Brian,
The DHCP agent is configured as follows:
# grep -Ev "^#|^$" /etc/neutron/dhcp_agent.ini [DEFAULT] interface_driver = linuxbridge dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq enable_isolated_metadata = true [agent] availability_zone = openstack-network [ovs]
I.e. enable_isolated_metadata is enabled (recommended setting: https://docs.openstack.org/neutron/wallaby/install/controller-install-option1-ubuntu.html), force_metadata is disabled (default setting). If we disable isolated metadata, what is going to break?
A low-MTU network has just an IPv4 address and no IPv6 link-local addresses, IPv6 is disabled:
# ip netns exec qdhcp-c9b96063-3f8f-41b2-9783-ac73d37894b0 ip a li 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ns-bbd05a6d-0b@if675: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1279 qdisc noqueue state UP group default qlen 1000 link/ether fa:16:3e:3d:ee:c4 brd ff:ff:ff:ff:ff:ff link-netnsid 0 inet 10.10.10.4/24 brd 10.10.10.255 scope global ns-bbd05a6d-0b valid_lft forever preferred_lft forever
# ls /proc/sys/net/ipv6/conf/vxlan-3947/ ls: cannot access '/proc/sys/net/ipv6/conf/vxlan-3947/': No such file or directory
"Healthy" networks have IPv6 link-local addresses and IPv6 is enabled:
# ip netns exec qdhcp-8abc13db-565b-4640-9507-819d6ef520ef ip a li 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ns-fc876933-90@if90: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether fa:16:3e:36:d5:40 brd ff:ff:ff:ff:ff:ff link-netnsid 0 inet 10.10.10.2/24 brd 10.10.10.255 scope global ns-fc876933-90 valid_lft forever preferred_lft forever inet 169.254.169.254/32 brd 169.254.169.254 scope global ns-fc876933-90 valid_lft forever preferred_lft forever inet6 fe80::a9fe:a9fe/64 scope link valid_lft forever preferred_lft forever inet6 fe80::f816:3eff:fe36:d540/64 scope link valid_lft forever preferred_lft forever
# ls /proc/sys/net/ipv6/conf/vxlan-4952/ accept_dad accept_ra_rtr_pref drop_unsolicited_na max_desync_factor router_probe_interval temp_prefered_lft accept_ra accept_redirects enhanced_dad mc_forwarding router_solicitation_delay temp_valid_lft accept_ra_defrtr accept_source_route force_mld_version mldv1_unsolicited_report_interval router_solicitation_interval use_oif_addrs_only accept_ra_from_local addr_gen_mode force_tllao mldv2_unsolicited_report_interval router_solicitation_max_interval use_tempaddr accept_ra_min_hop_limit autoconf forwarding mtu router_solicitations accept_ra_mtu dad_transmits hop_limit ndisc_notify seg6_enabled accept_ra_pinfo disable_ipv6 ignore_routes_with_linkdown ndisc_tclass seg6_require_hmac accept_ra_rt_info_max_plen disable_policy keep_addr_on_down proxy_ndp stable_secret accept_ra_rt_info_min_plen drop_unicast_in_l2_multicast max_addresses regen_max_retry suppress_frag_ndisc
Pastebin of the above: https://pastebin.com/ihXedc0U
Brian,
The DHCP agent is configured as follows:
# grep -Ev "^#|^$" /etc/neutron/ dhcp_agent. ini agent.linux. dhcp.Dnsmasq isolated_ metadata = true
[DEFAULT]
interface_driver = linuxbridge
dhcp_driver = neutron.
enable_
[agent]
availability_zone = openstack-network
[ovs]
I.e. enable_ isolated_ metadata is enabled (recommended setting: https:/ /docs.openstack .org/neutron/ wallaby/ install/ controller- install- option1- ubuntu. html), force_metadata is disabled (default setting). If we disable isolated metadata, what is going to break?
A low-MTU network has just an IPv4 address and no IPv6 link-local addresses, IPv6 is disabled:
# ip netns exec qdhcp-c9b96063- 3f8f-41b2- 9783-ac73d37894 b0 ip a li UP,LOWER_ UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 0b@if675: <BROADCAST, MULTICAST, UP,LOWER_ UP> mtu 1279 qdisc noqueue state UP group default qlen 1000
1: lo: <LOOPBACK,
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ns-bbd05a6d-
link/ether fa:16:3e:3d:ee:c4 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 10.10.10.4/24 brd 10.10.10.255 scope global ns-bbd05a6d-0b
valid_lft forever preferred_lft forever
# ls /proc/sys/ net/ipv6/ conf/vxlan- 3947/ sys/net/ ipv6/conf/ vxlan-3947/ ': No such file or directory
ls: cannot access '/proc/
"Healthy" networks have IPv6 link-local addresses and IPv6 is enabled:
# ip netns exec qdhcp-8abc13db- 565b-4640- 9507-819d6ef520 ef ip a li UP,LOWER_ UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 90@if90: <BROADCAST, MULTICAST, UP,LOWER_ UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 3eff:fe36: d540/64 scope link
1: lo: <LOOPBACK,
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ns-fc876933-
link/ether fa:16:3e:36:d5:40 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 10.10.10.2/24 brd 10.10.10.255 scope global ns-fc876933-90
valid_lft forever preferred_lft forever
inet 169.254.169.254/32 brd 169.254.169.254 scope global ns-fc876933-90
valid_lft forever preferred_lft forever
inet6 fe80::a9fe:a9fe/64 scope link
valid_lft forever preferred_lft forever
inet6 fe80::f816:
valid_lft forever preferred_lft forever
# ls /proc/sys/ net/ipv6/ conf/vxlan- 4952/ probe_interval temp_prefered_lft solicitation_ delay temp_valid_lft ed_report_ interval router_ solicitation_ interval use_oif_addrs_only ra_from_ local addr_gen_mode force_tllao mldv2_unsolicit ed_report_ interval router_ solicitation_ max_interval use_tempaddr ra_min_ hop_limit autoconf forwarding mtu router_ solicitations routes_ with_linkdown ndisc_tclass seg6_require_hmac ra_rt_info_ max_plen disable_policy keep_addr_on_down proxy_ndp stable_secret ra_rt_info_ min_plen drop_unicast_ in_l2_multicast max_addresses regen_max_retry suppress_frag_ndisc
accept_dad accept_ra_rtr_pref drop_unsolicited_na max_desync_factor router_
accept_ra accept_redirects enhanced_dad mc_forwarding router_
accept_ra_defrtr accept_source_route force_mld_version mldv1_unsolicit
accept_
accept_
accept_ra_mtu dad_transmits hop_limit ndisc_notify seg6_enabled
accept_ra_pinfo disable_ipv6 ignore_
accept_
accept_
Pastebin of the above: https:/ /pastebin. com/ihXedc0U