Failure to Forward Traffic for VIP-bound Floating IP in HA Router
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
- OpenStack version: Based on /stable/victoria
Environment information: mgt04 and mgt05 are snat nodes for Neutron.
- Description:
vm1 is a virtual machine of router1 without a floating IP (fip). The network:
vm2 is a virtual machine of router2 with a VIP that is bound to fip1. Router2 is a high availability (HA) router with l3agents running on mgt04 and mgt05. Currently, mgt04 is the master node for this router.
- The traffic flow for vm1 pinging vm2 is as follows:
tap-vm1 ----> qrouter1-netns ----> snat-netns-
[root@mgt05 ~]# ovs-appctl ofproto/trace br-int in_port=
Flow: icmp,in_
3e:6e:a6:
62,icmp_
bridge("br-int")
----------------
0. priority 0, cookie 0x3d6d07f41c6793a3
goto_table:60
60. in_port=
set_
resubmit(,61)
61. reg6=0x2,
output:143
Final flow: icmp,reg6=
,dl_dst=
nw_ecn=
Megaflow: recirc_
:3e:6e:
Datapath actions: 33
[root@mgt05 ~]#
[root@mgt05 ~]# ovs-dpctl show |grep 33
port 33: qg-111ff616-09 (internal)
[root@mgt05 ~]# ip netns exec snat-ed122990-
1: lo: <LOOPBACK,
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
266: ha-931f41ef-99: <BROADCAST,
link/ether fa:16:3e:52:ff:e7 brd ff:ff:ff:ff:ff:ff
inet 169.254.192.54/18 brd 169.254.255.255 scope global ha-931f41ef-99
valid_lft forever preferred_lft forever
inet6 fe80::f816:
valid_lft forever preferred_lft forever
268: sg-0814de55-6a: <BROADCAST,
link/ether fa:16:3e:4e:19:b6 brd ff:ff:ff:ff:ff:ff
272: qg-111ff616-09: <BROADCAST,
link/ether fa:16:3e:6e:a6:63 brd ff:ff:ff:ff:ff:ff
# openstack port show 111ff616-
+------
| Field | Value |
+------
| admin_state_up | UP |
| allowed_
| binding_host_id | mgt04 |
| binding_profile | |
| binding_vif_details | bridge_
| device_id | ed122990-
| device_owner | network: