread regarding the issue ovs-discuss[1]. A similar issue is observed in Ovn controller as well.

[1]https://mail.openvswitch.org/pipermail/ovs-discuss/2017-June/044613.html

Comment 1 Nir Yechiel 2017-07-26 07:19:49 EDT

This bug is for tracking an immediate fix for OpenDaylight/NetVirt. BZ 1464061 is still there to track the long-term fix in Open vSwitch.

Comment 8 Itzik Brown 2018-03-22 02:50:17 EDT

Verified with:
opendaylight-8.0.0-2.el7ost.noarch

Comment 10 errata-xmlrpc 2018-06-27 09:33:47 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:2086

Note You need to log in before you can comment on or make changes to this bug.