Bug 1698557 - RHEL 7 nodes do not send out gratuitous neighbor advertisements when flapping OVS VLAN internal ports or restarting the network in Red Hat OpenStack Platform
Summary: RHEL 7 nodes do not send out gratuitous neighbor advertisements when flapping...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 13.0 (Queens)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Nate Johnston
QA Contact: Sasha Smolyak
URL:
Whiteboard:
: 1719742 (view as bug list)
Depends On:
Blocks: 1708238
TreeView+ depends on / blocked
 
Reported: 2019-04-10 15:28 UTC by Andreas Karis
Modified: 2019-07-10 13:05 UTC (History)
12 users (show)

Fixed In Version: openstack-tripleo-heat-templates-8.3.1-43.el7ost
Doc Type: Bug Fix
Doc Text:
Previously, nodes experienced network issues because of ARP message failure after restarting the network or internal openvswitch. With this update, the default kernel sysctl sends out gratuitous IPv4 or IPv6 ARP messages as required when networking is restarted.
Clone Of:
: 1708238 (view as bug list)
Environment:
Last Closed: 2019-07-10 13:03:20 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1827927 0 None None None 2019-05-06 18:37:43 UTC
OpenStack gerrit 657686 0 'None' MERGED Set arp_notify to match ndisc_notify 2020-06-22 16:35:15 UTC
OpenStack gerrit 657691 0 'None' MERGED Enable ndisc_notify sysctl setting to notify of MAC changes 2020-06-22 16:35:15 UTC
Red Hat Knowledge Base (Solution) 4044951 0 None None RHEL 7 nodes do not send out gratuitous neighbor advertisements when flapping OVS VLAN internal ports or restarting the ... 2019-04-10 15:29:01 UTC
Red Hat Product Errata RHBA-2019:1738 0 None None None 2019-07-10 13:05:01 UTC

Description Andreas Karis 2019-04-10 15:28:34 UTC
Description of problem:

RHEL 7 nodes do not send out gratuitous neighbor advertisements when flapping OVS VLAN internal ports or restarting the network in Red Hat OpenStack Platform 


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Can you look at https://access.redhat.com/solutions/4044951 and see if it makes sense to integrate this in the product by default?

This is closely related to and IMO would have been the correct solution for 1622660

Comment 1 Nate Johnston 2019-04-22 13:45:57 UTC
Andreas,

Is the specific ask here that we should add this to the t-h-t template?

> parameter_defaults: 
>   ExtraSysctlSettings: 
>     net.ipv6.conf.all.ndisc_notify: 
>       value: 1

Comment 2 Andreas Karis 2019-04-22 14:24:40 UTC
Hi,

BZ 1622660 was fixed with a bit "weird" workaround where we first ping gateways before doing anything else to fix an issue that would actually best be fixed with https://access.redhat.com/solutions/4044951 

The problem is that whenever we restart OVS, it generates new MAC addresses for VLAN ports. Hence, we *need* to send out gratuitous neighbor advertisements to notify all neighbors on the subnet of our new MAC address.

Hence, I think we should make this the default option for Director deployments with OVS, via t-h-t, perhaps customizable. But I don't see any negative impact if we set this on by default. In fact, we might just want to figure out why the OS by default switches this off, as this seems to be a very useful setting and behavior in the first place.

- Andreas

Comment 3 Nate Johnston 2019-04-22 16:11:45 UTC
Andreas,

Thanks for that explanation, that definitely helps.  So I guess the next question is, is there any component that does the ping mentioned in the KB article?  The KB lists it as a "user intervention" step, so is the proposal for the neutron ovs agent - or OVS itself - to initiate this ping automatically when flapping/restart detected?  Or are you imagining another way of solving the matter of which process starts the ping and how does it know to do so?

Thanks,

Nate

Comment 4 Andreas Karis 2019-04-22 16:40:52 UTC
Hi,

We won't need to ping anything if we send out gratuitous neighbor advertisements when we bring up the interface. That's precisely what:

> parameter_defaults: 
>   ExtraSysctlSettings: 
>     net.ipv6.conf.all.ndisc_notify: 
>       value: 1

does. The ping is just a workaround that was used, instead sending out gratuitous neighbor advertisements (IPv6 equivalent of gratuitous ARPs) is the correct solution.

Comment 23 Bob Fournier 2019-06-12 16:51:55 UTC
*** Bug 1719742 has been marked as a duplicate of this bug. ***

Comment 26 errata-xmlrpc 2019-07-10 13:03:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:1738


Note You need to log in before you can comment on or make changes to this bug.