<div dir="ltr"><div><div><div><div>Just Tested with another multi-node setup with older code (code download in last week), and everything works.<br><br></div>Here are the last changes for workable ovs/neutron/networking-ovn:<br><br></div>ovs:<br><br>commit 3041e1fc963886c3e19f1b848df20c6f9d96b289<br>Author: William Tu <<a href="mailto:u9012063@gmail.com">u9012063@gmail.com</a>><br>Date: Fri Jul 1 09:45:52 2016 -0700<br><br> system-traffic: Remove datapath specific tests and macro.<br> <br> We generally try to keep the testsuite independent of the underlying<br> datapath. This patch removes the datapath-specific tests and macros.<br> <br> Tested-at: <a href="https://travis-ci.org/williamtu/ovs-travis/builds/141642065">https://travis-ci.org/williamtu/ovs-travis/builds/141642065</a><br> Signed-off-by: William Tu <<a href="mailto:u9012063@gmail.com">u9012063@gmail.com</a>><br> Signed-off-by: Joe Stringer <<a href="mailto:joe@ovn.org">joe@ovn.org</a>><br><br><br></div>neutron:<br><br>commit 2f29a5db3ca0a5a26571be07109bf49e57c0fc2d<br>Merge: 86c02d8 09a6a46<br>Author: Jenkins <<a href="mailto:jenkins@review.openstack.org">jenkins@review.openstack.org</a>><br>Date: Thu Jul 14 23:24:58 2016 +0000<br><br> Merge "Pecan: Implement pagination"<br><br><br></div>networking-ovn:<br><br>commit 12919d0d48c63d252be4a42f3f20a2176b53f7d9<br>Merge: 381b57f 28b2c55<br>Author: Jenkins <<a href="mailto:jenkins@review.openstack.org">jenkins@review.openstack.org</a>><br>Date: Thu Jul 14 23:36:10 2016 +0000<br><br> Merge "Grenade plugin for testing OVN migration from ML2/OVS"<br><div><div><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jul 20, 2016 at 1:17 PM, Chen Li <span dir="ltr"><<a href="mailto:lichen.hangzhou@gmail.com" target="_blank">lichen.hangzhou@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><div dir="ltr">Thanks for adding the openstack-dev.<br><br>Yes, I'm running with devstack, and using the master branch of everything.<br>I just updated every thing several hours ago to make sure this is not an issue already been fixed.<br><br>The last change in neutron:<br><br>commit 122a971656671f92927d44ddd3725cca74b4e0bb<br>Merge: 827bb07 01a6c9c<br>Author: Jenkins <<a href="mailto:jenkins@review.openstack.org" target="_blank">jenkins@review.openstack.org</a>><br>Date: Tue Jul 19 17:14:33 2016 +0000<br><br> Merge "Generalize agent extension mechanism"<br><br>The last change in networking-ovn:<br><br>commit a8abf7517f86df6e0ff532cd49550b4dc3c0a9ed<br>Author: Ryan Moats <<a href="mailto:rmoats@us.ibm.com" target="_blank">rmoats@us.ibm.com</a>><br>Date: Fri Jul 15 11:32:33 2016 -0500<br><br> [doc] Prettify logical flow examples<br> <br> Rather than showing database objects, use the output of ovn-sbctl<br> lflow-list, because it is prettier.<br> <br> Change-Id: I243b7316731c6c723bf6e64c9326800272643578<br><br><br><br>I do not know where to find : neutron.ini and networking-ovn.ini, are you mean neutron.conf & networking-ovn.conf ? Could you point to me where I can find them ?<br>I did no change to these configuration files after stack.sh finished. <br></div></span><div class="gmail_extra"><br><div class="gmail_quote"><span class="">On Wed, Jul 20, 2016 at 12:42 PM, Ryan Moats <span dir="ltr"><<a href="mailto:rmoats@us.ibm.com" target="_blank">rmoats@us.ibm.com</a>></span> wrote:<br></span><div><div class="h5"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><p><tt>"dev" <<a href="mailto:dev-bounces@openvswitch.org" target="_blank">dev-bounces@openvswitch.org</a>> wrote on 07/19/2016 10:44:27 PM:<br><br>> From: Chen Li <<a href="mailto:lichen.hangzhou@gmail.com" target="_blank">lichen.hangzhou@gmail.com</a>></tt><br><tt>> To: <a href="mailto:dev@openvswitch.org" target="_blank">dev@openvswitch.org</a></tt><br><tt>> Date: 07/19/2016 10:44 PM</tt><br><tt>> Subject: [ovs-dev] Issue when using ovn with Openstack</tt><br><tt>> Sent by: "dev" <<a href="mailto:dev-bounces@openvswitch.org" target="_blank">dev-bounces@openvswitch.org</a>></tt><br><tt></tt></p><div><div><tt>> <br>> Hi list,<br>> <br>> I have an all-in-one devstack environment with ovn enabled.<br>> I create a neutron network.<br>> Create a port A from the network with secgroup A<br>> Create a vm from the network with secgroup B.<br>> Secgroup B has both ICMP and tcp 22 enabled.<br>> <br>> Then I try to ping the VM from the dhcp namespace, since the Secgroup B has<br>> enabled ICMP, I suppose this should work. But, unfortunately, this do not<br>> work. And, the ssh failed too.<br>> <br>> Anyone can help me to solve this issue ?<br>> <br>> I did some basic checks and looks like flows are missing in table 52.<br>> <br>> Here are flows in table 52:<br>> <br>> sudo ovs-ofctl dump-flows br-int |grep table=52<br>> <br>> cookie=0x0, duration=7766.195s, table=52, n_packets=0, n_bytes=0,<br>> idle_age=7766, priority=65535,icmp6,metadata=0x4,icmp_type=135,icmp_code=0<br>> actions=resubmit(,53)<br>> cookie=0x0, duration=7766.195s, table=52, n_packets=0, n_bytes=0,<br>> idle_age=7766, priority=65535,icmp6,metadata=0x4,icmp_type=136,icmp_code=0<br>> actions=resubmit(,53)<br>> cookie=0x0, duration=7766.195s, table=52, n_packets=4, n_bytes=1474,<br>> idle_age=7744, priority=2002,udp,reg15=0x2,metadata=0x4,nw_src=<br>> <a href="http://192.168.0.0/24,tp_src=67,tp_dst=68" target="_blank">192.168.0.0/24,tp_src=67,tp_dst=68</a><br>> actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>> cookie=0x0, duration=7557.209s, table=52, n_packets=2, n_bytes=759,<br>> idle_age=7548, priority=2002,udp,reg15=0x3,metadata=0x4,nw_src=<br>> <a href="http://192.168.0.0/24,tp_src=67,tp_dst=68" target="_blank">192.168.0.0/24,tp_src=67,tp_dst=68</a><br>> actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>> cookie=0x0, duration=7766.195s, table=52, n_packets=0, n_bytes=0,<br>> idle_age=7766, priority=2001,ipv6,reg15=0x2,metadata=0x4 actions=drop<br>> cookie=0x0, duration=7766.195s, table=52, n_packets=2, n_bytes=676,<br>> idle_age=7548, priority=2001,ip,reg15=0x2,metadata=0x4 actions=drop<br>> cookie=0x0, duration=7557.209s, table=52, n_packets=0, n_bytes=0,<br>> idle_age=7557, priority=2001,ipv6,reg15=0x3,metadata=0x4 actions=drop<br>> cookie=0x0, duration=7557.209s, table=52, n_packets=3979, n_bytes=389774,<br>> idle_age=413, priority=2001,ip,reg15=0x3,metadata=0x4 actions=drop<br>> cookie=0x0, duration=7766.195s, table=52, n_packets=0, n_bytes=0,<br>> idle_age=7766, priority=1,ipv6,metadata=0x4<br>> actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>> cookie=0x0, duration=7766.195s, table=52, n_packets=8, n_bytes=2733,<br>> idle_age=7548, priority=1,ip,metadata=0x4<br>> actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>> cookie=0x0, duration=7926.354s, table=52, n_packets=0, n_bytes=0,<br>> idle_age=7926, priority=0,metadata=0x1 actions=resubmit(,53)<br>> cookie=0x0, duration=7790.771s, table=52, n_packets=129, n_bytes=5418,<br>> idle_age=408, priority=0,metadata=0x4 actions=resubmit(,53)<br>> <br>> Here are steps how I find flows are missing in table52:<br>> <br>> ovs-dpctl show<br>> <br>> port 0: ovs-system (internal)<br>> port 1: br-int (internal)<br>> port 2: tap446ef382-f0 (internal)<br>> port 3: tapc7c9f581-2d (internal) => the dhcp port for the testing<br>> network<br>> port 4: o-hm0 (internal) => the port create from the<br>> testing network with security group A<br>> port 5: tap275a5a25-79 => the port for the vm in the<br>> testing network with security group B<br>> <br>> <br>> sudo ip netns exec qdhcp-e8586b01-6441-4c3d-a90d-91bb0a54ec80 arp -n<br>> <br>> Address HWtype HWaddress Flags Mask<br>> Iface<br>> 192.168.0.6 ether fa:16:3e:40:85:41 C<br>> tapc7c9f581-2d<br>> 192.168.0.12 ether fa:16:3e:5c:fe:86 C<br>> tapc7c9f581-2d<br>> <br>> <br>> sudo ip netns exec qdhcp-e8586b01-6441-4c3d-a90d-91bb0a54ec80 ping<br>> 192.168.0.12 => This is the IP for the VM.<br>> PING 192.168.0.12 (192.168.0.12) 56(84) bytes of data.<br>> <br>> <br>> ovs-dpctl dump-flows<br>> <br>> recirc_id(0),in_port(3),eth(src=fa:16:3e:b6:f6:25,dst=fa:16:3e:<br>> 5c:fe:86),eth_type(0x0806),arp(sip=192.168.0.2,tip=192.168.0.<br>> 12,op=1/0xff,sha=fa:16:3e:b6:f6:25,tha=00:00:00:00:00:00),<br>> packets:0, bytes:0, used:never,<br>> actions:userspace(pid=4294958325,slow_path(action))<br>> recirc_id(0),in_port(3),eth(src=00:00:00:00:00:00/01:00:00:00:00:<br>> 00,dst=fa:16:3e:5c:fe:86),eth_type(0x0800),ipv4(src=<br>> <a href="http://192.168.0.0/255.255.255.0,proto=1,frag=no" target="_blank">192.168.0.0/255.255.255.0,proto=1,frag=no</a>), packets:14, bytes:1372,<br>> used:0.974s, actions:drop<br>> <br>> <br>> sudo ovs-appctl ofproto/trace<br>> "recirc_id(0),in_port(3),eth(src=00:00:00:00:00:00/01:00:00:00:00:<br>> 00,dst=fa:16:3e:5c:fe:86),eth_type(0x0800),ipv4(src=<br>> <a href="http://192.168.0.0/255.255.255.0,proto=1,frag=no" target="_blank">192.168.0.0/255.255.255.0,proto=1,frag=no</a>)"<br>> => This produce a long output, and here are the end of the output:<br>> <br>> OpenFlow actions=resubmit(,52)<br>> <br>> Resubmitted flow: unchanged<br>> <br>> Resubmitted regs: reg0=0x1 reg1=0x0 reg2=0x0 reg3=0x0 reg4=0x0 reg5=0x0<br>> reg6=0x0 reg7=0x0 reg8=0x0 reg9=0x0 reg10=0x0 reg11=0x0 reg12=0x0<br>> reg13=0x0 reg14=0x1 reg15=0x3<br>> <br>> Resubmitted odp: drop<br>> <br>> Resubmitted megaflow:<br>> recirc_id=0,icmp,reg0=0,reg1=0,reg2=0,reg3=0,reg4=0,reg5=0,reg6=0,reg7=0,reg8=0,reg9=0,reg14=0,reg15=0,metadata=0,in_port=4,vlan_tci=0x0000/<br>> 0x1000<br>> ,dl_src=00:00:00:00:00:00/01:00:00:00:00:00,dl_dst=fa:16:3e:5c:fe:86,nw_src=<br>> <a href="http://192.168.0.0/24,nw_frag=no" target="_blank">192.168.0.0/24,nw_frag=no</a><br>> <br>> Rule: table=52 cookie=0 priority=2001,ip,reg15=0x3,metadata=0x4<br>> <br>> OpenFlow actions=drop<br>> Final flow:<br>> icmp,reg0=0x1,reg14=0x1,reg15=0x3,metadata=0x4,in_port=4,vlan_tci=0x0000,dl_src=00:<br>> 00:00:00:00:00,dl_dst=fa:16:3e:5c:fe:86,nw_src=192.168.0.0,nw_d<br>> st=0.0.0.0,nw_tos=0,nw_ecn=0,nw_ttl=0,icmp_type=0,icmp_code=0<br>> Megaflow:<br>> recirc_id=0,icmp,in_port=4,vlan_tci=0x0000/0x1000,dl_src=00:00:00:<br>> 00:00:00/01:00:00:00:00:00,dl_dst=fa:16:3e:5c:fe:86,nw_src=<br>> <a href="http://192.168.0.0/24,nw_fra" target="_blank">192.168.0.0/24,nw_fra</a><br>> g=no<br>> Datapath actions: drop<br>> <br>> <br>> Here are some output from OVN commands:<br>> <br>> sudo ovn-nbctl show<br>> <br>> switch 3ce05ec4-f591-4ca7-ba54-dc4fab2ffd1b<br>> (neutron-e8586b01-6441-4c3d-a90d-91bb0a54ec80)<br>> port 2c713237-ffc7-4ff1-9e4c-95c1337545e6<br>> addresses: ["fa:16:3e:40:85:41 192.168.0.6"]<br>> port c7c9f581-2db9-4b06-86c6-bde2d1aa8ffb<br>> addresses: ["fa:16:3e:b6:f6:25 192.168.0.2"]<br>> port 275a5a25-794f-47b9-9b04-8a8da053c143<br>> addresses: ["fa:16:3e:5c:fe:86 192.168.0.12"]<br>> <br>> <br>> ovn-nbctl acl-list 3ce05ec4-f591-4ca7-ba54-dc4fab2ffd1b<br>> <br>> from-lport 1002 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4)<br>> allow-related<br>> from-lport 1002 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4<br>> && (ip4.dst == 255.255.255.255 || ip4.dst == <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a>) && udp &&<br>> udp.src == 68 && udp.dst == 67) allow<br>> from-lport 1002 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip6)<br>> allow-related<br>> from-lport 1002 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip4)<br>> allow-related<br>> from-lport 1002 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip4<br>> && (ip4.dst == 255.255.255.255 || ip4.dst == <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a>) && udp &&<br>> udp.src == 68 && udp.dst == 67) allow<br>> from-lport 1002 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip6)<br>> allow-related<br>> from-lport 1001 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip)<br>> drop<br>> from-lport 1001 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip)<br>> drop<br>> to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4<br>> && icmp4) allow-related<br>> to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4<br>> && ip4.src == <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a> && udp && udp.src == 67 && udp.dst == 68) allow<br>> to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4<br>> && tcp && tcp.dst == 22) allow-related<br>> to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4<br>> && tcp && tcp.dst == 9443) allow-related<br>> to-lport 1002 (outport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip4<br>> && ip4.src == <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a> && udp && udp.src == 67 && udp.dst == 68) allow<br>> to-lport 1002 (outport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip4<br>> && udp && udp.dst == 5555) allow-related<br>> to-lport 1001 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip)<br>> drop<br>> to-lport 1001 (outport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip)<br>> drop<br>> <br>> <br>> ovn-sbctl lflow-list | grep ls_out_acl<br>> <br>> table=4 (ls_out_acl ), priority=0 , match=(1), action=(next;)<br>> table=4 (ls_out_acl ), priority=0 , match=(1), action=(next;)<br>> table=4 (ls_out_acl ), priority=65535, match=(!ct.est && ct.rel<br>> && !ct.new && !ct.inv), action=(next;)<br>> table=4 (ls_out_acl ), priority=65535, match=(ct.est && !ct.rel<br>> && !ct.new && !ct.inv), action=(next;)<br>> table=4 (ls_out_acl ), priority=65535, match=(ct.inv),<br>> action=(drop;)<br>> table=4 (ls_out_acl ), priority=65535, match=(nd), action=(next;)<br>> table=4 (ls_out_acl ), priority=2002 , match=(ct.new && (outport<br>> == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4 && icmp4)),<br>> action=(reg0[1] = 1; next;)<br>> table=4 (ls_out_acl ), priority=2002 , match=(ct.new && (outport<br>> == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4 && tcp && tcp.dst == 22)),<br>> action=(reg0[1] = 1; next;)<br>> table=4 (ls_out_acl ), priority=2002 , match=(ct.new && (outport<br>> == "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4 && tcp && tcp.dst ==<br>> 9443)), action=(reg0[1] = 1; next;)<br>> table=4 (ls_out_acl ), priority=2002 , match=(ct.new && (outport<br>> == "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip4 && udp && udp.dst ==<br>> 5555)), action=(reg0[1] = 1; next;)<br>> table=4 (ls_out_acl ), priority=2002 , match=(outport ==<br>> "275a5a25-794f-47b9-9b04-8a8da053c143" && ip4 && ip4.src == <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a><br>> && udp && udp.src == 67 && udp.dst == 68), action=(reg0[1] = 1; next;)<br>> table=4 (ls_out_acl ), priority=2002 , match=(outport ==<br>> "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip4 && ip4.src == <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a><br>> && udp && udp.src == 67 && udp.dst == 68), action=(reg0[1] = 1; next;)<br>> table=4 (ls_out_acl ), priority=2001 , match=(outport ==<br>> "275a5a25-794f-47b9-9b04-8a8da053c143" && ip), action=(drop;)<br>> table=4 (ls_out_acl ), priority=2001 , match=(outport ==<br>> "2c713237-ffc7-4ff1-9e4c-95c1337545e6" && ip), action=(drop;)<br>> table=4 (ls_out_acl ), priority=1 , match=(ip),<br>> action=(reg0[1] = 1; next;)<br>> table=4 (ls_out_acl ), priority=0 , match=(1), action=(next;)<br>> <br>> <br>> The last commit in my ovs code:<br>> <br>> commit 7efb1e09bb06270248d29c787978593b57101d4f<br>> Author: Pravin B Shelar <<a href="mailto:pshelar@ovn.org" target="_blank">pshelar@ovn.org</a>><br>> Date: Sun Jul 17 19:24:07 2016 -0700<br>> <br>> datapath: Add support for kernel 4.5<br>> <br>> Signed-off-by: Pravin B Shelar <<a href="mailto:pshelar@ovn.org" target="_blank">pshelar@ovn.org</a>><br>> Acked-by: Jesse Gross <<a href="mailto:jesse@kernel.org" target="_blank">jesse@kernel.org</a>><br>> <br>> <br>> Here are some detailed information from openstack:<br>> <br>> 1. The vm:<br>> <br>> nova show test01<br>> +--------------------------------------<br>> +----------------------------------------------------------------+<br>> | Property |<br>> Value |<br>> +--------------------------------------<br>> +----------------------------------------------------------------+<br>> | OS-DCF:diskConfig |<br>> MANUAL |<br>> | OS-EXT-AZ:availability_zone |<br>> nova |<br>> | OS-EXT-SRV-ATTR:host | LB-dev-chenli |<br>> | OS-EXT-SRV-ATTR:hostname |<br>> test01 |<br>> | OS-EXT-SRV-ATTR:hypervisor_hostname | LB-dev-chenli |<br>> | OS-EXT-SRV-ATTR:instance_name |<br>> instance-00000001 |<br>> | OS-EXT-SRV-ATTR:kernel_id |<br>> 261ca209-430e-4b8f-ac39-0e397df30a46 |<br>> | OS-EXT-SRV-ATTR:launch_index |<br>> 0 |<br>> | OS-EXT-SRV-ATTR:ramdisk_id |<br>> 04b6a65d-3cff-4eaf-b30b-582caa2379d7 |<br>> | OS-EXT-SRV-ATTR:reservation_id |<br>> r-wehkr5gi |<br>> | OS-EXT-SRV-ATTR:root_device_name |<br>> /dev/vda |<br>> | OS-EXT-SRV-ATTR:user_data |<br>> - |<br>> | OS-EXT-STS:power_state |<br>> 1 |<br>> | OS-EXT-STS:task_state |<br>> - |<br>> | OS-EXT-STS:vm_state |<br>> active |<br>> | OS-SRV-USG:launched_at |<br>> 2016-07-20T01:18:48.000000 |<br>> | OS-SRV-USG:terminated_at |<br>> - |<br>> | accessIPv4<br>> | |<br>> | accessIPv6<br>> | |<br>> | config_drive |<br>> True |<br>> | created |<br>> 2016-07-20T01:18:42Z |<br>> | description |<br>> - |<br>> | flavor | m1.tiny<br>> (1) |<br>> | hostId |<br>> 36ef28d2b661e38d2d07645d814903a15d62da769828b57029306ec0 |<br>> | host_status |<br>> UP |<br>> | id |<br>> 27264d62-6a7c-4fe9-be81-c06fca56ec00 |<br>> | image | cirros-0.3.4-x86_64-uec<br>> (aa86e8b5-0699-46a0-a624-7af794b21404) |<br>> | key_name |<br>> - |<br>> | lb-mgmt-net network |<br>> 192.168.0.12 |<br>> | locked |<br>> False |<br>> | metadata |<br>> {} |<br>> | name |<br>> test01 |<br>> | os-extended-volumes:volumes_attached |<br>> [] |<br>> | progress |<br>> 0 |<br>> | security_groups |<br>> lb-mgmt-sec-grp |<br>> | status |<br>> ACTIVE |<br>> | tags |<br>> [] |<br>> | tenant_id |<br>> 73aebe8aa8ab41f58d5e375a03e279bf |<br>> | updated |<br>> 2016-07-20T01:18:48Z |<br>> | user_id |<br>> 53f8c8e491e94d2fa9210f3a8e6a85e4 |<br>> +--------------------------------------<br>> +----------------------------------------------------------------+<br>> <br>> 2. the security group:<br>> <br>> neutron security-group-show lb-mgmt-sec-grp<br>> +----------------------<br>> +--------------------------------------------------------------------+<br>> | Field |<br>> Value |<br>> +----------------------<br>> +--------------------------------------------------------------------+<br>> | description<br>> | |<br>> | id |<br>> fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee |<br>> | name |<br>> lb-mgmt-sec-grp |<br>> | security_group_rules |<br>> { |<br>> | | "remote_group_id":<br>> null, |<br>> | | "direction":<br>> "ingress", |<br>> | | "protocol":<br>> "icmp", |<br>> | | "description":<br>> "", |<br>> | | "ethertype":<br>> "IPv4", |<br>> | | "remote_ip_prefix":<br>> null, |<br>> | | "port_range_max":<br>> null, |<br>> | | "security_group_id":<br>> "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>> | | "port_range_min":<br>> null, |<br>> | | "tenant_id":<br>> "73aebe8aa8ab41f58d5e375a03e279bf", |<br>> | | "id":<br>> "140677a5-5308-48b2-a5a2-bb5e17994ed5" |<br>> | |<br>> } |<br>> | |<br>> { |<br>> | | "remote_group_id":<br>> null, |<br>> | | "direction":<br>> "ingress", |<br>> | | "protocol":<br>> "tcp", |<br>> | | "description":<br>> "", |<br>> | | "ethertype":<br>> "IPv4", |<br>> | | "remote_ip_prefix":<br>> null, |<br>> | | "port_range_max":<br>> 22, |<br>> | | "security_group_id":<br>> "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>> | | "port_range_min":<br>> 22, |<br>> | | "tenant_id":<br>> "73aebe8aa8ab41f58d5e375a03e279bf", |<br>> | | "id":<br>> "39fccc0c-f832-497a-b03d-fa0e40e3f407" |<br>> | |<br>> } |<br>> | |<br>> { |<br>> | | "remote_group_id":<br>> null, |<br>> | | "direction":<br>> "egress", |<br>> | | "protocol":<br>> null, |<br>> | | "description":<br>> "", |<br>> | | "ethertype":<br>> "IPv6", |<br>> | | "remote_ip_prefix":<br>> null, |<br>> | | "port_range_max":<br>> null, |<br>> | | "security_group_id":<br>> "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>> | | "port_range_min":<br>> null, |<br>> | | "tenant_id":<br>> "73aebe8aa8ab41f58d5e375a03e279bf", |<br>> | | "id":<br>> "54d134c0-f4bc-4f3d-bf49-0e1d0ac9ef1c" |<br>> | |<br>> } |<br>> | |<br>> { |<br>> | | "remote_group_id":<br>> null, |<br>> | | "direction":<br>> "ingress", |<br>> | | "protocol":<br>> "tcp", |<br>> | | "description":<br>> "", |<br>> | | "ethertype":<br>> "IPv4", |<br>> | | "remote_ip_prefix":<br>> null, |<br>> | | "port_range_max":<br>> 9443, |<br>> | | "security_group_id":<br>> "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>> | | "port_range_min":<br>> 9443, |<br>> | | "tenant_id":<br>> "73aebe8aa8ab41f58d5e375a03e279bf", |<br>> | | "id":<br>> "b3e00b04-d398-450b-b1cf-b92fd3dc37a1" |<br>> | |<br>> } |<br>> | |<br>> { |<br>> | | "remote_group_id":<br>> null, |<br>> | | "direction":<br>> "egress", |<br>> | | "protocol":<br>> null, |<br>> | | "description":<br>> "", |<br>> | | "ethertype":<br>> "IPv4", |<br>> | | "remote_ip_prefix":<br>> null, |<br>> | | "port_range_max":<br>> null, |<br>> | | "security_group_id":<br>> "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>> | | "port_range_min":<br>> null, |<br>> | | "tenant_id":<br>> "73aebe8aa8ab41f58d5e375a03e279bf", |<br>> | | "id":<br>> "c528b1cf-b065-4498-986c-13adac4c2a0a" |<br>> | |<br>> } |<br>> | tenant_id |<br>> 73aebe8aa8ab41f58d5e375a03e279bf |<br>> +----------------------<br>> +--------------------------------------------------------------------+<br></tt></div></div><tt>> _______________________________________________<br>> dev mailing list<br>> <a href="mailto:dev@openvswitch.org" target="_blank">dev@openvswitch.org</a><br>> </tt><a href="http://openvswitch.org/mailman/listinfo/dev" target="_blank"><tt>http://openvswitch.org/mailman/listinfo/dev</tt></a><br><br><tt>For issues between ovn and openstack, the openstack-dev mailing</tt><br><tt>list with a tag of [networking-ovn] is another mailing list that</tt><br><tt>you should try. I've added the same in the CC of this message to</tt><br><tt>help.</tt><br><br><tt>You've shared a lot of information about the ovv/ovs side of the</tt><br><tt>situation, but more information on the openstack side would also</tt><br><tt>help. Since you say "all-in-one" is this running with devstack?</tt><br><tt>Is this the master branch or a stable branch of neutron? What</tt><br><tt>is the latest commit in the networking-ovn repository? What</tt><br><tt>settings are there in the neutron.ini and networking-ovn.ini files?</tt><br><br><tt>I've personally seen tip of the tree neutron, networking-ovn,</tt><br><tt>and ovn work together in multi-node setups, so my initial thought</tt><br><tt>is to check the code versions or configurations you are using...</tt><span><font color="#888888"><br><br><tt>Ryan<br></tt><br>
</font></span><p></p></div>
</blockquote></div></div></div><br></div>
</blockquote></div><br></div>