Bug 2024599 - [OSP16.2/RHEL8.4][ML2-OVN][Hw-Offload] DVR DNAT Floating IP connection is not offloaded to HW due to uncommitted Connection Tracking zone
Summary: [OSP16.2/RHEL8.4][ML2-OVN][Hw-Offload] DVR DNAT Floating IP connection is not...
Keywords:
Status: VERIFIED
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openvswitch
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: z3
: 16.2 (Train on RHEL 8.4)
Assignee: Haresh Khandelwal
QA Contact: Eran Kuris
URL:
Whiteboard:
Depends On: 2043187
Blocks: 2131355
TreeView+ depends on / blocked
 
Reported: 2021-11-18 12:26 UTC by Karrar Fida
Modified: 2023-10-31 22:41 UTC (History)
19 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1984953
Environment:
Last Closed:
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker NFV-2334 0 None None None 2021-11-18 12:28:08 UTC
Red Hat Issue Tracker OSP-10855 0 None None None 2021-11-18 12:28:15 UTC

Comment 11 Vadim Khitrin 2022-06-12 18:45:50 UTC
Verified on RHOS-16.2-RHEL-8-20220603.n.1

Traffic with floating IP is offloaded:
[root@computehwoffload-0 ~]# cat /proc/net/nf_conntrack | grep 8789 | grep '10.10.119.64' | grep 'OFFLOAD'
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45832 dport=8789 src=10.10.119.64 dst=10.10.119.76 sport=8789 dport=45832 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=1 use=3
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45832 dport=8789 src=10.10.119.64 dst=20.20.220.194 sport=8789 dport=45832 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=9 use=3
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45834 dport=8789 src=10.10.119.64 dst=10.10.119.76 sport=8789 dport=45834 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=1 use=3
ipv4     2 tcp      6 src=20.20.220.194 dst=10.10.119.64 sport=45834 dport=8789 src=10.10.119.64 dst=20.20.220.194 sport=8789 dport=45834 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=9 use=27
ipv4     2 tcp      6 src=10.10.119.76 dst=10.10.119.64 sport=45832 dport=8789 src=20.20.220.136 dst=10.10.119.76 sport=8789 dport=45832 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=3 use=3
ipv4     2 tcp      6 src=10.10.119.76 dst=10.10.119.64 sport=45834 dport=8789 src=20.20.220.136 dst=10.10.119.76 sport=8789 dport=45834 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=3 use=3
[root@computehwoffload-0 ~]# cat /proc/net/nf_conntrack | grep 8030 | grep '10.10.119.67' | grep 'OFFLOAD'
ipv4     2 udp      17 src=20.20.220.140 dst=10.10.119.67 sport=8030 dport=8030 src=10.10.119.67 dst=10.10.119.90 sport=8030 dport=8030 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=3 use=3
ipv4     2 udp      17 src=20.20.220.140 dst=10.10.119.67 sport=8030 dport=8030 src=10.10.119.67 dst=20.20.220.140 sport=8030 dport=8030 [HW_OFFLOAD] mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=9 use=3


Note You need to log in before you can comment on or make changes to this bug.