yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1859638] [NEW] VIP between dvr east-west networks does not work at all

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: LIU Yulong <yulong@xxxxxxxxxxxxx>
Date: Tue, 14 Jan 2020 15:46:44 -0000
Reply-to: Bug 1859638 <1859638@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Public bug reported:

ENV: devstack with master branch neutron
HEAD: ab24a11f13cdfdf623a4b696f469aa621d59405b

Reproduce:
1. network1 + subnet1: 192.168.1.0/24
2. network2 + subnet2: 192.168.2.0/24
3. dvr router with attached subnets: subnet1, subnet2
4. VM1 (192.168.1.10) and VM2 (192.168.1.11) created from network1, VM3  (192.168.2.20) from network2
5. create a port from network1 and its fixed-IP-1 (192.168.1.100) will be used as VIP
6. set VM1 & VM2 port allowed-address-pair: openstack port set --allowed-address ip-address=192.168.1.100 VM1-port/VM2-port
7. set the VIP to the NIC inside the VM1 or VM2
8. try to access/ping VIP fixed-IP-1 (192.168.1.100) from VM3

Excepted behavior:
pingable, 192.168.2.20 can reach 192.168.1.100

Actual behavior: not reachable

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1859638

Title:
  VIP between dvr east-west networks does not work at all

Status in neutron:
  New

Bug description:
  ENV: devstack with master branch neutron
  HEAD: ab24a11f13cdfdf623a4b696f469aa621d59405b

  Reproduce:
  1. network1 + subnet1: 192.168.1.0/24
  2. network2 + subnet2: 192.168.2.0/24
  3. dvr router with attached subnets: subnet1, subnet2
  4. VM1 (192.168.1.10) and VM2 (192.168.1.11) created from network1, VM3  (192.168.2.20) from network2
  5. create a port from network1 and its fixed-IP-1 (192.168.1.100) will be used as VIP
  6. set VM1 & VM2 port allowed-address-pair: openstack port set --allowed-address ip-address=192.168.1.100 VM1-port/VM2-port
  7. set the VIP to the NIC inside the VM1 or VM2
  8. try to access/ping VIP fixed-IP-1 (192.168.1.100) from VM3

  Excepted behavior:
  pingable, 192.168.2.20 can reach 192.168.1.100

  Actual behavior: not reachable

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1859638/+subscriptions