ovsdbapp ssl send socket error
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu Cloud Archive |
Fix Released
|
High
|
Unassigned | ||
Yoga |
Fix Released
|
High
|
Unassigned | ||
openvswitch |
Fix Released
|
Undecided
|
Unassigned | ||
openvswitch (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Jammy |
Fix Released
|
High
|
Unassigned | ||
Kinetic |
Fix Released
|
High
|
Unassigned |
Bug Description
[Impact]
Python clients that use python3-openvswitch i.e. ovsdbapp will fail on socket error with the callstack above while trying to connect to their corresponding servers
[Test Case]
* deploy Openstack Yoga
* check on a compute instance which has neutron-
$ sudo netstat -tuapn | grep 6642
tcp 0 0 10.230.57.99:38834 10.230.62.255:6642 ESTABLISHED 2209992/ovn-control
tcp 0 0 10.230.57.99:59670 10.230.58.204:6642 ESTABLISHED 3687447/neutron-ovn
tcp 0 0 10.230.57.99:45296 10.230.58.185:6642 ESTABLISHED 3687446/neutron-ovn
tcp 0 0 10.230.57.99:59668 10.230.58.204:6642 ESTABLISHED 3687426/neutron-ovn
* Add iptable rule to reject traffic for SB DB port 6442:
$ sudo iptables -A OUTPUT -p tcp --destination-port 6642 -j REJECT --reject-with tcp-reset
* Restart the neutron-
$ sudo systemctl restart neutron-
* Check log at /var/log/
[Where things could go wrong]
Regression is not expected since this will just remove the unneeded socket options. The fix has also been applied upstream https:/
[Original bug description]
ovsdbapps are sometimes failing with the following callstack:
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.087 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.088 646221 ERROR ovsdbapp.
2022-08-10 00:00:22.089 646221 INFO ovsdbapp.
The following relevant OVS packages are installed
root@ps5-rb1-n1:~# dpkg -l | grep openvswitch
ii openvswitch-common 2.17.2-0ubuntu0 amd64 Open vSwitch common components
ii openvswitch-switch 2.17.2-0ubuntu0 amd64 Open vSwitch switch implementations
ii python3-openvswitch 2.17.2-0ubuntu0 amd64 Python 3 bindings for Open vSwitch
This should be fixed by the following patch proposed but not yet commited upstream:
https:/
Related branches
- James Page: Pending requested
-
Diff: 83 lines (+62/-0)3 files modifieddebian/changelog (+7/-0)
debian/patches/python-Do-not-send-non-zero-flag-for-a-SSL-socket.patch (+54/-0)
debian/patches/series (+1/-0)
affects: | snapcraft → openvswitch |
Changed in openvswitch (Ubuntu Jammy): | |
status: | New → Triaged |
importance: | Undecided → High |
Changed in openvswitch (Ubuntu Kinetic): | |
importance: | Undecided → High |
Changed in cloud-archive: | |
status: | New → Triaged |
importance: | Undecided → High |
description: | updated |
description: | updated |
description: | updated |
Changed in cloud-archive: | |
status: | Triaged → Fix Committed |
tags: | added: verification-yoga-needed |
tags: | removed: verification-done-focal |
Changed in openvswitch: | |
status: | New → Fix Released |
patch is now merged upstream [1]. needs backporting.
https:/ /github. com/openvswitch /ovs/commit/ 1731ed43c6dca38 5ed1f6a7fb25148 f0a34fd3b9