Members using an SR-IOV VIP port will not receive traffic

[Michael Johnson]

In the current implementation of nftables for SR-IOV VIP interfaces, if the load balancer is configured with members that use the SR-IOV VIP port, the member will go operating status offline. This is caused by there being no conntrack table to allow the return packets from an outbound member request.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/octavia/+/922673

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/octavia/+/922673
Committed: https://opendev.org/openstack/octavia/commit/8b8d969d0001cdf801478abf87dd8f103179b9b7
Submitter: "Zuul (22348)"
Branch: master

commit 8b8d969d0001cdf801478abf87dd8f103179b9b7
Author: Michael Johnson <email address hidden>
Date: Mon Jun 24 21:12:00 2024 +0000

    Fix SR-IOV when VIP interface is used for members

    This patch fixes a bug in the VIP SR-IOV implementation that would cause
    load balancer memebers that use the SR-IOV VIP interface to not receive
    traffic.

    Closes-Bug: #2070312
    Change-Id: Ice6e4ee98edb446a8b0547ced477598dcf22f791

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/octavia 15.0.0.0rc1 release candidate.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/2024.1
Review: https://review.opendev.org/c/openstack/octavia/+/929190