yahoo-eng-team team mailing list archive

[alisafari <2081643@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Does Neutron ML2/OVN support CARP as a Virtual IP synchronization
protocol ? (Without disabling Port Security)

I’ve been trying to make it work but from what I did managed to understand.
CARP uses a mac address with following format 00-00-5E-00-01-{VRID} 
It answers the ARP Request for Virtual Addresses with source mac of the Main Interface but as arp.sha it uses the mac address mentioned above and from what I could read on OVN source code it doesn’t seems like OVN matches any arp response with different eth.source and arp.sha fields.


link to OVN code: https://github.com/ovn-org/ovn/blob/16836c3796f7af68437f9f834b40d87c801dc27c/controller/lflow.c#L2707

https://datatracker.ietf.org/doc/html/rfc5798#section-7.3
https://datatracker.ietf.org/doc/html/rfc5798#section-8.1.2

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: ovn

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2081643

Title:
  Neutron OVN support for CARP

Status in neutron:
  New

Bug description:
  Does Neutron ML2/OVN support CARP as a Virtual IP synchronization
  protocol ? (Without disabling Port Security)

  I’ve been trying to make it work but from what I did managed to understand.
  CARP uses a mac address with following format 00-00-5E-00-01-{VRID} 
  It answers the ARP Request for Virtual Addresses with source mac of the Main Interface but as arp.sha it uses the mac address mentioned above and from what I could read on OVN source code it doesn’t seems like OVN matches any arp response with different eth.source and arp.sha fields.

  
  link to OVN code: https://github.com/ovn-org/ovn/blob/16836c3796f7af68437f9f834b40d87c801dc27c/controller/lflow.c#L2707

  https://datatracker.ietf.org/doc/html/rfc5798#section-7.3
  https://datatracker.ietf.org/doc/html/rfc5798#section-8.1.2

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2081643/+subscriptions