Bug 1837558
| Summary: | [OVN][DVR] Impossible to ping internet addresses from vm with FIP | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Jakub Libosvar <jlibosva> |
| Component: | python-networking-ovn | Assignee: | RHOS Maint <rhos-maint> |
| Status: | CLOSED EOL | QA Contact: | Eran Kuris <ekuris> |
| Severity: | urgent | Docs Contact: | |
| Priority: | urgent | ||
| Version: | 16.0 (Train) | CC: | akaris, apevec, averi, batkisso, ctrautma, dalvarez, ekuris, gkadam, jamsmith, jishi, jlibosva, lhh, lorenzo.bianconi, majopela, mchappel, nlevinki, rsafrono, scohen |
| Target Milestone: | async | Keywords: | Regression, Tracking, Triaged |
| Target Release: | 16.0 (Train on RHEL 8.1) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Known Issue | |
| Doc Text: |
Because of a core OVN bug, virtual machines with floating IP (FIP) addresses cannot route to other networks in an ML2/OVN deployment with distributed virtual routing (DVR) enabled. Core OVN sets a bad next hop when routing SNAT IPv4 traffic from a VM with a floating ip with DVR enabled. Instead of the gateway IP, OVN sets the destination IP. As a result, the router sends an ARP request for an unknown IP instead of routing it to the gateway.
+
Before deploying a new overcloud with ML2/OVN, disable DVR by setting `NeutronEnableDVR: false` in an environment file.
+
If you have ML2/OVN in an existing deployment, perform the following steps:
+
. Set the `enable_distributed_floating_ip parameter` in the [ovs] section of neutron.conf to False. You should also set `NeutronEnableDVR: false` in an environment file used in any re-deployments so that the next re-deployment does not re-enable DVR.
. Update the floating IP that requires external SNAT to work through the Neutron API (for example, by changing its description).
+
NOTE: Disabling DVR causes traffic to be centralized. All L3 traffic goes through the controller/network nodes. This may affect scale, data plane performance, and throughput.
|
Story Points: | --- |
| Clone Of: | 1836963 | Environment: | |
| Last Closed: | 2021-07-04 09:19:46 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1834433 | ||
| Bug Blocks: | |||
|
Comment 4
Jakub Libosvar
2020-06-11 09:00:02 UTC
*** Bug 1851731 has been marked as a duplicate of this bug. *** Hello! Is this specific bug fixed on the latest OSP 16.1.2 release? ()[root@controller-1 /]# rpm -qa | grep ovn ovn2.13-host-2.13.0-37.el8fdp.x86_64 ovn2.13-2.13.0-37.el8fdp.x86_64 Thanks! (In reply to Andrea Veri from comment #7) > Hello! > > Is this specific bug fixed on the latest OSP 16.1.2 release? > > ()[root@controller-1 /]# rpm -qa | grep ovn > ovn2.13-host-2.13.0-37.el8fdp.x86_64 > ovn2.13-2.13.0-37.el8fdp.x86_64 > > Thanks! It's fixed on OSP16.1.2, see https://bugzilla.redhat.com/show_bug.cgi?id=1836963 |