Bug 989645 - Add VXLAN Support to the Open vSwitch Plugin
Summary: Add VXLAN Support to the Open vSwitch Plugin
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-neutron
Version: 3.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: async
: 4.0
Assignee: Assaf Muller
QA Contact: Ofer Blaut
URL: https://blueprints.launchpad.net/neut...
Whiteboard:
Depends On: 1010322
Blocks: RHOS40RFE 1003413 1003415
TreeView+ depends on / blocked
 
Reported: 2013-07-29 17:01 UTC by Perry Myers
Modified: 2016-04-26 14:31 UTC (History)
9 users (show)

Fixed In Version: openstack-neutron-2013.2-0.3.b2.el6ost
Doc Type: Enhancement
Doc Text:
Clone Of:
: 1003413 (view as bug list)
Environment:
Last Closed: 2013-12-20 13:39:34 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
OVS logs (2.77 KB, text/plain)
2013-12-03 06:21 UTC, Ofer Blaut
no flags Details
OVS logs working with GRE (4.62 KB, text/plain)
2013-12-03 10:04 UTC, Ofer Blaut
no flags Details

Comment 2 Ofer Blaut 2013-12-03 06:21:49 UTC
Created attachment 831888 [details]
OVS logs

VXLAN is not working,
DHCP request is not going out of the compute node to the DHCP server,
iptables is off and TCPDUMP doesn't show packets egress the compute node

Comment 4 Ofer Blaut 2013-12-03 10:04:40 UTC
Created attachment 831960 [details]
OVS logs working with GRE

Comment 8 Assaf Muller 2013-12-16 14:49:37 UTC
* Setup RHOS 4.0 latest repos (2013-12-12.1)
* Installed using Packstack: One controller (Everything on it), 2 additional * compute nodes. All 3 are VMs on different physical hosts running RHEL 6.5
* Disabled firewall on controller
* SELinux is in permissive mode
* Disabled firewall on compute nodes for VNC

* In /etc/neutron/plugin.ini, for all hypervisors:
  Under [OVS]
  tenant_network_type=vxlan
  tunnel_type=vxlan
  Under [AGENT]
  tunnel_types=vxlan

* On all hypervisors:
  ovs-vsctl emer-reset && service openstack-openvswitch-agent restart

* Deleted network that was created as GRE, recreated it

I have connectivity between instances running on different hypervisors.

Comment 9 Bob Kukura 2013-12-16 19:26:54 UTC
You shouldn't need to disable the firewall, but probably do need to open UDP port 4789 on all nodes where openvswitch-agent runs for VXLAN.

Comment 10 Assaf Muller 2013-12-17 08:39:50 UTC
Oh absolutely - I'm not suggesting to disable any firewalls, I'm just stating what steps I took to make it to work.

Comment 11 Ofer Blaut 2013-12-18 10:02:21 UTC
I have retested VXLAN on latest puddle with the same configuration as Assaf mentioned.

Traffic works between two VMs on different hosts 
Traffic works between VM and router and floating ip is used to gate the internet

openstack-neutron-2013.2-16.el6ost.noarch
openstack-neutron-openvswitch-2013.2-16.el6ost.noarch
kernel-2.6.32-431.1.2.el6.x86_64 

attached PCAP


Note You need to log in before you can comment on or make changes to this bug.