Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
The FDP team is no longer accepting new bugs in Bugzilla. Please report your issues under FDP project in Jira. Thanks.

Bug 2081185

Summary: Userspace datapath drops the encapsulated packet with inner vlan if sent to the access port
Product: Red Hat Enterprise Linux Fast Datapath Reporter: OvS team <ovs-bugzilla>
Component: openvswitch2.17Assignee: Open vSwitch development team <ovs-team>
Status: CLOSED ERRATA QA Contact: ovs-qe
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: FDP 22.ACC: ctrautma, jhsiao, qding, ralongi, tli, tredaelli
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openvswitch2.17-2.17.0-15.el9fdp Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-08-01 15:53:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OvS team 2022-05-02 23:25:47 UTC 
+++ This bug was initially created as a clone of Bug #2060552 +++

Assuming the following setup:

    Bridge br-int
        datapath_type: netdev
        Port vmPort
            tag: 7
            Interface vmPort
        Port gre0
            Interface gre0
                type: gre
            
    Bridge br-ex
        datapath_type: netdev
        Port br-ex
            tag: 2020
            Interface br-ex
        Port phyPort
            Interface phyPort

Both bridges with action NORMAL.

IP of br-ex is in the subnet of the remote ip of gre0 so encapsulated packet
is routed to the br-ex.

Packet received on vmPort.

Expected result:

1. Packet enters br-int.
2. vlan 7 pushed to the packet.
3. Packet sent to the gre0 port.
4. GRE header pushed to the packet.
5. Packet routed to br-ex.
6. vlan 2020 pushed to the packet (outer header)
7. Packet [VLAN 2020 | GRE | VLAN 7 | <origingal packet> ] sent to the phyPort.

Actual result:

Packet is dropped by OVS after the step 5:

    bridge("br-ex")
    ---------------
         0. priority 0
            NORMAL
             >>>> dropping VLAN 7 tagged packet received on port br-ex configured as VLAN 2020 access port <<<<
             >> disallowed VLAN VID for this input port, dropping

---

The same configuration is working as expected with the kernel datapath, but
doesn't with the userspace one.  It seems like OVS doesn't clear the vlan
metadata after encapsulation while processing output to the native tunnel,
so it thinks that the packet is still in vlan 7.
Comment 1 OvS team 2022-05-02 23:25:50 UTC 
* Mon May 02 2022 Open vSwitch CI <ovs-ci> - 2.17.0-15
- Merging upstream branch-2.17 [RH git: e706ea8148]
    Commit list:
    522c46884d python: idl: Raise AttributeError from uuid_to_row.
    cb24c524e4 ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. (#2060552)
    a665b75dec dpif-netdev-avx512: Fix overflow of UINT32_C(1).
Comment 10 errata-xmlrpc 2022-08-01 15:53:58 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (openvswitch2.17 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:5798