Bug 2182009 - [16.2][OVN][DVR] FIP-related traffic found on controller nodes
Summary: [16.2][OVN][DVR] FIP-related traffic found on controller nodes
Keywords:
Status: CLOSED DUPLICATE of bug 2177155
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-neutron
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
urgent
high
Target Milestone: z5
: ---
Assignee: Luis Tomas Bolivar
QA Contact: Eran Kuris
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-03-27 08:50 UTC by Roman Safronov
Modified: 2023-03-28 07:07 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-03-28 07:07:52 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-23753 0 None None None 2023-03-27 08:53:49 UTC

Description Roman Safronov 2023-03-27 08:50:57 UTC
Description of problem:
When pinging a VM FIP from external network traffic is passing not only via compute node external interface but also on controller.

All downstream CI ovn dvr/l3ha tests are reporting that traffic found on compute+controller nodes while only compute node is expected.

This is a regression of the latest puddle  RHOS-16.2-RHEL-8-20230324.n.1
On RHOS-16.2-RHEL-8-20230301.n.1 the issue does not happen with the same tests.


Version-Release number of selected component (if applicable):
RHOS-16.2-RHEL-8-20230324.n.1

How reproducible:
100% on all OVN environments with DVR enabled

Steps to Reproduce:
1.Deploy an HA environment (3 controllers+2 compute nodes) with DVR enabled
2. Create external and internal networks, router, connect networks to the router, create a VM connected to the internal network and a FIP of the VM on external network. 
3.Run captures on all nodes external interfaces and try to access the VM FIP address from external network, e.g. send ping requests

Actual results:
FIP-related traffic found not only on compute nodes but also on controller nodes

Expected results:
FIP traffic found only on compute nodes

Additional info:

Comment 1 Vadim Khitrin 2023-03-27 09:29:50 UTC
This is a regression, not reproducible in earlier compose.
Raising blocker.

Comment 5 Luis Tomas Bolivar 2023-03-28 06:29:51 UTC
I can confirm this is caused by the redirect-type=bridged flag on the gateway router ports

Comment 6 Luis Tomas Bolivar 2023-03-28 07:07:52 UTC

*** This bug has been marked as a duplicate of bug 2177155 ***


Note You need to log in before you can comment on or make changes to this bug.