← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1471000] [NEW] ICMPv6 ML2 rule causing dropped packets in DVR configurations

 

Public bug reported:

There is an Openflow rule installed in install_dvr_process_ipv6() that
is dropping all egress ICMPv6 packets from a VM on a DVR router.  The
comment shows it was intended to drop Router Advertisements, but doesn't
have an icmp_type field to filter them.  Issue noticed by trying to
ping6 a VM on a "remote" compute node - echo request arrives, see echo
reply, but it never makes it into br-tun.

A small change to the code to only filter RAs fixes the problem, patch
forthcoming.

** Affects: neutron
     Importance: Undecided
     Assignee: Brian Haley (brian-haley)
         Status: In Progress

** Changed in: neutron
     Assignee: (unassigned) => Brian Haley (brian-haley)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1471000

Title:
  ICMPv6 ML2 rule causing dropped packets in DVR configurations

Status in OpenStack Neutron (virtual network service):
  In Progress

Bug description:
  There is an Openflow rule installed in install_dvr_process_ipv6() that
  is dropping all egress ICMPv6 packets from a VM on a DVR router.  The
  comment shows it was intended to drop Router Advertisements, but
  doesn't have an icmp_type field to filter them.  Issue noticed by
  trying to ping6 a VM on a "remote" compute node - echo request
  arrives, see echo reply, but it never makes it into br-tun.

  A small change to the code to only filter RAs fixes the problem, patch
  forthcoming.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1471000/+subscriptions


Follow ups

References