$ openstack port list --network ipv6-pd
/usr/lib/python3/dist-packages/secretstorage/dhcrypto.py:15: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
from cryptography.utils import int_from_bytes
/usr/lib/python3/dist-packages/secretstorage/util.py:19: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
from cryptography.utils import int_from_bytes
+--------------------------------------+------+-------------------+-----------------------------------------------------------------------------------------------------+--------+
| ID | Name | MAC Address | Fixed IP Addresses | Status |
+--------------------------------------+------+-------------------+-----------------------------------------------------------------------------------------------------+--------+
| 4e0179bb-1dbd-46bb-b86e-935224889858 | | fa:16:3e:7b:2b:b6 | ip_address='2001:db8:2222:d1c::1', subnet_id='db9e25b3-9a51-488a-b257-658351e928c6' | ACTIVE |
| dc7ef71d-ec1d-44eb-be9f-fb2c67f6cac2 | | fa:16:3e:51:0b:fa | ip_address='2001:db8:2222:d1c:f816:3eff:fe51:bfa', subnet_id='db9e25b3-9a51-488a-b257-658351e928c6' | ACTIVE |
| f7de9144-45c4-4664-bf91-eb4048de1670 | | fa:16:3e:bd:06:e0 | ip_address='2001:db8:2222:d1c:f816:3eff:febd:6e0', subnet_id='db9e25b3-9a51-488a-b257-658351e928c6' | DOWN |
+--------------------------------------+------+-------------------+-----------------------------------------------------------------------------------------------------+--------+
From vm:-
$ ping 2001:db8:2222:d1c::1
PING 2001:db8:2222:d1c::1 (2001:db8:2222:d1c::1): 56 data bytes
64 bytes from 2001:db8:2222:d1c::1: seq=0 ttl=254 time=2.191 ms
64 bytes from 2001:db8:2222:d1c::1: seq=1 ttl=254 time=0.785 ms
64 bytes from 2001:db8:2222:d1c::1: seq=2 ttl=254 time=0.834 ms
^C
--- 2001:db8:2222:d1c::1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.785/1.270/2.191 ms
I tried to reproduce but couldn't, i did on master devstack env:-
openstack security group create basic
openstack security group rule create basic --protocol tcp --dst-port 22:22 --remote-ip 0.0.0.0/0
openstack security group rule create basic --protocol tcp --dst-port 22:22 --ethertype ipv6
openstack security group rule create --protocol icmp basic
openstack security group rule create --protocol icmp basic --ethertype ipv6
openstack security group rule create --protocol udp --dst-port 53:53 basic
test -f ~/.ssh/id_rsa.pub || ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
openstack keypair create --public-key ~/.ssh/id_rsa.pub default
# nova flavor
openstack flavor create --ram 512 --disk 1 --vcpu 1 --public tiny
openstack network create ipv6-pd 2222:d1c: :1 --allocation- pool=start= 2001:db8: 2222:d1c: :2,end= 2001:db8: 2222:d1c: ffff:ffff: ffff:ffff ipv6-pd-1 --subnet-range 2001:db8: 2222:d1c: :/64
openstack subnet create --ip-version 6 --ipv6-ra-mode slaac --ipv6-address-mode slaac --network ipv6-pd --gateway 2001:db8:
openstack router add subnet router1 ipv6-pd-1
openstack server create --nic net-id=ipv6-pd --image cirros- 0.5.2-x86_ 64-disk --security-group basic --key-name default --flavor tiny testvm
$ openstack port list --network ipv6-pd python3/ dist-packages/ secretstorage/ dhcrypto. py:15: CryptographyDep recationWarning : int_from_bytes is deprecated, use int.from_bytes instead python3/ dist-packages/ secretstorage/ util.py: 19: CryptographyDep recationWarning : int_from_bytes is deprecated, use int.from_bytes instead ------- ------- ------- ------- ----+-- ----+-- ------- ------- ---+--- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- +------ --+ ------- ------- ------- ------- ----+-- ----+-- ------- ------- ---+--- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- +------ --+ 1dbd-46bb- b86e-9352248898 58 | | fa:16:3e:7b:2b:b6 | ip_address= '2001:db8: 2222:d1c: :1', subnet_ id='db9e25b3- 9a51-488a- b257-658351e928 c6' | ACTIVE | ec1d-44eb- be9f-fb2c67f6ca c2 | | fa:16:3e:51:0b:fa | ip_address= '2001:db8: 2222:d1c: f816:3eff: fe51:bfa' , subnet_ id='db9e25b3- 9a51-488a- b257-658351e928 c6' | ACTIVE | 45c4-4664- bf91-eb4048de16 70 | | fa:16:3e:bd:06:e0 | ip_address= '2001:db8: 2222:d1c: f816:3eff: febd:6e0' , subnet_ id='db9e25b3- 9a51-488a- b257-658351e928 c6' | DOWN | ------- ------- ------- ------- ----+-- ----+-- ------- ------- ---+--- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- +------ --+
/usr/lib/
from cryptography.utils import int_from_bytes
/usr/lib/
from cryptography.utils import int_from_bytes
+------
| ID | Name | MAC Address | Fixed IP Addresses | Status |
+------
| 4e0179bb-
| dc7ef71d-
| f7de9144-
+------
From vm:- 2222:d1c: :1 2222:d1c: :1 (2001:db8: 2222:d1c: :1): 56 data bytes 2222:d1c: :1: seq=0 ttl=254 time=2.191 ms 2222:d1c: :1: seq=1 ttl=254 time=0.785 ms 2222:d1c: :1: seq=2 ttl=254 time=0.834 ms 2222:d1c: :1 ping statistics ---
$ ping 2001:db8:
PING 2001:db8:
64 bytes from 2001:db8:
64 bytes from 2001:db8:
64 bytes from 2001:db8:
^C
--- 2001:db8:
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.785/1.270/2.191 ms
$ sudo ovn-trace ipv6-pd 'inport == "dc7ef71d- ec1d-44eb- be9f-fb2c67f6ca c2" && eth.src == fa:16:3e:51:0b:fa && eth.dst == fa:16:3e:65:02:e9 && ip6.src == 2001:db8: 2222:d1c: f816:3eff: fe51:bfa && ip6.dst == 2001:db8: 2222:d1c: :1' 0x3,vlan_ tci=0x0000, dl_src= fa:16:3e: 51:0b:fa, dl_dst= fa:16:3e: 65:02:e9, ipv6_src= 2001:db8: 2222:d1c: f816:3eff: fe51:bfa, ipv6_dst= 2001:db8 :1,ipv6_ label=0x00000, nw_proto= 0,nw_tos= 0,nw_ecn= 0,nw_ttl= 0
# ipv6,reg14=
:2222:d1c:
ingress( dp="ipv6- pd", inport="dc7ef7") ------- ------- ------- ------- --- 3e:51:0b: fa}, priority 50, uuid af10c8f9 f816:3eff: fe51:bfa, 2001:db8:2222:d 3eff:fe51: bfa}, priority 90, uuid 956e95d5
-------
0. ls_in_port_sec_l2 (northd.c:5205): inport == "dc7ef7" && eth.src == {fa:16:
next;
1. ls_in_port_sec_ip (northd.c:4868): inport == "dc7ef7" && eth.src == fa:16:3e:51:0b:fa && ip6.src == {fe80::
1c:f816:
next;
5. ls_in_pre_acl (northd.c:5463): ip, priority 100, uuid 7f9b5be9
reg0[0] = 1;
next;
7. ls_in_pre_stateful (northd.c:5669): reg0[0] == 1, priority 100, uuid 2fdb9eda
ct_next;
ct_next( ct_state= est|trk /* default (use --ct to customize) */) ------- ------- ------- ------- ------- ------- ------- ------- 1eda_4a3b_ b3e5_2269b388b6 f1 && ip6), priority 2002, uuid d03ea4c0 dp="ipv6- pd", inport="dc7ef7", outport="536736") [265/1998] ------- ------- ------- ------- ------- ------- ------- ------
-------
8. ls_in_acl_hint (northd.c:5748): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid 5b28b009
reg0[8] = 1;
reg0[10] = 1;
next;
9. ls_in_acl (northd.c:5974): reg0[8] == 1 && (inport == @pg_32cb109b_
next; 22. ls_in_l2_lkup (northd.c:8034): eth.dst == fa:16:3e:65:02:e9, priority 50, uuid 89615973
outport = "536736";
output;
egress(
0. ls_out_pre_lb (northd.c:5355): ip && outport == "536736", priority 110, uuid c0d52ba8
next;
1. ls_out_pre_acl (northd.c:5355): ip && outport == "536736", priority 110, uuid 88fed770
next;
3. ls_out_acl_hint (northd.c:5748): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid ea31d707
reg0[8] = 1;
reg0[10] = 1;
next;
9. ls_out_port_sec_l2 (northd.c:5302): outport == "536736", priority 50, uuid f81bc41d
output;
/* output to "536736", type "patch" */
ingress( dp="router1" , inport= "lrp-536736" ) ------- ------- ------- ------- ------- neighbor (northd.c:10352): 1, priority 0, uuid 6438693f neighbor (northd.c:10361): reg9[2] == 1 || reg9[3] == 0, priority 100, uuid 4004d6b9 2222:d1c: :1, fe80::f816: 3eff:fe65: 2e9}, priority 60, uuid 4a85be6b
-------
0. lr_in_admission (northd.c:10271): eth.dst == fa:16:3e:65:02:e9 && inport == "lrp-536736", priority 50, uuid 6d7cecd6
xreg0[0..47] = fa:16:3e:65:02:e9;
next;
1. lr_in_lookup_
reg9[2] = 1;
next;
2. lr_in_learn_
next;
3. lr_in_ip_input (northd.c:10048): ip6.dst == {2001:db8:
drop;
Can you confirm if the above tests are correct, or need to try some other operations to reproduce the issue?