Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/868743 Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/4a27d7c628cfe1f719278303c327dcae7c27adaa Submitter: "Zuul (22348)" Branch: stable/train
commit 4a27d7c628cfe1f719278303c327dcae7c27adaa Author: Luigi Dino Tamagnone <email address hidden> Date: Wed Dec 28 09:51:15 2022 +0100
[ovn] Don't add conntrack entries for Geneve
As Geneve UDP traffic is allowed, there's no reason to create conntrack entries as it may result in a performance hit.
This patch is preventing Geneve traffic to be sent to conntrack.
Fix for Train only: firewall/rule.pp add NEW as default state in the rules, this fix add INVALID as state for the geneve UDP rules
Closes-Bug: #1885551 Change-Id: I1b582b86780881fe7228540edf281690733fb946
Reviewed: https:/ /review. opendev. org/c/openstack /tripleo- heat-templates/ +/868743 /opendev. org/openstack/ tripleo- heat-templates/ commit/ 4a27d7c628cfe1f 719278303c327dc ae7c27adaa
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/train
commit 4a27d7c628cfe1f 719278303c327dc ae7c27adaa
Author: Luigi Dino Tamagnone <email address hidden>
Date: Wed Dec 28 09:51:15 2022 +0100
[ovn] Don't add conntrack entries for Geneve
As Geneve UDP traffic is allowed, there's no reason to create
conntrack entries as it may result in a performance hit.
This patch is preventing Geneve traffic to be sent to conntrack.
Fix for Train only: rule.pp add NEW as default state in the rules,
firewall/
this fix add INVALID as state for the geneve UDP rules
Closes-Bug: #1885551 fe7228540edf281 690733fb946
Change-Id: I1b582b86780881