Bug 1837558 - [OVN][DVR] Impossible to ping internet addresses from vm with FIP
Summary: [OVN][DVR] Impossible to ping internet addresses from vm with FIP
Keywords:
Status: CLOSED EOL
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: python-networking-ovn
Version: 16.0 (Train)
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: async
: 16.0 (Train on RHEL 8.1)
Assignee: RHOS Maint
QA Contact: Eran Kuris
URL:
Whiteboard:
: 1851731 (view as bug list)
Depends On: 1834433
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-05-19 16:17 UTC by Jakub Libosvar
Modified: 2024-10-01 16:36 UTC (History)
18 users (show)

Fixed In Version:
Doc Type: Known Issue
Doc Text:
Because of a core OVN bug, virtual machines with floating IP (FIP) addresses cannot route to other networks in an ML2/OVN deployment with distributed virtual routing (DVR) enabled. Core OVN sets a bad next hop when routing SNAT IPv4 traffic from a VM with a floating ip with DVR enabled. Instead of the gateway IP, OVN sets the destination IP. As a result, the router sends an ARP request for an unknown IP instead of routing it to the gateway. + Before deploying a new overcloud with ML2/OVN, disable DVR by setting `NeutronEnableDVR: false` in an environment file. + If you have ML2/OVN in an existing deployment, perform the following steps: + . Set the `enable_distributed_floating_ip parameter` in the [ovs] section of neutron.conf to False. You should also set `NeutronEnableDVR: false` in an environment file used in any re-deployments so that the next re-deployment does not re-enable DVR. . Update the floating IP that requires external SNAT to work through the Neutron API (for example, by changing its description). + NOTE: Disabling DVR causes traffic to be centralized. All L3 traffic goes through the controller/network nodes. This may affect scale, data plane performance, and throughput.
Clone Of: 1836963
Environment:
Last Closed: 2021-07-04 09:19:46 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-5209 0 None None None 2022-08-16 08:26:44 UTC

Comment 4 Jakub Libosvar 2020-06-11 09:00:02 UTC
This BZ is a tracker to make sure we include ovn2.11-2.11.1-47.el7fdn into ovn images for OSP 16 compose.

Comment 6 Jakub Libosvar 2020-06-30 11:34:58 UTC
*** Bug 1851731 has been marked as a duplicate of this bug. ***

Comment 7 Andrea Veri 2020-12-02 11:54:11 UTC
Hello!

Is this specific bug fixed on the latest OSP 16.1.2 release?

()[root@controller-1 /]# rpm -qa | grep ovn
ovn2.13-host-2.13.0-37.el8fdp.x86_64
ovn2.13-2.13.0-37.el8fdp.x86_64

Thanks!

Comment 8 Roman Safronov 2020-12-02 12:19:58 UTC
(In reply to Andrea Veri from comment #7)
> Hello!
> 
> Is this specific bug fixed on the latest OSP 16.1.2 release?
> 
> ()[root@controller-1 /]# rpm -qa | grep ovn
> ovn2.13-host-2.13.0-37.el8fdp.x86_64
> ovn2.13-2.13.0-37.el8fdp.x86_64
> 
> Thanks!

It's fixed on OSP16.1.2, see https://bugzilla.redhat.com/show_bug.cgi?id=1836963


Note You need to log in before you can comment on or make changes to this bug.