ovsdbapp ssl send socket error

[Alin-Gabriel Serdean]

[Impact]
Python clients that use python3-openvswitch i.e. ovsdbapp will fail on socket error with the callstack above while trying to connect to their corresponding servers

[Test Case]
* deploy Openstack Yoga
* check on a compute instance which has neutron-ovn-metadata-agent connected to the SB DB:
$ sudo netstat -tuapn | grep 6642
tcp 0 0 10.230.57.99:38834 10.230.62.255:6642 ESTABLISHED 2209992/ovn-control
tcp 0 0 10.230.57.99:59670 10.230.58.204:6642 ESTABLISHED 3687447/neutron-ovn
tcp 0 0 10.230.57.99:45296 10.230.58.185:6642 ESTABLISHED 3687446/neutron-ovn
tcp 0 0 10.230.57.99:59668 10.230.58.204:6642 ESTABLISHED 3687426/neutron-ovn
* Add iptable rule to reject traffic for SB DB port 6442:
$ sudo iptables -A OUTPUT -p tcp --destination-port 6642 -j REJECT --reject-with tcp-reset
* Restart the neutron-ovn-metadata-agent:
$ sudo systemctl restart neutron-ovn-metadata-agent.service
* Check log at /var/log/neutron/neutron-ovn-metadata-agent.log

[Where things could go wrong]
Regression is not expected since this will just remove the unneeded socket options. The fix has also been applied upstream https://github.com/openvswitch/ovs/commit/fe27e0c8843ce37cd0f63ce19c11850e6865c85e however a new version has not been released.

[Original bug description]

ovsdbapps are sometimes failing with the following callstack:

2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection [req-d6abd5b4-69aa-4a93-ab42-82d80e75500e - - - - -] non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>: ValueError: non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection Traceback (most recent call last):
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovsdbapp/backend/ovs_idl/connection.py", line 107, in run
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection self.idl.run()
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/db/idl.py", line 433, in run
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection self._session.run()
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/jsonrpc.py", line 519, in run
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection error = self.stream.connect()
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 817, in connect
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection retval = super(SSLStream, self).connect()
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 300, in connect
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection self.__scs_connecting()
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 268, in __scs_connecting
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection retval = self.check_connection_completion(self.socket)
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 777, in check_connection_completion
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection return Stream.check_connection_completion(sock)
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 137, in check_connection_completion
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection return ovs.socket_util.check_connection_completion(sock)
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/socket_util.py", line 181, in check_connection_completion
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection sock.send("\0".encode(), socket.MSG_DONTWAIT)
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 193, in send
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection return self._call_trampolining(
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 157, in _call_trampolining
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection return func(*a, **kw)
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3.8/ssl.py", line 1170, in send
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection raise ValueError(
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection ValueError: non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.backend.ovs_idl.connection
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection [req-d6abd5b4-69aa-4a93-ab42-82d80e75500e - - - - -] non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>: ValueError: non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection Traceback (most recent call last):
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovsdbapp/backend/ovs_idl/connection.py", line 107, in run
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection self.idl.run()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/db/idl.py", line 433, in run
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection self._session.run()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/jsonrpc.py", line 519, in run
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection error = self.stream.connect()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 817, in connect
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection retval = super(SSLStream, self).connect()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 300, in connect
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection self.__scs_connecting()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 268, in __scs_connecting
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection retval = self.check_connection_completion(self.socket)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 777, in check_connection_completion
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return Stream.check_connection_completion(sock)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 137, in check_connection_completion
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return ovs.socket_util.check_connection_completion(sock)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/socket_util.py", line 181, in check_connection_completion
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection sock.send("\0".encode(), socket.MSG_DONTWAIT)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 193, in send
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return self._call_trampolining(
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 157, in _call_trampolining
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return func(*a, **kw)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3.8/ssl.py", line 1170, in send
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection raise ValueError(
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection ValueError: non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection During handling of the above exception, another exception occurred:
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection Traceback (most recent call last):
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovsdbapp/backend/ovs_idl/connection.py", line 116, in run
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection idlutils.wait_for_change(self.idl, self.timeout)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py", line 51, in wait_for_change
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection while idl_.change_seqno == seqno and not idl_.run():
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/db/idl.py", line 433, in run
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection self._session.run()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/jsonrpc.py", line 519, in run
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection error = self.stream.connect()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 817, in connect
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection retval = super(SSLStream, self).connect()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 300, in connect
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection self.__scs_connecting()
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 268, in __scs_connecting
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection retval = self.check_connection_completion(self.socket)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 777, in check_connection_completion
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return Stream.check_connection_completion(sock)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/stream.py", line 137, in check_connection_completion
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return ovs.socket_util.check_connection_completion(sock)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/ovs/socket_util.py", line 181, in check_connection_completion
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection sock.send("\0".encode(), socket.MSG_DONTWAIT)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 193, in send
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return self._call_trampolining(
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 157, in _call_trampolining
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection return func(*a, **kw)
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection File "/usr/lib/python3.8/ssl.py", line 1170, in send
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection raise ValueError(
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection ValueError: non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.backend.ovs_idl.connection
2022-08-10 00:00:22.089 646221 INFO ovsdbapp.backend.ovs_idl.connection [req-d6abd5b4-69aa-4a93-ab42-82d80e75500e - - - - -] Trying to recover, sleeping 60 seconds

The following relevant OVS packages are installed

root@ps5-rb1-n1:~# dpkg -l | grep openvswitch
ii openvswitch-common 2.17.2-0ubuntu0 amd64 Open vSwitch common components
ii openvswitch-switch 2.17.2-0ubuntu0 amd64 Open vSwitch switch implementations
ii python3-openvswitch 2.17.2-0ubuntu0 amd64 Python 3 bindings for Open vSwitch

This should be fixed by the following patch proposed but not yet commited upstream:
https://patchwork.ozlabs<email address hidden>/

[Edward Hope-Morley (hopem)]

patch is now merged upstream [1]. needs backporting.

https://github.com/openvswitch/ovs/commit/1731ed43c6dca385ed1f6a7fb25148f0a34fd3b9

[Edward Hope-Morley (hopem)]

Has also already been backported upstream:

2.17: https://github.com/openvswitch/ovs/commit/fe27e0c8843ce37cd0f63ce19c11850e6865c85e

[Alin-Gabriel Serdean (alin-serdean)]

Steps to reproduce

* Use a python client to connect to the Southbound Database.
* Once it is connected add an iptables rule to reject that traffic with TCP reset.
* Restart the application after installing the rule mentioned above and you will receive the following callstack:
File "/usr/lib/python3/dist-packages/ovs/db/idl.py", line 398, in run
    self._session.run()
  File "/usr/lib/python3/dist-packages/ovs/jsonrpc.py", line 532, in run
    self.__connect()
  File "/usr/lib/python3/dist-packages/ovs/jsonrpc.py", line 467, in __connect
    error, self.stream = ovs.stream.Stream.open(name)
  File "/usr/lib/python3/dist-packages/ovs/stream.py", line 196, in open
    err = cls.check_connection_completion(sock)
  File "/usr/lib/python3/dist-packages/ovs/stream.py", line 777, in check_connection_completion
    return Stream.check_connection_completion(sock)
  File "/usr/lib/python3/dist-packages/ovs/stream.py", line 137, in check_connection_completion
    return ovs.socket_util.check_connection_completion(sock)
  File "/usr/lib/python3/dist-packages/ovs/socket_util.py", line 181, in check_connection_completion
    sock.send("\0".encode(), socket.MSG_DONTWAIT)
  File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 193, in send
    return self._call_trampolining(
  File "/usr/lib/python3/dist-packages/eventlet/green/ssl.py", line 157, in _call_trampolining
    return func(*a, **kw)
  File "/usr/lib/python3.8/ssl.py", line 1170, in send
    raise ValueError(
ValueError: non-zero flags not allowed in calls to send() on <class 'eventlet.green.ssl.GreenSSLSocket'>

Example using Openstack + neutron-ovn-metadata-agent (ovsdbapp):
* Check a compute instance which has neutron-ovn-metadata-agent connected to the SB DB:
$ sudo netstat -tuapn | grep 6642
tcp 0 0 10.230.57.99:38834 10.230.62.255:6642 ESTABLISHED 2209992/ovn-control
tcp 0 0 10.230.57.99:59670 10.230.58.204:6642 ESTABLISHED 3687447/neutron-ovn
tcp 0 0 10.230.57.99:45296 10.230.58.185:6642 ESTABLISHED 3687446/neutron-ovn
tcp 0 0 10.230.57.99:59668 10.230.58.204:6642 ESTABLISHED 3687426/neutron-ovn
* Add iptable rule to reject traffic:
$ sudo iptables -A OUTPUT -p tcp --destination-port 6642 -j REJECT --reject-with tcp-reset
* Restart the neutron-ovn-metadata-agent:
$ sudo systemctl restart neutron-ovn-metadata-agent.service
* Check log at /var/log/neutron/neutron-ovn-metadata-agent.log

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "openvswitch_2.17.2-0ubuntu0.22.04.1~cloud0ubuntu1.debdiff" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.]

[Edward Hope-Morley (hopem)]

already in v3.0.0 so can skip kinetic sru

[Przemyslaw Hausman (phausman)]

I'm subscribing field-critical as this problem is encountered on a customer deployment. Customer shuts down random control node (one of three) and expects that the OpenStack API is still available. The issue is blocking the handover of the cloud.

[Chris MacNaughton (chris.macnaughton)]

This was uploaded to Jammy on 2022-09-28 and is now pending acceptance into jammy-proposed

[James Page (james-page)]

@ubuntu-sru - would it be possible to get this update accepted into -proposed soon? some urgency as its blocking a fairly large deployment.

[Brian Murray (brian-murray)]

Hello Alin-Gabriel, or anyone else affected,

Accepted openvswitch into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/openvswitch/2.17.2-0ubuntu0.22.04.2 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-jammy to verification-done-jammy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-jammy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted openvswitch (2.17.2-0ubuntu0.22.04.2) for jammy have finished running.
The following regressions have been reported in tests triggered by the package:

netplan.io/0.104-0ubuntu2.1 (amd64)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/jammy/update_excuses.html#openvswitch

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Edward Hope-Morley (hopem)]

@brian-murray looking at the autopkg test error in [1] it seems unrelated to this patch and is only happening for amd64. Is there a way to re-run these tests to see if it is transient?

[1] https://autopkgtest.ubuntu.com/results/autopkgtest-jammy/jammy/amd64/n/netplan.io/20221010_190522_06a57@/log.gz

[Edward Hope-Morley (hopem)]

autopkg test errors have been cleared and I have verified that the build is good using [Test Case] and also by rebooting the leader ovn-central unit.

# apt-cache policy openvswitch-common
openvswitch-common:
  Installed: 2.17.2-0ubuntu0.22.04.2
  Candidate: 2.17.2-0ubuntu0.22.04.2
  Version table:
 *** 2.17.2-0ubuntu0.22.04.2 500
        500 http://archive.ubuntu.com/ubuntu jammy-proposed/main amd64 Packages
        100 /var/lib/dpkg/status
     2.17.2-0ubuntu0.22.04.1 500
        500 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-updates/main amd64 Packages
     2.17.0-0ubuntu1 500
        500 http://nova.clouds.archive.ubuntu.com/ubuntu jammy/main amd64 Packages

[Przemyslaw Hausman (phausman)]

I have verified that the patched package built for focal-proposed/yoga works fine using [Test Case].

I have also used the reproducer from the duplicate bug: https://bugs.launchpad.net/charm-neutron-api/+bug/1991239, i.e. shut down the ovn-central unit, restarted neutron-server service on neutron-api unit and verified that the Neutron API is still available.

```
ubuntu@juju-9fd1fb-3-lxd-15:~$ apt policy python3-openvswitch openvswitch-common
python3-openvswitch:
  Installed: 2.17.2-0ubuntu0.22.04.2~cloud0
  Candidate: 2.17.2-0ubuntu0.22.04.2~cloud0
  Version table:
 *** 2.17.2-0ubuntu0.22.04.2~cloud0 500
        400 http://ubuntu-cloud.archive.canonical.com/ubuntu focal-proposed/yoga/main amd64 Packages
        100 /var/lib/dpkg/status
     2.17.2-0ubuntu0.22.04.1~cloud0 500
        500 http://ubuntu-cloud.archive.canonical.com/ubuntu focal-updates/yoga/main amd64 Packages
     2.13.8-0ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
     2.13.3-0ubuntu0.20.04.2 500
        500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages
     2.13.0-0ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
openvswitch-common:
  Installed: 2.17.2-0ubuntu0.22.04.2~cloud0
  Candidate: 2.17.2-0ubuntu0.22.04.2~cloud0
  Version table:
 *** 2.17.2-0ubuntu0.22.04.2~cloud0 500
        400 http://ubuntu-cloud.archive.canonical.com/ubuntu focal-proposed/yoga/main amd64 Packages
        100 /var/lib/dpkg/status
     2.17.2-0ubuntu0.22.04.1~cloud0 500
        500 http://ubuntu-cloud.archive.canonical.com/ubuntu focal-updates/yoga/main amd64 Packages
     2.13.8-0ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
     2.13.3-0ubuntu0.20.04.2 500
        500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages
     2.13.0-0ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
```

[Launchpad Janitor (janitor)]

This bug was fixed in the package openvswitch - 2.17.2-0ubuntu0.22.04.2

---------------
openvswitch (2.17.2-0ubuntu0.22.04.2) jammy; urgency=medium

  * d/p/python-Do-not-send-non-zero-flag-for-a-SSL-socket.patch:
    Do not send non-zero flag for a SSL socket. (LP: #1985062)

 -- Edward Hope-Morley <email address hidden> Wed, 28 Sep 2022 11:59:10 +0100

[Łukasz Zemczak (sil2100)]

The verification of the Stable Release Update for openvswitch has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Corey Bryant (corey.bryant)]

This bug was fixed in the package openvswitch - 2.17.2-0ubuntu0.22.04.2~cloud0
---------------

 openvswitch (2.17.2-0ubuntu0.22.04.2~cloud0) focal-yoga; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 openvswitch (2.17.2-0ubuntu0.22.04.2) jammy; urgency=medium
 .
   * d/p/python-Do-not-send-non-zero-flag-for-a-SSL-socket.patch:
     Do not send non-zero flag for a SSL socket. (LP: #1985062)