Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2163371

Summary: [OVN] Do not send geneve UDP traffic to conntrack for performance reasons
Product: Red Hat OpenStack Reporter: Luigi Tamagnone <ltamagno>
Component: openstack-tripleo-heat-templatesAssignee: Miguel Lavalle <mlavalle>
Status: CLOSED CURRENTRELEASE QA Contact: Maor <mblue>
Severity: high Docs Contact:
Priority: medium    
Version: 16.2 (Train)CC: bcafarel, dalvarez, egarciar, jiehuang, jlibosva, jschluet, lsvaty, ltamagno, mblue, mburns, mlavalle, mtomaska, nlevinki, pgrist, tvignaud
Target Milestone: z6Keywords: Regression, Triaged
Target Release: 16.2 (Train on RHEL 8.4)   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-11.6.1-2.20230808225213.9adcac6.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1851467 Environment:
Last Closed: 2023-11-10 11:32:01 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1851467    
Bug Blocks:    

Comment 2 Luigi Tamagnone 2023-01-23 09:55:53 UTC
Hi,

I open this bz as a clone of 1851467.

It seems the rules have stated NEW so didn't match the traffic, I checked the codes upstream and probably the problem is only on Train, so no need to check also RHOSP17.

I added the code upstream[1] to match it with the state INVALID. I tested it and should work this way.
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/868743

Comment 3 Miguel Lavalle 2023-01-23 22:40:31 UTC
Hi Luigi,

Thanks for looking at this. Left you a comment in the upstream patch: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/868743

Comment 4 Luigi Tamagnone 2023-01-24 13:59:12 UTC
Hi Miguel,

I set your comment as resolved afaik we don't use puppet on Master for the firewall rules. So the code changed and state=[] is working on master but not in Train.

Comment 5 Miguel Lavalle 2023-01-24 20:12:20 UTC
Hi Luigi,

Thank you for your response. I think you forgot to mark my comments as resolved in https://review.opendev.org/c/openstack/tripleo-heat-templates/+/868743. Would you please do so, explaining the reason you think this is the right approach? I think the reason has to do with the fact that in Train we use puppet and we have a module that initializes state with NEW. Once you do this, I'll remove -1. The point is to document the conversation that took place during the review process. Thanks!

Comment 6 Luigi Tamagnone 2023-01-25 08:36:09 UTC
Hi Miguel,

My fault, I wrote the comment but I didn't push reply. So it was in draft...

Comment 7 Miguel Lavalle 2023-01-25 17:35:46 UTC
Hi Luigi,

Thank you very much. I +1ed the upstream patch. Are you going to do the downstream backport?

Comment 8 Luigi Tamagnone 2023-01-25 18:58:57 UTC
Hi Miquel,

I can't I don't have the credential to work downstream.

Comment 9 Miguel Lavalle 2023-01-25 23:38:49 UTC
Hi Luigi,

In that case, I'll monitor the upstream patch and when merged, I'll backport it downstream to the 16.2 branch

Cheers

Comment 11 Luigi Tamagnone 2023-03-20 07:13:32 UTC
Hi Miguel,

The patch is available upstream.

Comment 14 Lukas Svaty 2023-06-08 11:07:41 UTC
Raising severity due to the Regression keyword

Comment 18 Lon Hohberger 2023-11-10 11:32:01 UTC
According to our records, this should be resolved by openstack-tripleo-heat-templates-11.6.1-2.20230808225216.el8ost.  This build is available now.

Comment 19 Red Hat Bugzilla 2024-03-10 04:25:05 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days