Bug 1534886 – [Netvirt] No connectivity to a router's internal address

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1534886 - [Netvirt] No connectivity to a router's internal address

Summary:	[Netvirt] No connectivity to a router's internal address

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	opendaylight (Show other bugs)
Sub Component:
Version:	12.0 (Pike)
Hardware:	Unspecified Unspecified

Priority	high Severity high
Target Milestone:	beta
Target Release:	13.0 (Queens)
Assigned To:	Aswin Suryanarayanan
QA Contact:	Itzik Brown
Docs Contact:

URL:
Whiteboard:	odl_netvirt
Keywords:	Triaged

Depends On:	1554233
Blocks:
	Show dependency tree / graph

Reported:	2018-01-16 03:26 EST by Itzik Brown
Modified:	2018-10-18 03:20 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:	opendaylight-8.0.0-9.el7ost
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:	N/A
Last Closed:	2018-06-27 09:42:10 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
OpenDaylight Bug	NETVIRT-1064	None	None	None	2018-01-16 03:26 EST
OpenDaylight gerrit	71137	None	None	None	2018-04-23 04:50 EDT
Red Hat Product Errata	RHEA-2018:2086	None	None	None	2018-06-27 09:42 EDT

Groups: None (edit)

Description Itzik Brown 2018-01-16 03:26:13 EST

Description of problem:
Ping to a router's interface from an instance fails unless a security group rule that allows ICMP is added

Version-Release number of selected component (if applicable):
opendaylight-6.2.0-5.el7ost.noarch

How reproducible:


Steps to Reproduce:
1. Launch an instance
2. Ping to the router's internal address
3.

Actual results:


Expected results:


Additional info:

Comment 4 Aswin Suryanarayanan 2018-02-19 07:50:48 EST

Once the dependent ovs bug is merged, the temporary work around needs to be removed and we need to use the new ct_clear action in ODL pipeline.

Comment 5 Aswin Suryanarayanan 2018-03-12 09:13:53 EDT

The fix for 1501418 dosen't help to resolve the router ping issue. The ping reply packets generated is marked -trk in ovs pipeline and gets dropped. The bug 1554233 is raised for the same.

Comment 7 Aswin Suryanarayanan 2018-04-11 11:24:37 EDT

The issue seems to happen only in kernel datapath and not in dpdk. The bug is worked on and probably we will have an update by this week.

Comment 8 Aswin Suryanarayanan 2018-04-23 04:52:38 EDT

The dependent bug on ovs will take some time to be fixed hence a temporary workaround is added. This will try to resubmit the -trk packets once again to the netfilter , which in-turn the accurate state of the packet.

Comment 9 Aswin Suryanarayanan 2018-04-30 04:34:43 EDT

RH Gerrit => https://code.engineering.redhat.com/gerrit/#/c/137266/

Comment 13 Itzik Brown 2018-05-03 06:14:27 EDT

Checked with:
opendaylight-8.0.0-9.el7ost.noarch

Comment 15 errata-xmlrpc 2018-06-27 09:42:10 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:2086

Note You need to log in before you can comment on or make changes to this bug.