DVR: Fix allowed_address_pair IP, ARP table update by neutron agent
Allowed_address_pair IP when associated with a network port will
inherit the services MAC.
Right now the ARP entry is updated with the last MAC that it is
associated with. But when allowed_address_pair IPs are used in
the context of VRRP the MAC keeps switching between the MASTER
and SLAVE. VRRP instance sends out GARP, but the ARP entry in the
router namespace is not getting updated based on the GARP.
This might cause the VRRP IP and the service using the IP to fail.
Since we having been adding the ARP entry with NUD state as
PERMANENT, the ARP entries are set for ever and does not adopt the
GARP sent out by the VRRP instance.
This will cause instances associated with DVR routers to have a
service interruption.
So the proposed patch will add the ARP entry for the Allowed address
pair with NUD for 'REACHABLE'.
This allows the Allowed_address_pair IP MAC to be updated on the
fly.
Reviewed: https:/ /review. openstack. org/550676 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=fbe308bdc12 191c187343b5ef1 03dea9af738380
Committed: https:/
Submitter: Zuul
Branch: master
commit fbe308bdc12191c 187343b5ef103de a9af738380
Author: Swaminathan Vasudevan <email address hidden>
Date: Wed Mar 7 19:03:42 2018 -0800
DVR: Fix allowed_ address_ pair IP, ARP table update by neutron agent
Allowed_ address_ pair IP when associated with a network port will address_ pair IPs are used in
inherit the services MAC.
Right now the ARP entry is updated with the last MAC that it is
associated with. But when allowed_
the context of VRRP the MAC keeps switching between the MASTER
and SLAVE. VRRP instance sends out GARP, but the ARP entry in the
router namespace is not getting updated based on the GARP.
This might cause the VRRP IP and the service using the IP to fail.
Since we having been adding the ARP entry with NUD state as
PERMANENT, the ARP entries are set for ever and does not adopt the
GARP sent out by the VRRP instance.
This will cause instances associated with DVR routers to have a
service interruption.
So the proposed patch will add the ARP entry for the Allowed address address_ pair IP MAC to be updated on the
pair with NUD for 'REACHABLE'.
This allows the Allowed_
fly.
Change-Id: I43c3471f5d259e 8c2ee1685398a06 a4680c0bfcd
Closes-Bug: #1608400