Bug 2179578 - Every now and then, it looks like all ingress openflows are lost (well security groups appears to stop working) [NEEDINFO]
Summary: Every now and then, it looks like all ingress openflows are lost (well secur...
Keywords:
Status: NEW
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-neutron
Version: 16.1 (Train)
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
: ---
Assignee: Jakub Libosvar
QA Contact: Eran Kuris
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-03-18 19:52 UTC by David Hill
Modified: 2023-08-23 07:21 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:
dhill: needinfo? (astupnik)


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-23222 0 None None None 2023-03-18 19:54:22 UTC

Description David Hill 2023-03-18 19:52:38 UTC
Description of problem:
Every now and then, it looks like all ingress  openflows are lost (well security groups appears to stop working) .  If we remove and add back the port, the flows / security group, are filtering back as expected.   This bug might as well be due to one of these upstream bug (again):

https://bugs.launchpad.net/neutron/+bug/1732067
https://bugs.launchpad.net/neutron/+bug/1945306
https://bugs.launchpad.net/neutron/+bug/1866445
https://bugs.launchpad.net/neutron/+bug/1883321


Version-Release number of selected component (if applicable):
16.1.3

How reproducible:
Random

Steps to Reproduce:
1. No idea yet
2.
3.

Actual results:
2 VMs stops being able to send SIP packets to a destination guest.

Expected results:
Security groups should never break

Additional info:

Comment 5 David Hill 2023-04-15 15:09:30 UTC
We're waiting on that information from customer but thanks for clarifying the table flows for me !

Comment 7 David Hill 2023-08-22 21:13:45 UTC
Any news Alex ?  Cases has been on hold for 4 months now.


Note You need to log in before you can comment on or make changes to this bug.