Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1698557

Summary: RHEL 7 nodes do not send out gratuitous neighbor advertisements when flapping OVS VLAN internal ports or restarting the network in Red Hat OpenStack Platform
Product: Red Hat OpenStack Reporter: Andreas Karis <akaris>
Component: openstack-tripleo-heat-templatesAssignee: Nate Johnston <njohnston>
Status: CLOSED ERRATA QA Contact: Sasha Smolyak <ssmolyak>
Severity: medium Docs Contact:
Priority: medium    
Version: 13.0 (Queens)CC: afazekas, agurenko, aschultz, bdobreli, bfournie, bhaley, dsneddon, harsh.kotak, mburns, mgeary, njohnston, slinaber
Target Milestone: ---Keywords: Triaged, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-8.3.1-43.el7ost Doc Type: Bug Fix
Doc Text:
Previously, nodes experienced network issues because of ARP message failure after restarting the network or internal openvswitch. With this update, the default kernel sysctl sends out gratuitous IPv4 or IPv6 ARP messages as required when networking is restarted.
Story Points: ---
Clone Of:
: 1708238 (view as bug list) Environment:
Last Closed: 2019-07-10 13:03:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1708238    

Description Andreas Karis 2019-04-10 15:28:34 UTC
Description of problem:

RHEL 7 nodes do not send out gratuitous neighbor advertisements when flapping OVS VLAN internal ports or restarting the network in Red Hat OpenStack Platform 


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Can you look at https://access.redhat.com/solutions/4044951 and see if it makes sense to integrate this in the product by default?

This is closely related to and IMO would have been the correct solution for 1622660

Comment 1 Nate Johnston 2019-04-22 13:45:57 UTC
Andreas,

Is the specific ask here that we should add this to the t-h-t template?

> parameter_defaults: 
>   ExtraSysctlSettings: 
>     net.ipv6.conf.all.ndisc_notify: 
>       value: 1

Comment 2 Andreas Karis 2019-04-22 14:24:40 UTC
Hi,

BZ 1622660 was fixed with a bit "weird" workaround where we first ping gateways before doing anything else to fix an issue that would actually best be fixed with https://access.redhat.com/solutions/4044951 

The problem is that whenever we restart OVS, it generates new MAC addresses for VLAN ports. Hence, we *need* to send out gratuitous neighbor advertisements to notify all neighbors on the subnet of our new MAC address.

Hence, I think we should make this the default option for Director deployments with OVS, via t-h-t, perhaps customizable. But I don't see any negative impact if we set this on by default. In fact, we might just want to figure out why the OS by default switches this off, as this seems to be a very useful setting and behavior in the first place.

- Andreas

Comment 3 Nate Johnston 2019-04-22 16:11:45 UTC
Andreas,

Thanks for that explanation, that definitely helps.  So I guess the next question is, is there any component that does the ping mentioned in the KB article?  The KB lists it as a "user intervention" step, so is the proposal for the neutron ovs agent - or OVS itself - to initiate this ping automatically when flapping/restart detected?  Or are you imagining another way of solving the matter of which process starts the ping and how does it know to do so?

Thanks,

Nate

Comment 4 Andreas Karis 2019-04-22 16:40:52 UTC
Hi,

We won't need to ping anything if we send out gratuitous neighbor advertisements when we bring up the interface. That's precisely what:

> parameter_defaults: 
>   ExtraSysctlSettings: 
>     net.ipv6.conf.all.ndisc_notify: 
>       value: 1

does. The ping is just a workaround that was used, instead sending out gratuitous neighbor advertisements (IPv6 equivalent of gratuitous ARPs) is the correct solution.

Comment 23 Bob Fournier 2019-06-12 16:51:55 UTC
*** Bug 1719742 has been marked as a duplicate of this bug. ***

Comment 26 errata-xmlrpc 2019-07-10 13:03:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:1738