yahoo-eng-team team mailing list archive

[OpenStack Infra <2048979@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/c/openstack/neutron/+/905289
Committed: https://opendev.org/openstack/neutron/commit/70eb4006c68fc38ac96ec6e179c3be1e87fa07ca
Submitter: "Zuul (22348)"
Branch:    master

commit 70eb4006c68fc38ac96ec6e179c3be1e87fa07ca
Author: LIU Yulong <i@xxxxxxxxxxxx>
Date:   Thu Jan 11 15:13:27 2024 +0800

    Not process security group for none active ports
    
    We recently met an issue during VM live migration:
    1. nova starts live migration
    2. plug ports on new host
    3. neutron-ovs-agent starts to process the port,
       but the port is in 'added' and 'updated' set
       at the same time.
    4. because nova still not activate the destination
       port binding, so there is no local vlan for
       this port.
    Then, ovs-agent met errors:
    Error while processing VIF ports: OVSFWTagNotFound:
    Cannot get tag for port tap092f38ed-a7 from its other_config: {}
    
    This fix is to remove ports of the
    "binding_no_activated_devices" for ``setup_port_filters``.
    
    Closes-Bug: #2048979
    Change-Id: I0f1e6bf202ef08f75246d6e99b3774d0b6fc9e2b


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2048979

Title:
  [ml2][ovs] ports without local vlan tag are processed on openflow
  security group

Status in neutron:
  Fix Released

Bug description:
  We recently met an issue during VM live migration:
  1. nova starts live migration
  2. plug ports on new host
  3. neutron-ovs-agent starts to process the port, but the port is in 'added' and 'updated' set at the same time.
  4. because nova still not activate the destination port binding, so there is no local vlan for this port.

  Then, ovs-agent met errors:
  Error while processing VIF ports: OVSFWTagNotFound: Cannot get tag for port tap092f38ed-a7 from its other_config: {}

  Such exception will finally hit rpc_loop try-catch block, a full sync
  for all ports will be run. This will cause the new port consume a long
  time to finish the process. Users will have bad experiences of long
  time packet loss.

  A fix should be added for ``setup_port_filters`` to remove ports of
  the "binding_no_activated_devices".

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2048979/+subscriptions