yahoo-eng-team team mailing list archive

[Jeremy Stanley <2071451@xxxxxxxxxxxxxxxxxx>]

** Also affects: ossa
   Importance: Undecided
       Status: New

** Changed in: ossa
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2071451

Title:
  [ml2][ovs][firewall] port changes ofport and local_vlan will lead to
  wrong flow installation

Status in neutron:
  Fix Released
Status in OpenStack Security Advisory:
  Incomplete

Bug description:
  For openvswitch security group, due to some extreme case, if ofport is
  processed once, the openvswitch     security driver will cache some
  old ofport informations with different local vlan from current
  assignment. Then wrong flow installed.

  Should always get local_vlan tag from the OVSDB Port other_config,
  since ovs-agent's local_vlan_manager allocated/updated it before
  security group flows processing.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2071451/+subscriptions