yahoo-eng-team team mailing list archive

["S.A.Dmitriev" <1845360@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Creation of instance in order:
- create instance
- create network port
- assign floating IP to that port
- attach port to the previously created instance
can lead to situation when floating IP assigned to fip namespace in the compute node are not removed yet from snat namespace of the network node and when l3-agent perform arp advert through arping from the compute node actually both of them reply (network snat and compute fip) and upstream router can learn the wrong one MAC (from network node snat). Even after floating IP are deleted from network node snat ustream router keep on sending traffic there because it learned MAC from snat.

That usually happens with HEAT templates like that
https://github.com/openstack/magnum/blob/master/magnum/drivers/k8s_fedora_atomic_v1/templates/kubeminion.yaml#L440-L491

Environment: Openstack Stein, Ubuntu 16.04 (kernel 4.15), DVR

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1845360

Title:
  ARP advertisement issue with DVR

Status in neutron:
  New

Bug description:
  Creation of instance in order:
  - create instance
  - create network port
  - assign floating IP to that port
  - attach port to the previously created instance
  can lead to situation when floating IP assigned to fip namespace in the compute node are not removed yet from snat namespace of the network node and when l3-agent perform arp advert through arping from the compute node actually both of them reply (network snat and compute fip) and upstream router can learn the wrong one MAC (from network node snat). Even after floating IP are deleted from network node snat ustream router keep on sending traffic there because it learned MAC from snat.

  That usually happens with HEAT templates like that
  https://github.com/openstack/magnum/blob/master/magnum/drivers/k8s_fedora_atomic_v1/templates/kubeminion.yaml#L440-L491

  Environment: Openstack Stein, Ubuntu 16.04 (kernel 4.15), DVR

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1845360/+subscriptions