Juniper Openstack

  1. Bug #1491644
  2. Comment #19

Comment 19 for bug 1491644

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/13981
Committed: http://github.org/Juniper/contrail-vrouter/commit/5f22a1425f7d5d4ba5005d4dc9f429ed772b263a
Submitter: Zuul
Branch: master

commit 5f22a1425f7d5d4ba5005d4dc9f429ed772b263a
Author: Divakar <email address hidden>
Date: Tue Sep 22 21:59:40 2015 +0530

Replyin to ARP request of ECMP source only if VM is hosted

When an ARP request is received on compute node on fabric interface from
an ECMP source, ARP response is sent with Vhost mac even though the ARP
request is not meant for any VM on that compute node. Because of this,
even if BMS pings another BMS, every compute node receiving this ARP
request is responding with Vhost mac leading to ARP cache poisoning in
BMS.

As a fix, only if ARP request is meant for a VM on compute node, the
response is sent with Vhost mac.

Change-Id: Iae8541c8404d6e6ce530f994b64b03dc0cd73170
closes-bug: #1491644