[EVPN VXLAN] Ping to non gateway IP getting discarded in agent when agent_mode tsn-no-forwarding

Bug #1724064 reported by chhandak
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R4.0
Fix Committed
Critical
Manish Singh
R4.1
Fix Committed
Critical
Manish Singh
Trunk
Fix Committed
Critical
Manish Singh

Bug Description

When agent mode set to tsn-no-forwarding only gateway IP is reachable. Packet destined to all other network poiting to vhost0 is getting discarded by agent.

When agehnt mode is not tsn-no-forwarding evrything woks as expected. Trying this with the private binary provided by agent team for L2 ECMP testing

root@5b11s14:~# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.87.69.126 0.0.0.0 UG 0 0 0 eno1
10.87.69.0 0.0.0.0 255.255.255.128 U 0 0 0 eno1
172.16.2.1 172.16.180.254 255.255.255.255 UGH 0 0 0 vhost0
172.16.3.1 172.16.180.254 255.255.255.255 UGH 0 0 0 vhost0
172.16.4.1 172.16.180.254 255.255.255.255 UGH 0 0 0 vhost0
172.16.5.1 172.16.180.254 255.255.255.255 UGH 0 0 0 vhost0
172.16.5.10 172.16.180.254 255.255.255.255 UGH 0 0 0 vhost0
172.16.6.1 172.16.180.254 255.255.255.255 UGH 0 0 0 vhost0
172.16.180.0 0.0.0.0 255.255.255.0 U 0 0 0 vhost0
172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0

root@5b11s14:~# cat /etc/contrail/contrail-vrouter-agent.conf | grep agent_mode
# agent_mode=
agent_mode =tsn-no-forwarding
#agent_mode =
root@5b11s14:~# ping 172.16.5.1
PING 172.16.5.1 (172.16.5.1) 56(84) bytes of data.
^C
--- 172.16.5.1 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

root@5b11s14:~# ping 172.16.180.102
PING 172.16.180.102 (172.16.180.102) 56(84) bytes of data.
^C
--- 172.16.180.102 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

root@5b11s14:~#

root@5b11s14:~# dropstats | grep discard
root@5b11s14:~# dropstats | grep Discard
IF TX Discard 0
IF RX Discard 0
Discards 95
root@5b11s14:~# dropstats | grep Discard
IF TX Discard 0
IF RX Discard 0
Discards 97
root@5b11s14:~# dropstats | grep Discard
IF TX Discard 0
IF RX Discard 0
Discards 97
root@5b11s14:~# dropstats | grep Discard
IF TX Discard 0
IF RX Discard 0
Discards 99

root@5b11s14:~# cat /etc/contrail/contrail-vrouter-agent.conf | grep agent_mode
# agent_mode=
#agent_mode =tsn-no-forwarding
agent_mode =

root@5b11s14:~#
root@5b11s14:~# ping 172.16.5.1
PING 172.16.5.1 (172.16.5.1) 56(84) bytes of data.
64 bytes from 172.16.5.1: icmp_seq=1 ttl=63 time=2.86 ms
64 bytes from 172.16.5.1: icmp_seq=2 ttl=63 time=0.997 ms
^C
--- 172.16.5.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 0.997/1.933/2.869/0.936 ms
root@5b11s14:~# ping 172.16.180.102
PING 172.16.180.102 (172.16.180.102) 56(84) bytes of data.
64 bytes from 172.16.180.102: icmp_seq=1 ttl=63 time=1.06 ms
^C
--- 172.16.180.102 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 1.066/1.066/1.066/0.000 ms

chhandak (chhandak)
Changed in juniperopenstack:
importance: Undecided → High
assignee: nobody → Manish Singh (manishs)
importance: High → Critical
milestone: none → r4.1.0.0-fcs
information type: Proprietary → Public
tags: added: blocker
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.1

Review in progress for https://review.opencontrail.org/36622
Submitter: Manish Singh (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.0

Review in progress for https://review.opencontrail.org/36623
Submitter: Manish Singh (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/36624
Submitter: Manish Singh (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/36622
Committed: http://github.com/Juniper/contrail-controller/commit/a6010ddd5096c9e16d17bad55d74130f0cfed414
Submitter: Zuul (<email address hidden>)
Branch: R4.1

commit a6010ddd5096c9e16d17bad55d74130f0cfed414
Author: Manish <email address hidden>
Date: Wed Oct 18 15:05:16 2017 +0530

In agent mode tsn-no-forwarding ping in fabric failed.

This happened because tsn-no-forwarding does not let IP route get added as it is
not a forwarding agent and is to be used for services like dhcp/dns. This
blocked fabric routes resulting in ping failure.

Solution:
Add exception for routes in fabric vrf.

Change-Id: Iadd386622e7f9756dabcaaf82782a00bacef3317
Closes-bug: #1724064

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/36624
Committed: http://github.com/Juniper/contrail-controller/commit/3fb8f901afb9c464644a8f1547738911c8fc10b1
Submitter: Zuul (<email address hidden>)
Branch: master

commit 3fb8f901afb9c464644a8f1547738911c8fc10b1
Author: Manish <email address hidden>
Date: Wed Oct 18 15:05:16 2017 +0530

In agent mode tsn-no-forwarding ping in fabric failed.

This happened because tsn-no-forwarding does not let IP route get added as it is
not a forwarding agent and is to be used for services like dhcp/dns. This
blocked fabric routes resulting in ping failure.

Solution:
Add exception for routes in fabric vrf.

Change-Id: Iadd386622e7f9756dabcaaf82782a00bacef3317
Closes-bug: #1724064

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/36623
Committed: http://github.com/Juniper/contrail-controller/commit/272d9665ade2992b657c0ad00e494cdebe4cdf22
Submitter: Zuul (<email address hidden>)
Branch: R4.0

commit 272d9665ade2992b657c0ad00e494cdebe4cdf22
Author: Manish <email address hidden>
Date: Wed Oct 18 15:05:16 2017 +0530

In agent mode tsn-no-forwarding ping in fabric failed.

This happened because tsn-no-forwarding does not let IP route get added as it is
not a forwarding agent and is to be used for services like dhcp/dns. This
blocked fabric routes resulting in ping failure.

Solution:
Add exception for routes in fabric vrf.

Change-Id: Iadd386622e7f9756dabcaaf82782a00bacef3317
Closes-bug: #1724064

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.