Neutron linuxbridge agent no longer accepts an IPv6 VXLAN local_ip

Bug #1531660 reported by Dustin Lundquist
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Medium
Doug Wiegley

Bug Description

Neutron linuxbridge agent no longer accepts cfg.CONF.VXLAN.local_ip as an IPv6 address. Prior to 9fc45cee this restriction wasn't in place. Neutron ML2 with the linuxbridge mechanism driver had supported VXLAN over IPv6 since IceHouse.

/etc/neutron/plugins/ml2/ml2_conf.ini:

[DEFAULT]
[ml2]
tenant_network_types = vxlan
extension_drivers = port_security
type_drivers = local,flat,vlan,gre,vxlan
mechanism_drivers = openvswitch,linuxbridge
[ml2_type_flat]
[ml2_type_geneve]
[ml2_type_gre]
tunnel_id_ranges = 1:1000
[ml2_type_vlan]
[ml2_type_vxlan]
vni_ranges = 1001:2000
[securitygroup]
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
[agent]
tunnel_types = vxlan
root_helper_daemon = sudo /usr/local/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf
root_helper = sudo /usr/local/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
[vxlan]
local_ip = 2001:db8::10
vxlan_group = ff05::10
enable_vxlan = True

When neutron-linuxbridge-agent is started, exits with:

CRITICAL neutron [-] ConfigFileValueError: Value for option local_ip is not valid: 2001:db8::10 is not an IPv4 address

description: updated
Assaf Muller (amuller)
Changed in neutron:
status: New → Confirmed
importance: Undecided → Medium
tags: added: linuxbridge
Changed in neutron:
assignee: nobody → Dustin Lundquist (dlundquist)
status: Confirmed → In Progress
tags: added: ipv6
Changed in neutron:
assignee: Dustin Lundquist (dlundquist) → Doug Wiegley (dougwig)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/263499
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=be9c9e3458ce61a299faebd974322f376c34c15e
Submitter: Jenkins
Branch: master

commit be9c9e3458ce61a299faebd974322f376c34c15e
Author: Dustin Lundquist <email address hidden>
Date: Wed Dec 30 15:59:36 2015 -0800

    Do not prohibit VXLAN over IPv6

    9fc45cee in introduced a regression prohibiting using VXLAN over
    IPv6. Relax restriction on local_ip, but validate that both
    local_ip and vxlan_group of the same address family. Move existing
    validation of vxlan_group into validate_vxlan_group_with_local_ip()
    method and refactor existing tests for that validation.

    Change-Id: I3d67732d2e1f3e079fee336b403744596fb7db77
    Depends-On: I6440445b80637a5a9f4de052cf5ea1fbd8dcf7d1
    Closes-Bug: #1531660

Changed in neutron:
status: In Progress → Fix Released
Revision history for this message
Thierry Carrez (ttx) wrote : Fix included in openstack/neutron 8.0.0.0b2

This issue was fixed in the openstack/neutron 8.0.0.0b2 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (stable/liberty)

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/270335

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (stable/liberty)

Reviewed: https://review.openstack.org/270335
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=2b96f42ddefcb3615bc03bb2b782a1ebe9e145c5
Submitter: Jenkins
Branch: stable/liberty

commit 2b96f42ddefcb3615bc03bb2b782a1ebe9e145c5
Author: Dustin Lundquist <email address hidden>
Date: Wed Dec 30 15:59:36 2015 -0800

    Do not prohibit VXLAN over IPv6

    9fc45cee in introduced a regression prohibiting using VXLAN over
    IPv6. Relax restriction on local_ip, but validate that both
    local_ip and vxlan_group of the same address family. Move existing
    validation of vxlan_group into validate_vxlan_group_with_local_ip()
    method and refactor existing tests for that validation.

    Change-Id: I3d67732d2e1f3e079fee336b403744596fb7db77
    Closes-Bug: #1531660
    (cherry picked from commit be9c9e3458ce61a299faebd974322f376c34c15e)

tags: added: in-stable-liberty
Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/neutron 7.0.3

This issue was fixed in the openstack/neutron 7.0.3 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.