[RFE] DVR should route packets to Instances behind the L2 Gateway

[Swaminathan Vasudevan]

L2 Gateway bridges the neutron network with the hardware based VxLAN gateways. The DVR routers in neutron could not forward traffic to an instance that is behind the VxLAN gateways since it could not 'ARP' for those instances.

DVR currently has prepopulated ARP entries for all instances created with DVR serviceable port. But somehow we should be able to populate the ARP entries of instances behind the VxLAN gateway on all DVR nodes and so the traffic can flow between them.

[Armando Migliaccio (armando-migliaccio)]

The need is clear IMO, and we would need to elaborate on how to achieve this from the Neutron DVR's point of view. For this reason, I'd suggest putting together a spec that outlines the changes that you think are required in Neutron DVR (alone) to allow something like L2GW to integrate with.

[Armando Migliaccio (armando-migliaccio)]

Status update:

http://eavesdrop.openstack.org/meetings/neutron_drivers/2016/neutron_drivers.2016-05-26-22.01.log.html#l-126

[Armando Migliaccio (armando-migliaccio)]

I saw fix in [1], though I am not sure the full extent of it. Having said that, knowing that the l2gw project has been in the doldrums for sometime and the imminent Neutron Stadium evolution plan I wonder if now is the right time to investigate/resolve this issue rather than taking the time to invest in the long-term viability of the project.

[1] https://bugs.launchpad.net/neutron/+bug/1563879

[Armando Migliaccio (armando-migliaccio)]

Oops: https://review.openstack.org/#/c/312593/

[Armando Migliaccio (armando-migliaccio)]

anyone can share an update?

[Armando Migliaccio (armando-migliaccio)]

Status update:

http://eavesdrop.openstack.org/meetings/neutron_drivers/2016/neutron_drivers.2016-06-30-22.00.log.html#l-216

[Carl Baldwin (carl-baldwin)]

This should be addressed by [1] based on a discussion with Swami and a quick review.

[1] https://review.openstack.org/#/c/312593/

[Swaminathan Vasudevan (swaminathan-vasudevan)]

Yes this approach in patch #312593 should solve the issue of redirecting the instance traffic behind a L2 gateway to an instance behind the cloud connected through a DVR router.

The issue had been in identifying the right node, where the cloud instance resides. Since DVR routers use the same router_interface address on all router_namespace in all compute nodes.

This approach will forward all traffic to the network node vxlan tunnel and hence the traffic will then be routed to the respective destination node.(east-west).

The only concern here is the asynchronous traffic. The incoming traffic from the L2 gateway will always hit the network node vxlan tunnel, but the outgoing traffic can be forwarded directly from the compute host.

[Carl Baldwin (carl-baldwin)]

Is this one a duplicate of https://bugs.launchpad.net/networking-l2gw/+bug/1463784 ?