← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 2071451] Re: [ml2][ovs][firewall] port changes ofport and local_vlan will lead to wrong flow installation

 

Reviewed:  https://review.opendev.org/c/openstack/neutron/+/923040
Committed: https://opendev.org/openstack/neutron/commit/ae587c34ab59a5717630eded2fab84413f3c1742
Submitter: "Zuul (22348)"
Branch:    master

commit ae587c34ab59a5717630eded2fab84413f3c1742
Author: LIU Yulong <i@xxxxxxxxxxxx>
Date:   Fri Jun 28 18:08:39 2024 +0800

    Always get local vlan from port other_config
    
    For openvswitch security group, due to some extreme
    case, if ofport is processed once, the openvswitch
    security driver will cache some old ofport informations
    with different local vlan from current assignment.
    So this patch changes the local_vlan get method
    to the port other_config, this value should be
    managed by ovs_agent properly, we can rely on
    that.
    
    Closes-Bug: #2071451
    
    Change-Id: I7ad7df72807c95571ef3156c99072852d1c4f494


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2071451

Title:
  [ml2][ovs][firewall] port changes ofport and local_vlan will lead to
  wrong flow installation

Status in neutron:
  Fix Released

Bug description:
  For openvswitch security group, due to some extreme case, if ofport is
  processed once, the openvswitch     security driver will cache some
  old ofport informations with different local vlan from current
  assignment. Then wrong flow installed.

  Should always get local_vlan tag from the OVSDB Port other_config,
  since ovs-agent's local_vlan_manager allocated/updated it before
  security group flows processing.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2071451/+subscriptions



References