[ovn-octavia-provider] Member with FIP not reachable

Bug #2062385 reported by Mohammed Naser
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
neutron
New
High
Fernando Royo

Bug Description

We've noticed the following issue with the OVN octavia provider and we've narrowed it down to the following:

- Member with floating IP not reachable through load balancer

We've noticed that at first, it loses all connectivity. Once the floating IP gets removed and added, the VM will gain connectivity directly. However, that member will continue to be unreachable via the load balancer (but other members without floating IPs will work).

DVR is enabled in this case.

tags: added: ovn-octavia-provider
Changed in neutron:
assignee: nobody → Fernando Royo (froyoredhat)
Changed in neutron:
importance: Undecided → High
Revision history for this message
Fernando Royo (froyoredhat) wrote :

Hi,

I assume that your LB is also using a FIP attached to LB VIP, and that case is a known limitation.
When Load Balancer and its member has FIP assigned and environment is configured to use DVR the member FIP needs to be centralized. It is current core OVN limitation and doesn't look is will be fixed soon as last time it was addressed we get this feedback:

"don't think we can resolve this issue. If a LB VIP has FIP, then the traffic from North -> South needs
to be load balanced and unless it is centralized on gateway node, we cannnot do load balancing."

Confirm that this is your env context "FIP attached to LB VIP and the Member also with FIP attached".

Revision history for this message
Cristian Contescu (ckristi) wrote (last edit ):

Hi Fernando,

So, let me see if I understand this correctly, given this (very simplistic representation of the) setup:

```
North/Internet <------> (Octavia OVN loadbalancer + listener + pool; (VIP with floating IP attached )
                                                         <------> Member1 (VM1)
                                                         <------> Member2 (VM2)
                                                         <------> Member3 (VM3 with a FIP attached prior to becoming an LB member)
```

it is always expected for the Member3 to not be reachable (at least until the VM3 floating IP is removed)?

I am asking since this seems to be matching the issue described by Mohammed in this ticket as well: https://bugs.launchpad.net/neutron/+bug/2059716

Thank you for the clarifications.

All the best,
Cristi

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.