Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

The FDP team is no longer accepting new bugs in Bugzilla. Please report your issues under FDP project in Jira. Thanks.

Bug 1779115

Summary:	[OVN] Traffic not getting blocked when it should within the same Logical Switch
Product:	Red Hat Enterprise Linux Fast Datapath	Reporter:	Dumitru Ceara <dceara>
Component:	ovn2.12	Assignee:	Dumitru Ceara <dceara>
Status:	CLOSED ERRATA	QA Contact:	ying xu <yinxu>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	FDP 19.G	CC:	ctrautma, dalvarez, dceara, jishi, kfida, ralongi, yinxu
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1778164	Environment:
Last Closed:	2020-01-21 06:20:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1778164
Bug Blocks:

Comment 3 ying xu 2019-12-19 06:20:56 UTC

reproduced on version ovn2.12-15
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   ovn_test_port_group_change
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-nbctl show' (Expected 0, got 0)
:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-sbctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovs-vsctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg1 ports="f73abfe3-ced4-4786-81cc-0e6bd87bafda caddb3ec-6cfb-47f5-ac4b-261da1054573"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg2 ports="ca16596c-dbe4-42a3-bd93-a8e2239c1ce4"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl list Port_Group' (Expected 0, got 0)
:: [ 00:49:38 ] :: [   PASS   ] :: hv1 vm0 ping others pass. 
:: [ 00:50:14 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:50:25 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:50:36 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm1 pass. 
:: [ 00:56:12 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:56:44 ] :: [   PASS   ] :: hv1 vm0 can't ping hv0 vm1 pass. 
:: [ 00:56:55 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:57:03 ] :: [   PASS   ] :: Command 'ovn_port_group_change' (Expected 0, got 0)


verified on version ovn2.12-19
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   ovn_test_port_group_change
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-nbctl show' (Expected 0, got 0)
:: [ 00:45:45 ] :: [   PASS   ] :: Command 'ovn-sbctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovs-vsctl show' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg1 ports="f73abfe3-ced4-4786-81cc-0e6bd87bafda caddb3ec-6cfb-47f5-ac4b-261da1054573"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg2 ports="ca16596c-dbe4-42a3-bd93-a8e2239c1ce4"' (Expected 0, got 0)
:: [ 00:49:04 ] :: [   PASS   ] :: Command 'ovn-nbctl list Port_Group' (Expected 0, got 0)
:: [ 00:49:38 ] :: [   PASS   ] :: hv1 vm0 ping others pass. 
:: [ 00:50:14 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:50:25 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:50:36 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm1 pass. 
:: [ 00:56:12 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 00:56:44 ] :: [   PASS   ] :: hv1 vm0 can't ping hv0 vm1 pass. 
:: [ 00:56:55 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 00:57:03 ] :: [   PASS   ] :: Command 'ovn_port_group_change' (Expected 0, got 0)

Comment 4 ying xu 2019-12-19 06:23:55 UTC

sorry for the mistake.

reproduced on version ovn2.12-15
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   ovn_test_port_group_change
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 21:36:43 ] :: [   PASS   ] :: Command 'ovn-nbctl show' (Expected 0, got 0)
:: [ 21:36:43 ] :: [   PASS   ] :: Command 'ovn-sbctl show' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovs-vsctl show' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg1 ports="bc7934f6-e63c-4f70-80c8-6e3ead79d4b3 2bffe56d-8381-4986-9850-d2165013f100"' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovn-nbctl create Port_Group name=pg2 ports="af49d0ea-c454-4eab-a303-7674a2eb9539"' (Expected 0, got 0)
:: [ 21:40:01 ] :: [   PASS   ] :: Command 'ovn-nbctl list Port_Group' (Expected 0, got 0)
:: [ 21:40:35 ] :: [   PASS   ] :: hv1 vm0 ping others pass. 
:: [ 21:41:11 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 21:41:23 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 21:41:34 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm1 pass. 
:: [ 21:42:10 ] :: [   PASS   ] :: hv1 vm0 can't ping hv1 vm1 pass. 
:: [ 21:42:21 ] :: [   FAIL   ] :: hv1 vm0 ping hv0 vm1 pass,but should fail. 
:: [ 21:42:33 ] :: [   PASS   ] :: hv1 vm0 ping hv0 vm0 pass. 
:: [ 21:42:40 ] :: [   PASS   ] :: Command 'ovn_port_group_change' (Expected 0, got 0)
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Comment 6 errata-xmlrpc 2020-01-21 06:20:15 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0167