yahoo-eng-team team mailing list archive

[Gabriel Barazer <1965530@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Hello all,

IT seems the health checking feature of ovn octavia provider is broken
and all service monitors show offline status because of a typo in
https://opendev.org/openstack/ovn-octavia-
provider/src/commit/1b212ec54fa336cc7a22a502ad3d0ce39658138e/ovn_octavia_provider/helper.py#L2171

Note the "i" prepended in the IP address in member_src +=
f'i{hm_source_ip}'

This causes the IP string to be casted including the "i" which give a
random IP address for health check source, which in turn cause the
response packet of the checked backend to be sent to the gateway MAC
instead of the health check monitor source MAC defined in NB_Global
options:svc_monitor_mac. The monitor does not get the check response and
fails.

The very simple fix is to remove this "i" letter to set the correct
source IP address for the monitor.

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1965530

Title:
  ovn-octavia-provider health monitoring fails because doesn't set the
  correct source IP address for OVN health check

Status in neutron:
  New

Bug description:
  Hello all,

  IT seems the health checking feature of ovn octavia provider is broken
  and all service monitors show offline status because of a typo in
  https://opendev.org/openstack/ovn-octavia-
  provider/src/commit/1b212ec54fa336cc7a22a502ad3d0ce39658138e/ovn_octavia_provider/helper.py#L2171

  Note the "i" prepended in the IP address in member_src +=
  f'i{hm_source_ip}'

  This causes the IP string to be casted including the "i" which give a
  random IP address for health check source, which in turn cause the
  response packet of the checked backend to be sent to the gateway MAC
  instead of the health check monitor source MAC defined in NB_Global
  options:svc_monitor_mac. The monitor does not get the check response
  and fails.

  The very simple fix is to remove this "i" letter to set the correct
  source IP address for the monitor.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1965530/+subscriptions