Bug 2171906 - permitted_ethertypes doesn't work as expected even though the flows are present [NEEDINFO]
Summary: permitted_ethertypes doesn't work as expected even though the flows are present
Keywords:
Status: ON_QA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-neutron
Version: 16.2 (Train)
Hardware: x86_64
OS: All
high
high
Target Milestone: z6
: 16.2 (Train on RHEL 8.4)
Assignee: Rodolfo Alonso
QA Contact: Bharath M V
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-02-20 20:14 UTC by David Hill
Modified: 2023-08-02 17:45 UTC (History)
10 users (show)

Fixed In Version: openstack-neutron-15.3.5-2.20230711185017.63bac0f.el8ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:
dhill: needinfo-
ralonsoh: needinfo? (stepma2)

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 2009221 0 None None None 2023-03-03 18:20:33 UTC
OpenStack gerrit 876563 0 None MERGED [OVS] Allow custom ethertype traffic in the ingress table 2023-04-19 16:12:38 UTC
Red Hat Issue Tracker OSP-22517 0 None None None 2023-02-20 20:14:54 UTC

Description David Hill 2023-02-20 20:14:33 UTC 
Description of problem:
permitted_ethertypes doesn't work as expected even though the flows are present:
~~~
 cookie=0x8fb7fcf7f9710893, duration=95846.751s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x21,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.751s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x21,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.751s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x21,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.561s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x23,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.561s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x23,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.561s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x23,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.454s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x24,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.454s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x24,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95846.454s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x24,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.315s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x26,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.315s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x26,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.315s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x26,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.191s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x28,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.191s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x28,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.191s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x28,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.084s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x22,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.083s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x22,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95844.083s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x22,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.590s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x29,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.590s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x29,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.590s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x29,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.412s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2c,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.412s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2c,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.412s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2c,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.298s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2d,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.298s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2d,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.298s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2d,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.165s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2a,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.164s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2a,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.164s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2a,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.002s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2b,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.002s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2b,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95841.002s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2b,dl_type=0x4008 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95839.481s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2e,dl_type=0x2222 actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95839.481s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2e,dl_type=0x88cc actions=resubmit(,94)
 cookie=0x8fb7fcf7f9710893, duration=95839.481s, table=71, n_packets=0, n_bytes=0, idle_age=65534, hard_age=65534, priority=95,reg5=0x2e,dl_type=0x4008 actions=resubmit(,94)
~~~

Version-Release number of selected component (if applicable):
Latest 16.2.4

How reproducible:
This customer at least

Steps to Reproduce:
1.  Add etertype 0x4008 with port security enabled
2.
3.

Actual results:
Packets are blocked

Expected results:
No packets should be blocked

Additional info:
Comment 3 Stephen Ma 2023-02-21 16:39:34 UTC 
How to reproduce: In addition to having port-security enabled on the sending and receiving ports, the VM sending the packets and the VM receiving the packets are HOSTED ON DIFFERENT compute nodes.
Comment 7 Rodolfo Alonso 2023-03-03 11:44:28 UTC 
Hi Stephen:

Along with the information provided, can you share in the customer case the datapath port information of the receiver host (compute-2)? I would like to match the dp flows and the OVS ports.
  $ ovs-appctl dpctl/dump-flows

Regards.
Note You need to log in before you can comment on or make changes to this bug.