← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1895038] [NEW] Flow drop on agent restart with ovs firewall driver

 

Public bug reported:

Hello,

Opening a bug as per Slawek Kaplonski suggestion on the mailing list
(http://lists.openstack.org/pipermail/openstack-
discuss/2020-September/017108.html)

We are experiencing flow drops when restarting the ovs agent.


Symptom example when restarting the agent:
http://paste.openstack.org/show/797669/

* We are running neutron 14.0.2
* Neutron configuration: http://paste.openstack.org/show/797646/
* ml2 configuration: http://paste.openstack.org/show/797647/
* openvswitch_agent configuration: all defaults, nothing customized (conf file only contains empty « [DEFAULT] »)
* ovs agent debug logs: file attached (wasn't able to paste all of it on paste.openstack.org)

Several tests been conducted for different types of flow, east-west,
north-south, flat provider-networks, self-service networks, with or
without our corporate proxy. In each configuration some flow would cut.

If I switch back to firewall_driver=iptables_hybrid in the securitygroup
section of ml2 configuration, we do not experience the issue anymore.


Let me know if additional information should be provided.

As soon as I got some time to deploy a devstack I’ll have a look if the
issue can be reproduced using lastest master branch.

** Affects: neutron
     Importance: Undecided
         Status: New

** Attachment added: "ovsagent.log"
   https://bugs.launchpad.net/bugs/1895038/+attachment/5409147/+files/ovsagent.log

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1895038

Title:
  Flow drop on agent restart with ovs firewall driver

Status in neutron:
  New

Bug description:
  Hello,

  Opening a bug as per Slawek Kaplonski suggestion on the mailing list
  (http://lists.openstack.org/pipermail/openstack-
  discuss/2020-September/017108.html)

  We are experiencing flow drops when restarting the ovs agent.


  Symptom example when restarting the agent:
  http://paste.openstack.org/show/797669/

  * We are running neutron 14.0.2
  * Neutron configuration: http://paste.openstack.org/show/797646/
  * ml2 configuration: http://paste.openstack.org/show/797647/
  * openvswitch_agent configuration: all defaults, nothing customized (conf file only contains empty « [DEFAULT] »)
  * ovs agent debug logs: file attached (wasn't able to paste all of it on paste.openstack.org)

  Several tests been conducted for different types of flow, east-west,
  north-south, flat provider-networks, self-service networks, with or
  without our corporate proxy. In each configuration some flow would
  cut.

  If I switch back to firewall_driver=iptables_hybrid in the
  securitygroup section of ml2 configuration, we do not experience the
  issue anymore.


  Let me know if additional information should be provided.

  As soon as I got some time to deploy a devstack I’ll have a look if
  the issue can be reproduced using lastest master branch.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1895038/+subscriptions


Follow ups