Gateway_less_Fwd: Disabling policy on "vhost0" vmi interface is not working

Bug #1719554 reported by Chandra Sekhar Reddy Mallam
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R4.1
Fix Committed
Medium
Naveen N
Trunk
Fix Committed
Medium
Naveen N

Bug Description

Disabling policy on "vhost0" vmi interface is not working. Policy is always enabled irrespective of configuration on vhost0 interface.

root@nodek11:~# contrail-version
Package Version Build-ID | Repo | Package Name
-------------------------------------- ------------------------------ ----------------------------------
contrail-lib 4.1.0.0-60 60
contrail-nodemgr 4.1.0.0-60 60
contrail-setup 4.1.0.0-60 60
contrail-utils 4.1.0.0-60 60
contrail-vrouter-agent 4.1.0.0-60 60
contrail-vrouter-common 4.1.0.0-60 60
contrail-vrouter-dkms 4.1.0.0-60 60
contrail-vrouter-init 4.1.0.0-60 60
contrail-vrouter-utils 4.1.0.0-60 60
nova-common 2:13.0.0-0ubuntu2~cloud0.1contrail1 60
nova-compute 2:13.0.0-0ubuntu2~cloud0.1contrail1 60
nova-compute-kvm 2:13.0.0-0ubuntu2~cloud0.1contrail1 60
nova-compute-libvirt 2:13.0.0-0ubuntu2~cloud0.1contrail1 60
python-contrail 4.1.0.0-60 60
python-contrail-vrouter-api 4.1.0.0-60 60
python-neutronclient 1:4.1.1-2~cloud0.2contrail 60
python-nova 2:13.0.0-0ubuntu2~cloud0.1contrail1 60
python-opencontrail-vrouter-netns 4.1.0.0-60 60
root@nodek11:~#
root@nodek11:~# contrail-status
== Contrail vRouter ==
supervisor-vrouter: active
contrail-vrouter-agent active
contrail-vrouter-nodemgr active

root@nodek11:~#

root@nodek11:~# vif --get 1
Vrouter Interface Table

Flags: P=Policy, X=Cross Connect, S=Service Chain, Mr=Receive Mirror
       Mt=Transmit Mirror, Tc=Transmit Checksum Offload, L3=Layer 3, L2=Layer 2
       D=DHCP, Vp=Vhost Physical, Pr=Promiscuous, Vnt=Native Vlan Tagged
       Mnp=No MAC Proxy, Dpdk=DPDK PMD Interface, Rfl=Receive Filtering Offload, Mon=Interface is Monitored
       Uuf=Unknown Unicast Flood, Vof=VLAN insert/strip offload, Df=Drop New Flows, L=MAC Learning Enabled
       Proxy=MAC Requests Proxied Always, Er=Etree Root

vif0/1 OS: vhost0
            Type:Host HWaddr:0c:c4:7a:32:0a:88 IPaddr:10.204.216.231
            Vrf:0 Flags:PL3DEr QOS:-1 Ref:7
            RX packets:5573 bytes:4622033 errors:0
            TX packets:14349 bytes:2426659 errors:0
            Drops:1

root@nodek11:~#

 {
ecmp_hashing_include_fields: {
}
display_name: vhost0
virtual_machine_interface_mac_addresses: {
mac_address: [ ... ]
}
virtual_machine_interface_dhcp_option_list: {
}
href: http://10.204.217.127:8082/virtual-machine-interface/b71268f8-c66e-4f48-b64e-c8f74ddaedf3
name: vhost0
routing_instance_refs: [
 { ... }
]
virtual_machine_interface_disable_policy: false
parent_type: virtual-router
uuid: b71268f8-c66e-4f48-b64e-c8f74ddaedf3
virtual_machine_interface_allowed_address_pairs: {
}
virtual_network_refs: [
 { ... }
]
perms2: {
owner: cloud-admin
owner_access: 7
global_access: 0
share: [ ... ]
}
id_perms: {
enable: true
description: null
creator: null
created: 2017-09-24T05:30:24.398983
user_visible: true
last_modified: 2017-09-26T09:57:35.822517
permissions: { ... }
uuid: { ... }
}
virtual_machine_interface_device_owner:
port_security_enabled: true
fq_name: [
default-global-system-config
nodek11
vhost0
]
virtual_machine_interface_properties: {
local_preference: null
interface_mirror: null
}
parent_uuid: 77ee447d-7f6c-427b-9bbc-e0e4f0d3c7a9
}

Tags: vrouter
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/36417
Submitter: Naveen N (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/36417
Committed: http://github.com/Juniper/contrail-controller/commit/43bc368d0a6ea26c0976bcfaf8559af4345af353
Submitter: Zuul (<email address hidden>)
Branch: master

commit 43bc368d0a6ea26c0976bcfaf8559af4345af353
Author: Naveen N <email address hidden>
Date: Wed Oct 11 19:02:30 2017 +0530

* Disable policy bit on vhost by default

Enable policy only if vhost configuration is present.

Change-Id: Ia9922d4e0f39c7083be77ddad0e1f870b2eeb3f6
Closes-bug: #1719554

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.1

Review in progress for https://review.opencontrail.org/36546
Submitter: Hari Prasad Killi (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/36546
Committed: http://github.com/Juniper/contrail-controller/commit/eeae4d522fcd1b7321379571e215e5e5a21c8e96
Submitter: Zuul (<email address hidden>)
Branch: R4.1

commit eeae4d522fcd1b7321379571e215e5e5a21c8e96
Author: Naveen N <email address hidden>
Date: Wed Oct 11 19:02:30 2017 +0530

* Disable policy bit on vhost by default

Enable policy only if vhost configuration is present.

Change-Id: Ia9922d4e0f39c7083be77ddad0e1f870b2eeb3f6
Closes-bug: #1719554
(cherry picked from commit 43bc368d0a6ea26c0976bcfaf8559af4345af353)

Nischal Sheth (nsheth)
information type: Proprietary → Public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.