yahoo-eng-team team mailing list archive

[Bartosz Bezak <1753434@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

using latest build stable Pike

This commit properly addressed problem of unbound ports centralized
floating Ips -
https://git.openstack.org/cgit/openstack/neutron/commit/?id=8b4bb9c0b057da175f2d773f8257de3e571aed4e

However traffic towards unbound port (Octavia Pike VIP) when using address scopes is getting blocked in snat namespace:
Chain neutron-l3-agent-scope (1 references)
 pkts bytes target     prot opt in     out     source               destination
   23  1612 DROP       all  --  any    sg-775c0432-f1  anywhere             anywhere             mark match ! 0x4010000/0xffff0000
   
It is working properly with centralized router HA with address scopes, and with DVR HA without address scopes.

** Affects: neutron
     Importance: Undecided
         Status: Confirmed

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1753434

Title:
  Unbound ports floating ip not working with address scopes in DVR HA

Status in neutron:
  Confirmed

Bug description:
  using latest build stable Pike

  This commit properly addressed problem of unbound ports centralized
  floating Ips -
  https://git.openstack.org/cgit/openstack/neutron/commit/?id=8b4bb9c0b057da175f2d773f8257de3e571aed4e

  However traffic towards unbound port (Octavia Pike VIP) when using address scopes is getting blocked in snat namespace:
  Chain neutron-l3-agent-scope (1 references)
   pkts bytes target     prot opt in     out     source               destination
     23  1612 DROP       all  --  any    sg-775c0432-f1  anywhere             anywhere             mark match ! 0x4010000/0xffff0000
     
  It is working properly with centralized router HA with address scopes, and with DVR HA without address scopes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1753434/+subscriptions