Bug 1497887 - [RFE] [TESTONLY] SRIOV double tagging on a VF port discards traffic
Summary: [RFE] [TESTONLY] SRIOV double tagging on a VF port discards traffic
Keywords:
Status: CLOSED EOL
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-neutron
Version: 10.0 (Newton)
Hardware: x86_64
OS: Linux
high
high
Target Milestone: beta
: 15.0 (Stein)
Assignee: Vijay Chundury
QA Contact: Maxim Babushkin
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-10-03 03:30 UTC by Nilesh
Modified: 2020-12-14 10:21 UTC (History)
18 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-09-30 20:08:17 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1693240 0 None None None 2017-10-05 18:44:25 UTC
Red Hat Bugzilla 1465393 0 unspecified CLOSED [RFE] Neutron QinQ transparent VLAN support for vBNG usecases 2024-01-25 04:25:31 UTC

Internal Links: 1465393

Description Nilesh 2017-10-03 03:30:59 UTC
Customer traffic to a VF on a SRIOV port is QinQ double tagged. 

Traffic is being dropped at the VF interface. Network traffic to VF as single vlanid tagged works as expected

At compute node SRIOV ports

Physical server is HP DL 380 G9, SRIOV physical NIC is Intel x710

Behaviour occurs when sending double tagged traffic for the VF interface

Compute host  SRIOV VF unable to receive QinQ double tagged traffic as expected.

Some more details on our environment:
- Compute node deployed in OSP 10 {not generic KVM in article}
- Compute node  is running RHEL 7  {not RHEL 6 in article}
- Compute nodes are running Intel x710 network interfaces  {not 82599  in article}
- Dual tagged traffic is being sent to the host VF {rather than the guest tagging the traffic in article}

So question is - can SRIOV VF port work with "QinQ / 802.1ad double tagged" to a compute node running RHEL 7 using an Intel x710 NIC


Our environment is a DPI application running in the Openstack instance VM. The DPI application needs to receive all traffic via the SRIOV port, and does not tag traffic inside the VM. Effectively a "port mirror" if you like.

The traffic is already QinQ when it arrives on the PF on the actual NIC. 
	We do not wish to add, nor remove any tags. 
	We simply wish to pass the input frame "raw" from the NIC PF to the VF and into the VM (as VM's "eth0")
	When the VM goes promisc on it's eth0 (which is the SRIOV VF thats exposed to the VM), It should see everything that came in the physical NIC port.

Comment 1 Ihar Hrachyshka 2017-10-05 18:44:25 UTC
A crucial part of the request that is missing is that the expectation is that instead of dropping the double tagged traffic, it will be propagated into the instance (with no tags stripped) where the VIF will be set to promiscuous mode.

It sounds like the ask here is to support vlan_transparent API extension for SR-IOV ports.

I added a link to Launchpad RFE for Neutron that seems to ask for the same.

Comment 2 Ihar Hrachyshka 2017-10-05 18:48:47 UTC
Also to clarify, this is an RFE, a new feature request, and so it needs to go through proper planning phase for a next release.

Comment 27 Sanjay Upadhyay 2020-04-22 11:43:01 UTC
This is verified - details - https://projects.engineering.redhat.com/browse/NFV-343

Comment 28 stchen 2020-09-30 20:08:17 UTC
Closing EOL, OSP 15 has been retired as of Sept 19, 2020


Note You need to log in before you can comment on or make changes to this bug.