← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1919347] [NEW] [OVN] Do not enable send_periodic on router ports which are connected to provider networks

 

Public bug reported:

Reported at: https://bugzilla.redhat.com/show_bug.cgi?id=1939468

Neutron does not make sure the router attached logical ports are
provider networks before enabling the send_periodic flag on the
ipv6_ra_config row. This leads the RAs the ovn-controller generates for
tenant networks to leak out against the DC network via the provider
network.

The relevant code is:
https://opendev.org/openstack/neutron/src/branch/master/neutron/plugins/ml2/drivers/ovn/mech_driver/ovsdb/ovn_client.py#L1021.
The code confirms there's no type check happening, the only statement is
making sure IPv6 is enabled and either SLAAC or DHCPv6 are being used.

** Affects: neutron
     Importance: High
     Assignee: Lucas Alvares Gomes (lucasagomes)
         Status: Confirmed


** Tags: ovn

** Tags added: ovn

** Changed in: neutron
   Importance: Undecided => High

** Changed in: neutron
       Status: New => Confirmed

** Changed in: neutron
     Assignee: (unassigned) => Lucas Alvares Gomes (lucasagomes)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1919347

Title:
  [OVN] Do not enable send_periodic on router ports which are connected
  to provider networks

Status in neutron:
  Confirmed

Bug description:
  Reported at: https://bugzilla.redhat.com/show_bug.cgi?id=1939468

  Neutron does not make sure the router attached logical ports are
  provider networks before enabling the send_periodic flag on the
  ipv6_ra_config row. This leads the RAs the ovn-controller generates
  for tenant networks to leak out against the DC network via the
  provider network.

  The relevant code is:
  https://opendev.org/openstack/neutron/src/branch/master/neutron/plugins/ml2/drivers/ovn/mech_driver/ovsdb/ovn_client.py#L1021.
  The code confirms there's no type check happening, the only statement
  is making sure IPv6 is enabled and either SLAAC or DHCPv6 are being
  used.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1919347/+subscriptions


Follow ups