sometimes few flows get stuck in Hold state on fast tcp open/close traffic

[Vedamurthy Joshi]

R3.0 Build 2709 Ubuntu 14.04 Kilo multinode

Have two VMs in a VN (20.1.1.3 and 20.1.1.4 in my case)
run hping3 from one to the other repeatedly

Ex :
hping3 -S -p 22 20.1.1.4 -s 10000 -c 1000 -i u1000

It is seen that sometimes , one or two flows get stuck in Hold state

gcore is in 10.204.216.50/Docs/bugs/#

root@nodek1:~# cat flow.log
Flow table(size 68157440, entries 532480)

Entries: Created 17999 Added 17997 Processed 17997 Used Overflow entries 0
(Created Flows/CPU: 13898 2631 425 251 156 148 136 88 4 3 1 4 0 0 3 0 142 48 19 14 6 8 5 7 1 0 0 0 0 1 0 0)(oflows 0)

Action:F=Forward, D=Drop N=NAT(S=SNAT, D=DNAT, Ps=SPAT, Pd=DPAT, L=Link Local Port)
 Other:K(nh)=Key_Nexthop, S(nh)=RPF_Nexthop
 Flags:E=Evicted, Ec=Evict Candidate, N=New Flow, M=Modified
TCP(r=reverse):S=SYN, F=FIN, R=RST, C=HalfClose, E=Established, D=Dead

    Index Source:Port/Destination:Port Proto(V)
-----------------------------------------------------------------------------------
    18104 20.1.1.3:10151 6 (3)
                         20.1.1.4:22
    (K(nh):45, Action:H, Flags:, TCP:S, S(nh):0, Statistics:3/162 UdpSrcPort 0

   214368<=>221348 20.1.1.3:22 6 (3->0)
                         20.1.1.2:54394
    (K(nh):45, Action:N(SD), Flags:, TCP:, S(nh):45, Statistics:17197/3324042 UdpSrcPort 52001

   221348<=>214368 10.204.216.221:54394 6 (0->3)
                         169.254.0.4:22
    (K(nh):5, Action:N(SD), Flags:, TCP:, S(nh):5, Statistics:10916/573104 UdpSrcPort 58256

   257104<=>479664 20.1.1.3:5031 1 (3)
                         10.1.1.3:0
    (K(nh):45, Action:F, Flags:, S(nh):45, Statistics:269/26362 UdpSrcPort 56284

   292080<=>305024 10.1.1.3:5031 1 (6)
                         20.1.1.3:0
    (K(nh):20, Action:F, Flags:, S(nh):70, Statistics:269/22596 UdpSrcPort 65443

   305024<=>292080 20.1.1.3:5031 1 (6)
                         10.1.1.3:0
    (K(nh):20, Action:F, Flags:, S(nh):70, Statistics:269/26362 UdpSrcPort 65138

   467336 20.1.1.3:10152 6 (3)
                         20.1.1.4:22
    (K(nh):45, Action:H, Flags:, TCP:S, S(nh):0, Statistics:3/162 UdpSrcPort 0

   479664<=>257104 10.1.1.3:5031 1 (3)
                         20.1.1.3:0
    (K(nh):25, Action:F, Flags:, S(nh):25, Statistics:269/26362 UdpSrcPort 50993

root@nodek1:~#

[Ganesha HV (ganeshahv)]

Seeing the issue during Port-Tuple testing, whenever SI is added/removed from the policy.

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/16876
Submitter: Praveen K V (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/16876
Committed: http://github.org/Juniper/contrail-controller/commit/af3b93d3c3dd66054c2e1f0831d86b7392bef252
Submitter: Zuul
Branch: master

commit af3b93d3c3dd66054c2e1f0831d86b7392bef252
Author: Praveen K V <email address hidden>
Date: Thu Feb 4 22:30:41 2016 +0530

Revert "Detect vrouter evicted flows during aging and remove them from agent."

This reverts commit af647a2d5e9572b4b3501efe2230debe7c3dc574.

Change-Id: I995d42eb00b435ac6fc2a864a27beeb5cb28ee09
Closes-Bug: #1541033