+++ This bug was initially created as a clone of Bug #1935155 +++
Description of problem:
Ovn-k8s multicast allow acls should allow IGMP/MLD pkts regardless of source address.
IPv6 MLD packets are being dropped.
Version-Release number of selected component (if applicable):
Steps to Reproduce
There is a detailed slack conversation regarding this issue here:
I have an ipv4 single stack cluster with ovn-kubernetes cni.
I see that after few minutes ~5, the join (igmp) request is expired.
I'm following the steps in the openshift "enable multicast" guide.
If I run
oc exec mlistener -i -t -- \
socat UDP4-RECVFROM:30102,ip-add-membership=184.108.40.206:$POD_IP,fork EXEC:hostname
then I run
oc exec msender -i -t -- \
/bin/bash -c "echo | socat STDIO UDP4-DATAGRAM:220.127.116.11:30102,range=$CIDR,ip-multicast-ttl=64"
It works as expected.
But if I run the send request again after ~5 min, it doesn't work. I need the "listener" to re-join the multicast group to make it work again.
Tested and verified in 4.7.0-0.nightly-2021-03-25-091845
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Moderate: OpenShift Container Platform 4.7.5 security and bug fix update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.