yahoo-eng-team team mailing list archive

[Rodolfo Alonso <1904871@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When using OVS+DPDK, the veth pair between the metadata namespace and
OVS do not process the checksum. See [1][2].

Because the metadata namespace only process the TCP traffic from the VM
to request the metadata info, the proposed solution could be to, using
netfilter, add the checksum to those packets. E.g.:

$ sudo ip net  e ovnmeta-32aa0742-f6ae-4b15-a66d-9516b1a3121a  iptables
-A POSTROUTING -t mangle -p tcp -m tcp -j CHECKSUM --checksum-fill

This rule will add the correct checksum to the TCP packets in this
namespace.

[1]https://bugs.launchpad.net/neutron/+bug/1832021
[2]https://bugs.launchpad.net/charm-neutron-openvswitch/+bug/1831935

** Affects: neutron
     Importance: Undecided
     Assignee: Rodolfo Alonso (rodolfo-alonso-hernandez)
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1904871

Title:
  [OVN] Metadata namespace checksum error with DPDK

Status in neutron:
  New

Bug description:
  When using OVS+DPDK, the veth pair between the metadata namespace and
  OVS do not process the checksum. See [1][2].

  Because the metadata namespace only process the TCP traffic from the
  VM to request the metadata info, the proposed solution could be to,
  using netfilter, add the checksum to those packets. E.g.:

  $ sudo ip net  e ovnmeta-32aa0742-f6ae-4b15-a66d-9516b1a3121a
  iptables -A POSTROUTING -t mangle -p tcp -m tcp -j CHECKSUM
  --checksum-fill

  This rule will add the correct checksum to the TCP packets in this
  namespace.

  [1]https://bugs.launchpad.net/neutron/+bug/1832021
  [2]https://bugs.launchpad.net/charm-neutron-openvswitch/+bug/1831935

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1904871/+subscriptions