Further Debugging:
tcpdump on representator port for a VM:
12:09:41.933101 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 297 12:09:41.939887 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 12:09:42.042338 IP 172.16.0.2.bootps > 172.16.3.231.bootpc: BOOTP/DHCP, Reply, length 328 12:09:42.042673 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 309 12:09:42.155942 IP6 :: > ff02::1:ff2d:b5eb: ICMP6, neighbor solicitation, who has fe80::f816:3eff:fe2d:b5eb, length 32 12:09:42.207925 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 12:09:43.167942 IP6 fe80::f816:3eff:fe2d:b5eb > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 12:09:43.170786 IP6 fe80::f816:3eff:fe2d:b5eb > ip6-allrouters: ICMP6, router solicitation, length 16 12:09:43.202982 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 309 12:09:43.679928 IP6 fe80::f816:3eff:fe2d:b5eb > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 12:09:46.934638 IP6 fe80::f816:3eff:fe2d:b5eb > ip6-allrouters: ICMP6, router solicitation, length 16 12:09:47.575319 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 309
REQUEST/REPLY is seen - however the REPLY must never get to the VM.
As the REPLY is unicast, that gets pushed to an offloaded flow rule so subsequent REPLY packets would not been seen on the hypervisor.
Further Debugging:
tcpdump on representator port for a VM:
12:09:41.933101 IP 0.0.0.0.bootpc > 255.255. 255.255. bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 297 3.231.bootpc: BOOTP/DHCP, Reply, length 328 255.255. bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 309 3eff:fe2d: b5eb, length 32 3eff:fe2d: b5eb > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 3eff:fe2d: b5eb > ip6-allrouters: ICMP6, router solicitation, length 16 255.255. bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 309 3eff:fe2d: b5eb > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 3eff:fe2d: b5eb > ip6-allrouters: ICMP6, router solicitation, length 16 255.255. bootps: BOOTP/DHCP, Request from fa:16:3e:2d:b5:eb (oui Unknown), length 309
12:09:41.939887 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
12:09:42.042338 IP 172.16.0.2.bootps > 172.16.
12:09:42.042673 IP 0.0.0.0.bootpc > 255.255.
12:09:42.155942 IP6 :: > ff02::1:ff2d:b5eb: ICMP6, neighbor solicitation, who has fe80::f816:
12:09:42.207925 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
12:09:43.167942 IP6 fe80::f816:
12:09:43.170786 IP6 fe80::f816:
12:09:43.202982 IP 0.0.0.0.bootpc > 255.255.
12:09:43.679928 IP6 fe80::f816:
12:09:46.934638 IP6 fe80::f816:
12:09:47.575319 IP 0.0.0.0.bootpc > 255.255.
REQUEST/REPLY is seen - however the REPLY must never get to the VM.
As the REPLY is unicast, that gets pushed to an offloaded flow rule so subsequent REPLY packets would not been seen on the hypervisor.