dvr floating IP not work
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
New
|
Undecided
|
Unassigned |
Bug Description
openstack Q
centos7.5
[root@compute02 ~]# uname -r
3.10.0-
neutron L3 DVR enable
compute node:
There are 2 vm dvr (float IP) on compute02 that cannot access each other.
192.0.2.11 and 192.0.2.14 can be ping successfully
compute02:
vm1 vm2
192.0.2.11 192.0.2.14
192.168.16.13(float IP) 192.168.16.22(float IP)
[root@compute02 ~]# ip netns
qrouter-
fip-2b3cd7de-
[root@compute02 ~]# ip netns exec fip-2b3cd7de-
169.254.95.212/31 dev fpr-58b0f4c6-9 proto kernel scope link src 169.254.95.213
192.168.16.0/24 dev fg-690c809d-54 proto kernel scope link src 192.168.16.6
192.168.16.13 via 169.254.95.212 dev fpr-58b0f4c6-9
192.168.16.22 via 169.254.95.212 dev fpr-58b0f4c6-9
root@compute02 ~]# ip netns exec qrouter-
169.254.95.212/31 dev rfp-58b0f4c6-9 proto kernel scope link src 169.254.95.212
192.0.2.0/24 dev qr-3dad3c3e-4c proto kernel scope link src 192.0.2.1
[root@compute02 ~]# ip netns exec qrouter-
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-N neutron-
-N neutron-
-N neutron-
-N neutron-
-N neutron-
-N neutron-
-A PREROUTING -j neutron-
-A OUTPUT -j neutron-
-A POSTROUTING -j neutron-
-A POSTROUTING -j neutron-
-A neutron-
-A neutron-
-A neutron-
-A neutron-
-A neutron-
-A neutron-
-A neutron-
-A neutron-
[root@compute02 ~]# ip netns exec qrouter-
1: lo: <LOOPBACK,
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: @if5: <BROADCAST,
link/ether fa:68:2b:be:da:93 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 169.254.95.212/31 scope global rfp-58b0f4c6-9
valid_lft forever preferred_lft forever
inet6 fe80::f868:
valid_lft forever preferred_lft forever
310: qr-3dad3c3e-4c: <BROADCAST,
link/ether fa:16:3e:4d:79:56 brd ff:ff:ff:ff:ff:ff
inet 192.0.2.1/24 brd 192.0.2.255 scope global qr-3dad3c3e-4c
valid_lft forever preferred_lft forever
inet6 fe80::f816:
valid_lft forever preferred_lft forever
[root@compute02 ~]# ip netns exec qrouter-
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on rfp-58b0f4c6-9, link-type EN10MB (Ethernet), capture size 262144 bytes
21:29:07.754841 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 1, length 64
21:29:08.753192 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 2, length 64
21:29:09.753182 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 3, length 64
21:29:10.753210 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 4, length 64
21:29:11.753181 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 5, length 64
21:29:12.753200 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 6, length 64
21:29:13.753191 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 7, length 64
21:29:14.753170 IP 192.168.16.11 > 192.168.16.22: ICMP echo request, id 2606, seq 8, length 64
Marked as duplicated to bug #1776778.
Try to upgrade your kernal to fix this.