<tt><font size=2>"dev" <dev-bounces@openvswitch.org> wrote
on 07/20/2016 12:42:20 AM:<br>
<br>
> From: Chen Li <lichen.hangzhou@gmail.com></font></tt>
<br><tt><font size=2>> To: Ryan Moats/Omaha/IBM@IBMUS</font></tt>
<br><tt><font size=2>> Cc: dev@openvswitch.org, "OpenStack Development
Mailing List \(not <br>
> for usage questions\)" <openstack-dev@lists.openstack.org></font></tt>
<br><tt><font size=2>> Date: 07/20/2016 12:42 AM</font></tt>
<br><tt><font size=2>> Subject: Re: [ovs-dev] [networking-ovn] Re: Issue
when using ovn <br>
> with Openstack</font></tt>
<br><tt><font size=2>> Sent by: "dev" <dev-bounces@openvswitch.org></font></tt>
<br><tt><font size=2>> <br>
> Just Tested with another multi-node setup with older code (code download
in<br>
> last week), and everything works.<br>
> <br>
> Here are the last changes for workable ovs/neutron/networking-ovn:<br>
> <br>
> ovs:<br>
> <br>
> commit 3041e1fc963886c3e19f1b848df20c6f9d96b289<br>
> Author: William Tu <u9012063@gmail.com><br>
> Date: Fri Jul 1 09:45:52 2016 -0700<br>
> <br>
> system-traffic: Remove datapath specific tests and macro.<br>
> <br>
> We generally try to keep the testsuite independent of
the underlying<br>
> datapath. This patch removes the datapath-specific tests
and macros.<br>
> <br>
> Tested-at: </font></tt><a href="https://travis-ci.org/williamtu/ovs-travis/builds/141642065"><tt><font size=2>https://travis-ci.org/williamtu/ovs-travis/builds/141642065</font></tt></a><tt><font size=2><br>
> Signed-off-by: William Tu <u9012063@gmail.com><br>
> Signed-off-by: Joe Stringer <joe@ovn.org><br>
> <br>
> <br>
> neutron:<br>
> <br>
> commit 2f29a5db3ca0a5a26571be07109bf49e57c0fc2d<br>
> Merge: 86c02d8 09a6a46<br>
> Author: Jenkins <jenkins@review.openstack.org><br>
> Date: Thu Jul 14 23:24:58 2016 +0000<br>
> <br>
> Merge "Pecan: Implement pagination"<br>
> <br>
> <br>
> networking-ovn:<br>
> <br>
> commit 12919d0d48c63d252be4a42f3f20a2176b53f7d9<br>
> Merge: 381b57f 28b2c55<br>
> Author: Jenkins <jenkins@review.openstack.org><br>
> Date: Thu Jul 14 23:36:10 2016 +0000<br>
> <br>
> Merge "Grenade plugin for testing OVN migration
from ML2/OVS"<br>
> <br>
> </font></tt>
<br>
<br><tt><font size=2>If this problem is still occurring on master, please
file a bug at [1] with</font></tt>
<br><tt><font size=2>your recreate scenario in detail. If you can
pinpoint the commit that broke</font></tt>
<br><tt><font size=2>things that would be even better.</font></tt>
<br>
<br><tt><font size=2>[1] </font></tt><a href="https://bugs.launchpad.net/networking-ovn/+filebug"><tt><font size=2 color=blue>https://bugs.launchpad.net/networking-ovn/+filebug</font></tt></a>
<br>
<br><tt><font size=2>Thanks,</font></tt>
<br><tt><font size=2>Richard</font></tt>
<br><tt><font size=2><br>
> On Wed, Jul 20, 2016 at 1:17 PM, Chen Li <lichen.hangzhou@gmail.com>
wrote:<br>
> <br>
> > Thanks for adding the openstack-dev.<br>
> ><br>
> > Yes, I'm running with devstack, and using the master branch of
everything.<br>
> > I just updated every thing several hours ago to make sure this
is not an<br>
> > issue already been fixed.<br>
> ><br>
> > The last change in neutron:<br>
> ><br>
> > commit 122a971656671f92927d44ddd3725cca74b4e0bb<br>
> > Merge: 827bb07 01a6c9c<br>
> > Author: Jenkins <jenkins@review.openstack.org><br>
> > Date: Tue Jul 19 17:14:33 2016 +0000<br>
> ><br>
> > Merge "Generalize agent extension mechanism"<br>
> ><br>
> > The last change in networking-ovn:<br>
> ><br>
> > commit a8abf7517f86df6e0ff532cd49550b4dc3c0a9ed<br>
> > Author: Ryan Moats <rmoats@us.ibm.com><br>
> > Date: Fri Jul 15 11:32:33 2016 -0500<br>
> ><br>
> > [doc] Prettify logical flow examples<br>
> ><br>
> > Rather than showing database objects, use the output
of ovn-sbctl<br>
> > lflow-list, because it is prettier.<br>
> ><br>
> > Change-Id: I243b7316731c6c723bf6e64c9326800272643578<br>
> ><br>
> ><br>
> ><br>
> > I do not know where to find : neutron.ini and networking-ovn.ini,
are you<br>
> > mean neutron.conf & networking-ovn.conf ? Could you point
to me where I can<br>
> > find them ?<br>
> > I did no change to these configuration files after stack.sh finished.<br>
> ><br>
> > On Wed, Jul 20, 2016 at 12:42 PM, Ryan Moats <rmoats@us.ibm.com>
wrote:<br>
> ><br>
> >> "dev" <dev-bounces@openvswitch.org> wrote
on 07/19/2016 10:44:27 PM:<br>
> >><br>
> >> > From: Chen Li <lichen.hangzhou@gmail.com><br>
> >> > To: dev@openvswitch.org<br>
> >> > Date: 07/19/2016 10:44 PM<br>
> >> > Subject: [ovs-dev] Issue when using ovn with Openstack<br>
> >> > Sent by: "dev" <dev-bounces@openvswitch.org><br>
> >> ><br>
> >> > Hi list,<br>
> >> ><br>
> >> > I have an all-in-one devstack environment with ovn enabled.<br>
> >> > I create a neutron network.<br>
> >> > Create a port A from the network with secgroup A<br>
> >> > Create a vm from the network with secgroup B.<br>
> >> > Secgroup B has both ICMP and tcp 22 enabled.<br>
> >> ><br>
> >> > Then I try to ping the VM from the dhcp namespace, since
the Secgroup B<br>
> >> has<br>
> >> > enabled ICMP, I suppose this should work. But,
unfortunately, this do<br>
> >> not<br>
> >> > work. And, the ssh failed too.<br>
> >> ><br>
> >> > Anyone can help me to solve this issue ?<br>
> >> ><br>
> >> > I did some basic checks and looks like flows are missing
in table 52.<br>
> >> ><br>
> >> > Here are flows in table 52:<br>
> >> ><br>
> >> > sudo ovs-ofctl dump-flows br-int |grep table=52<br>
> >> ><br>
> >> > cookie=0x0, duration=7766.195s, table=52, n_packets=0,
n_bytes=0,<br>
> >> > idle_age=7766,<br>
> >> priority=65535,icmp6,metadata=0x4,icmp_type=135,icmp_code=0<br>
> >> > actions=resubmit(,53)<br>
> >> > cookie=0x0, duration=7766.195s, table=52, n_packets=0,
n_bytes=0,<br>
> >> > idle_age=7766,<br>
> >> priority=65535,icmp6,metadata=0x4,icmp_type=136,icmp_code=0<br>
> >> > actions=resubmit(,53)<br>
> >> > cookie=0x0, duration=7766.195s, table=52, n_packets=4,
n_bytes=1474,<br>
> >> > idle_age=7744, priority=2002,udp,reg15=0x2,metadata=0x4,nw_src=<br>
> >> > 192.168.0.0/24,tp_src=67,tp_dst=68<br>
> >> > actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>
> >> > cookie=0x0, duration=7557.209s, table=52, n_packets=2,
n_bytes=759,<br>
> >> > idle_age=7548, priority=2002,udp,reg15=0x3,metadata=0x4,nw_src=<br>
> >> > 192.168.0.0/24,tp_src=67,tp_dst=68<br>
> >> > actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>
> >> > cookie=0x0, duration=7766.195s, table=52, n_packets=0,
n_bytes=0,<br>
> >> > idle_age=7766, priority=2001,ipv6,reg15=0x2,metadata=0x4
actions=drop<br>
> >> > cookie=0x0, duration=7766.195s, table=52, n_packets=2,
n_bytes=676,<br>
> >> > idle_age=7548, priority=2001,ip,reg15=0x2,metadata=0x4
actions=drop<br>
> >> > cookie=0x0, duration=7557.209s, table=52, n_packets=0,
n_bytes=0,<br>
> >> > idle_age=7557, priority=2001,ipv6,reg15=0x3,metadata=0x4
actions=drop<br>
> >> > cookie=0x0, duration=7557.209s, table=52, n_packets=3979,<br>
> >> n_bytes=389774,<br>
> >> > idle_age=413, priority=2001,ip,reg15=0x3,metadata=0x4
actions=drop<br>
> >> > cookie=0x0, duration=7766.195s, table=52, n_packets=0,
n_bytes=0,<br>
> >> > idle_age=7766, priority=1,ipv6,metadata=0x4<br>
> >> > actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>
> >> > cookie=0x0, duration=7766.195s, table=52, n_packets=8,
n_bytes=2733,<br>
> >> > idle_age=7548, priority=1,ip,metadata=0x4<br>
> >> > actions=load:0x1->NXM_NX_REG0[1],resubmit(,53)<br>
> >> > cookie=0x0, duration=7926.354s, table=52, n_packets=0,
n_bytes=0,<br>
> >> > idle_age=7926, priority=0,metadata=0x1 actions=resubmit(,53)<br>
> >> > cookie=0x0, duration=7790.771s, table=52, n_packets=129,
n_bytes=5418,<br>
> >> > idle_age=408, priority=0,metadata=0x4 actions=resubmit(,53)<br>
> >> ><br>
> >> > Here are steps how I find flows are missing in table52:<br>
> >> ><br>
> >> > ovs-dpctl show<br>
> >> ><br>
> >> > port 0: ovs-system (internal)<br>
> >> > port 1: br-int (internal)<br>
> >> > port 2: tap446ef382-f0 (internal)<br>
> >> > port 3: tapc7c9f581-2d (internal) =>
the dhcp port for the testing<br>
> >> > network<br>
> >> > port 4: o-hm0 (internal)
=> the port create from the<br>
> >> > testing network with security group A<br>
> >> > port 5: tap275a5a25-79
=> the port for the vm in the<br>
> >> > testing network with security group B<br>
> >> ><br>
> >> ><br>
> >> > sudo ip netns exec qdhcp-e8586b01-6441-4c3d-a90d-91bb0a54ec80
arp -n<br>
> >> ><br>
> >> > Address
HWtype HWaddress
Flags Mask<br>
> >> > Iface<br>
> >> > 192.168.0.6
ether fa:16:3e:40:85:41 C<br>
> >> > tapc7c9f581-2d<br>
> >> > 192.168.0.12
ether fa:16:3e:5c:fe:86 C<br>
> >> > tapc7c9f581-2d<br>
> >> ><br>
> >> ><br>
> >> > sudo ip netns exec qdhcp-e8586b01-6441-4c3d-a90d-91bb0a54ec80
ping<br>
> >> > 192.168.0.12 => This is the IP for the VM.<br>
> >> > PING 192.168.0.12 (192.168.0.12) 56(84) bytes of data.<br>
> >> ><br>
> >> ><br>
> >> > ovs-dpctl dump-flows<br>
> >> ><br>
> >> > recirc_id(0),in_port(3),eth(src=fa:16:3e:b6:f6:25,dst=fa:16:3e:<br>
> >> > 5c:fe:86),eth_type(0x0806),arp(sip=192.168.0.2,tip=192.168.0.<br>
> >> > 12,op=1/0xff,sha=fa:16:3e:b6:f6:25,tha=00:00:00:00:00:00),<br>
> >> > packets:0, bytes:0, used:never,<br>
> >> > actions:userspace(pid=4294958325,slow_path(action))<br>
> >> > recirc_id(0),in_port(3),eth(src=00:00:00:00:00:00/01:00:00:00:00:<br>
> >> > 00,dst=fa:16:3e:5c:fe:86),eth_type(0x0800),ipv4(src=<br>
> >> > 192.168.0.0/255.255.255.0,proto=1,frag=no), packets:14,
bytes:1372,<br>
> >> > used:0.974s, actions:drop<br>
> >> ><br>
> >> ><br>
> >> > sudo ovs-appctl ofproto/trace<br>
> >> > "recirc_id(0),in_port(3),eth(src=00:00:00:00:00:00/01:00:00:00:00:<br>
> >> > 00,dst=fa:16:3e:5c:fe:86),eth_type(0x0800),ipv4(src=<br>
> >> > 192.168.0.0/255.255.255.0,proto=1,frag=no)"<br>
> >> > => This produce a long output, and here are the end
of the output:<br>
> >> ><br>
> >> > OpenFlow actions=resubmit(,52)<br>
> >> ><br>
> >> > Resubmitted flow: unchanged<br>
> >> ><br>
> >> > Resubmitted regs: reg0=0x1 reg1=0x0 reg2=0x0 reg3=0x0
reg4=0x0 reg5=0x0<br>
> >> > reg6=0x0 reg7=0x0 reg8=0x0 reg9=0x0 reg10=0x0 reg11=0x0
reg12=0x0<br>
> >> > reg13=0x0 reg14=0x1 reg15=0x3<br>
> >> ><br>
> >> > Resubmitted odp: drop<br>
> >> ><br>
> >> > Resubmitted megaflow:<br>
> >> ><br>
> >> <br>
> recirc_id=0,icmp,reg0=0,reg1=0,reg2=0,reg3=0,reg4=0,reg5=0,reg6=0,reg7=0,reg8=0,reg9=0,reg14=0,reg15=0,metadata=0,in_port=4,vlan_tci=0x0000/<br>
> >> > 0x1000<br>
> >> ><br>
> >> ,dl_src=00:00:00:00:00:00/01:00:00:00:00:00,dl_dst=fa:16:3e:<br>
> 5c:fe:86,nw_src=<br>
> >> > 192.168.0.0/24,nw_frag=no<br>
> >> ><br>
> >> > Rule: table=52 cookie=0 priority=2001,ip,reg15=0x3,metadata=0x4<br>
> >> ><br>
> >> > OpenFlow actions=drop<br>
> >> > Final flow:<br>
> >> ><br>
> >> <br>
> icmp,reg0=0x1,reg14=0x1,reg15=0x3,metadata=0x4,in_port=4,vlan_tci=0x0000,dl_src=00:<br>
> >> > 00:00:00:00:00,dl_dst=fa:16:3e:5c:fe:86,nw_src=192.168.0.0,nw_d<br>
> >> > st=0.0.0.0,nw_tos=0,nw_ecn=0,nw_ttl=0,icmp_type=0,icmp_code=0<br>
> >> > Megaflow:<br>
> >> > recirc_id=0,icmp,in_port=4,vlan_tci=0x0000/0x1000,dl_src=00:00:00:<br>
> >> > 00:00:00/01:00:00:00:00:00,dl_dst=fa:16:3e:5c:fe:86,nw_src=<br>
> >> > 192.168.0.0/24,nw_fra<br>
> >> > g=no<br>
> >> > Datapath actions: drop<br>
> >> ><br>
> >> ><br>
> >> > Here are some output from OVN commands:<br>
> >> ><br>
> >> > sudo ovn-nbctl show<br>
> >> ><br>
> >> > switch 3ce05ec4-f591-4ca7-ba54-dc4fab2ffd1b<br>
> >> > (neutron-e8586b01-6441-4c3d-a90d-91bb0a54ec80)<br>
> >> > port 2c713237-ffc7-4ff1-9e4c-95c1337545e6<br>
> >> > addresses:
["fa:16:3e:40:85:41 192.168.0.6"]<br>
> >> > port c7c9f581-2db9-4b06-86c6-bde2d1aa8ffb<br>
> >> > addresses:
["fa:16:3e:b6:f6:25 192.168.0.2"]<br>
> >> > port 275a5a25-794f-47b9-9b04-8a8da053c143<br>
> >> > addresses:
["fa:16:3e:5c:fe:86 192.168.0.12"]<br>
> >> ><br>
> >> ><br>
> >> > ovn-nbctl acl-list 3ce05ec4-f591-4ca7-ba54-dc4fab2ffd1b<br>
> >> ><br>
> >> > from-lport 1002 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip4)<br>
> >> > allow-related<br>
> >> > from-lport 1002 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip4<br>
> >> > && (ip4.dst == 255.255.255.255 || ip4.dst ==
192.168.0.0/24) && udp &&<br>
> >> > udp.src == 68 && udp.dst == 67) allow<br>
> >> > from-lport 1002 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip6)<br>
> >> > allow-related<br>
> >> > from-lport 1002 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&&<br>
> >> ip4)<br>
> >> > allow-related<br>
> >> > from-lport 1002 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&&<br>
> >> ip4<br>
> >> > && (ip4.dst == 255.255.255.255 || ip4.dst ==
192.168.0.0/24) && udp &&<br>
> >> > udp.src == 68 && udp.dst == 67) allow<br>
> >> > from-lport 1002 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&&<br>
> >> ip6)<br>
> >> > allow-related<br>
> >> > from-lport 1001 (inport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip)<br>
> >> > drop<br>
> >> > from-lport 1001 (inport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&&<br>
> >> ip)<br>
> >> > drop<br>
> >> > to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip4<br>
> >> > && icmp4) allow-related<br>
> >> > to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip4<br>
> >> > && ip4.src == 192.168.0.0/24 && udp
&& udp.src == 67 && udp.dst == 68)<br>
> >> allow<br>
> >> > to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip4<br>
> >> > && tcp && tcp.dst == 22) allow-related<br>
> >> > to-lport 1002 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip4<br>
> >> > && tcp && tcp.dst == 9443) allow-related<br>
> >> > to-lport 1002 (outport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&&<br>
> >> ip4<br>
> >> > && ip4.src == 192.168.0.0/24 && udp
&& udp.src == 67 && udp.dst == 68)<br>
> >> allow<br>
> >> > to-lport 1002 (outport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&&<br>
> >> ip4<br>
> >> > && udp && udp.dst == 5555) allow-related<br>
> >> > to-lport 1001 (outport == "275a5a25-794f-47b9-9b04-8a8da053c143"
&&<br>
> >> ip)<br>
> >> > drop<br>
> >> > to-lport 1001 (outport == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&&<br>
> >> ip)<br>
> >> > drop<br>
> >> ><br>
> >> ><br>
> >> > ovn-sbctl lflow-list | grep ls_out_acl<br>
> >> ><br>
> >> > table=4 (ls_out_acl
), priority=0 , match=(1),<br>
> >> action=(next;)<br>
> >> > table=4 (ls_out_acl
), priority=0 , match=(1),<br>
> >> action=(next;)<br>
> >> > table=4 (ls_out_acl
), priority=65535, match=(!ct.est &&<br>
> >> ct.rel<br>
> >> > && !ct.new && !ct.inv), action=(next;)<br>
> >> > table=4 (ls_out_acl
), priority=65535, match=(ct.est &&<br>
> >> !ct.rel<br>
> >> > && !ct.new && !ct.inv), action=(next;)<br>
> >> > table=4 (ls_out_acl
), priority=65535, match=(ct.inv),<br>
> >> > action=(drop;)<br>
> >> > table=4 (ls_out_acl
), priority=65535, match=(nd),<br>
> >> action=(next;)<br>
> >> > table=4 (ls_out_acl
), priority=2002 , match=(ct.new &&<br>
> >> (outport<br>
> >> > == "275a5a25-794f-47b9-9b04-8a8da053c143"
&& ip4 && icmp4)),<br>
> >> > action=(reg0[1] = 1; next;)<br>
> >> > table=4 (ls_out_acl
), priority=2002 , match=(ct.new &&<br>
> >> (outport<br>
> >> > == "275a5a25-794f-47b9-9b04-8a8da053c143"
&& ip4 && tcp && tcp.dst ==<br>
> >> 22)),<br>
> >> > action=(reg0[1] = 1; next;)<br>
> >> > table=4 (ls_out_acl
), priority=2002 , match=(ct.new &&<br>
> >> (outport<br>
> >> > == "275a5a25-794f-47b9-9b04-8a8da053c143"
&& ip4 && tcp && tcp.dst ==<br>
> >> > 9443)), action=(reg0[1] = 1; next;)<br>
> >> > table=4 (ls_out_acl
), priority=2002 , match=(ct.new &&<br>
> >> (outport<br>
> >> > == "2c713237-ffc7-4ff1-9e4c-95c1337545e6"
&& ip4 && udp && udp.dst ==<br>
> >> > 5555)), action=(reg0[1] = 1; next;)<br>
> >> > table=4 (ls_out_acl
), priority=2002 , match=(outport ==<br>
> >> > "275a5a25-794f-47b9-9b04-8a8da053c143" &&
ip4 && ip4.src ==<br>
> >> 192.168.0.0/24<br>
> >> > && udp && udp.src == 67 && udp.dst
== 68), action=(reg0[1] = 1; next;)<br>
> >> > table=4 (ls_out_acl
), priority=2002 , match=(outport ==<br>
> >> > "2c713237-ffc7-4ff1-9e4c-95c1337545e6" &&
ip4 && ip4.src ==<br>
> >> 192.168.0.0/24<br>
> >> > && udp && udp.src == 67 && udp.dst
== 68), action=(reg0[1] = 1; next;)<br>
> >> > table=4 (ls_out_acl
), priority=2001 , match=(outport ==<br>
> >> > "275a5a25-794f-47b9-9b04-8a8da053c143" &&
ip), action=(drop;)<br>
> >> > table=4 (ls_out_acl
), priority=2001 , match=(outport ==<br>
> >> > "2c713237-ffc7-4ff1-9e4c-95c1337545e6" &&
ip), action=(drop;)<br>
> >> > table=4 (ls_out_acl
), priority=1 , match=(ip),<br>
> >> > action=(reg0[1] = 1; next;)<br>
> >> > table=4 (ls_out_acl
), priority=0 , match=(1),<br>
> >> action=(next;)<br>
> >> ><br>
> >> ><br>
> >> > The last commit in my ovs code:<br>
> >> ><br>
> >> > commit 7efb1e09bb06270248d29c787978593b57101d4f<br>
> >> > Author: Pravin B Shelar <pshelar@ovn.org><br>
> >> > Date: Sun Jul 17 19:24:07 2016 -0700<br>
> >> ><br>
> >> > datapath: Add support for kernel 4.5<br>
> >> ><br>
> >> > Signed-off-by: Pravin B Shelar <pshelar@ovn.org><br>
> >> > Acked-by: Jesse Gross <jesse@kernel.org><br>
> >> ><br>
> >> ><br>
> >> > Here are some detailed information from openstack:<br>
> >> ><br>
> >> > 1. The vm:<br>
> >> ><br>
> >> > nova show test01<br>
> >> > +--------------------------------------<br>
> >> > +----------------------------------------------------------------+<br>
> >> > | Property
|<br>
> >> > Value
|<br>
> >> > +--------------------------------------<br>
> >> > +----------------------------------------------------------------+<br>
> >> > | OS-DCF:diskConfig
|<br>
> >> > MANUAL
|<br>
> >> > | OS-EXT-AZ:availability_zone
|<br>
> >> > nova
|<br>
> >> > | OS-EXT-SRV-ATTR:host
| LB-dev-chenli<br>
> >> |<br>
> >> > | OS-EXT-SRV-ATTR:hostname
|<br>
> >> > test01
|<br>
> >> > | OS-EXT-SRV-ATTR:hypervisor_hostname | LB-dev-chenli<br>
> >> |<br>
> >> > | OS-EXT-SRV-ATTR:instance_name
|<br>
> >> > instance-00000001
|<br>
> >> > | OS-EXT-SRV-ATTR:kernel_id
|<br>
> >> > 261ca209-430e-4b8f-ac39-0e397df30a46
|<br>
> >> > | OS-EXT-SRV-ATTR:launch_index
|<br>
> >> > 0
|<br>
> >> > | OS-EXT-SRV-ATTR:ramdisk_id
|<br>
> >> > 04b6a65d-3cff-4eaf-b30b-582caa2379d7
|<br>
> >> > | OS-EXT-SRV-ATTR:reservation_id
|<br>
> >> > r-wehkr5gi
|<br>
> >> > | OS-EXT-SRV-ATTR:root_device_name |<br>
> >> > /dev/vda
|<br>
> >> > | OS-EXT-SRV-ATTR:user_data
|<br>
> >> > -
|<br>
> >> > | OS-EXT-STS:power_state
|<br>
> >> > 1
|<br>
> >> > | OS-EXT-STS:task_state
|<br>
> >> > -
|<br>
> >> > | OS-EXT-STS:vm_state
|<br>
> >> > active
|<br>
> >> > | OS-SRV-USG:launched_at
|<br>
> >> > 2016-07-20T01:18:48.000000
|<br>
> >> > | OS-SRV-USG:terminated_at
|<br>
> >> > -
|<br>
> >> > | accessIPv4<br>
> >> > |
|<br>
> >> > | accessIPv6<br>
> >> > |
|<br>
> >> > | config_drive
|<br>
> >> > True
|<br>
> >> > | created
|<br>
> >> > 2016-07-20T01:18:42Z
|<br>
> >> > | description
|<br>
> >> > -
|<br>
> >> > | flavor
| m1.tiny<br>
> >> > (1)
|<br>
> >> > | hostId
|<br>
> >> > 36ef28d2b661e38d2d07645d814903a15d62da769828b57029306ec0
|<br>
> >> > | host_status
|<br>
> >> > UP
|<br>
> >> > | id
|<br>
> >> > 27264d62-6a7c-4fe9-be81-c06fca56ec00
|<br>
> >> > | image
| cirros-0.3.4-x86_64-uec<br>
> >> > (aa86e8b5-0699-46a0-a624-7af794b21404) |<br>
> >> > | key_name
|<br>
> >> > -
|<br>
> >> > | lb-mgmt-net network
|<br>
> >> > 192.168.0.12
|<br>
> >> > | locked
|<br>
> >> > False
|<br>
> >> > | metadata
|<br>
> >> > {}
|<br>
> >> > | name
|<br>
> >> > test01
|<br>
> >> > | os-extended-volumes:volumes_attached |<br>
> >> > []
|<br>
> >> > | progress
|<br>
> >> > 0
|<br>
> >> > | security_groups
|<br>
> >> > lb-mgmt-sec-grp
|<br>
> >> > | status
|<br>
> >> > ACTIVE
|<br>
> >> > | tags
|<br>
> >> > []
|<br>
> >> > | tenant_id
|<br>
> >> > 73aebe8aa8ab41f58d5e375a03e279bf
|<br>
> >> > | updated
|<br>
> >> > 2016-07-20T01:18:48Z
|<br>
> >> > | user_id
|<br>
> >> > 53f8c8e491e94d2fa9210f3a8e6a85e4
|<br>
> >> > +--------------------------------------<br>
> >> > +----------------------------------------------------------------+<br>
> >> ><br>
> >> > 2. the security group:<br>
> >> ><br>
> >> > neutron security-group-show lb-mgmt-sec-grp<br>
> >> > +----------------------<br>
> >> > +--------------------------------------------------------------------+<br>
> >> > | Field
|<br>
> >> > Value
|<br>
> >> > +----------------------<br>
> >> > +--------------------------------------------------------------------+<br>
> >> > | description<br>
> >> > |
|<br>
> >> > | id
|<br>
> >> > fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee
|<br>
> >> > | name
|<br>
> >> > lb-mgmt-sec-grp
|<br>
> >> > | security_group_rules |<br>
> >> > {
|<br>
> >> > |
| "remote_group_id":<br>
> >> > null,
|<br>
> >> > |
| "direction":<br>
> >> > "ingress",
|<br>
> >> > |
| "protocol":<br>
> >> > "icmp",
|<br>
> >> > |
| "description":<br>
> >> > "",
|<br>
> >> > |
| "ethertype":<br>
> >> > "IPv4",
|<br>
> >> > |
| "remote_ip_prefix":<br>
> >> > null,
|<br>
> >> > |
| "port_range_max":<br>
> >> > null,
|<br>
> >> > |
| "security_group_id":<br>
> >> > "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>
> >> > |
| "port_range_min":<br>
> >> > null,
|<br>
> >> > |
| "tenant_id":<br>
> >> > "73aebe8aa8ab41f58d5e375a03e279bf",
|<br>
> >> > |
| "id":<br>
> >> > "140677a5-5308-48b2-a5a2-bb5e17994ed5"
|<br>
> >> > |
|<br>
> >> > }
|<br>
> >> > |
|<br>
> >> > {
|<br>
> >> > |
| "remote_group_id":<br>
> >> > null,
|<br>
> >> > |
| "direction":<br>
> >> > "ingress",
|<br>
> >> > |
| "protocol":<br>
> >> > "tcp",
|<br>
> >> > |
| "description":<br>
> >> > "",
|<br>
> >> > |
| "ethertype":<br>
> >> > "IPv4",
|<br>
> >> > |
| "remote_ip_prefix":<br>
> >> > null,
|<br>
> >> > |
| "port_range_max":<br>
> >> > 22,
|<br>
> >> > |
| "security_group_id":<br>
> >> > "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>
> >> > |
| "port_range_min":<br>
> >> > 22,
|<br>
> >> > |
| "tenant_id":<br>
> >> > "73aebe8aa8ab41f58d5e375a03e279bf",
|<br>
> >> > |
| "id":<br>
> >> > "39fccc0c-f832-497a-b03d-fa0e40e3f407"
|<br>
> >> > |
|<br>
> >> > }
|<br>
> >> > |
|<br>
> >> > {
|<br>
> >> > |
| "remote_group_id":<br>
> >> > null,
|<br>
> >> > |
| "direction":<br>
> >> > "egress",
|<br>
> >> > |
| "protocol":<br>
> >> > null,
|<br>
> >> > |
| "description":<br>
> >> > "",
|<br>
> >> > |
| "ethertype":<br>
> >> > "IPv6",
|<br>
> >> > |
| "remote_ip_prefix":<br>
> >> > null,
|<br>
> >> > |
| "port_range_max":<br>
> >> > null,
|<br>
> >> > |
| "security_group_id":<br>
> >> > "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>
> >> > |
| "port_range_min":<br>
> >> > null,
|<br>
> >> > |
| "tenant_id":<br>
> >> > "73aebe8aa8ab41f58d5e375a03e279bf",
|<br>
> >> > |
| "id":<br>
> >> > "54d134c0-f4bc-4f3d-bf49-0e1d0ac9ef1c"
|<br>
> >> > |
|<br>
> >> > }
|<br>
> >> > |
|<br>
> >> > {
|<br>
> >> > |
| "remote_group_id":<br>
> >> > null,
|<br>
> >> > |
| "direction":<br>
> >> > "ingress",
|<br>
> >> > |
| "protocol":<br>
> >> > "tcp",
|<br>
> >> > |
| "description":<br>
> >> > "",
|<br>
> >> > |
| "ethertype":<br>
> >> > "IPv4",
|<br>
> >> > |
| "remote_ip_prefix":<br>
> >> > null,
|<br>
> >> > |
| "port_range_max":<br>
> >> > 9443,
|<br>
> >> > |
| "security_group_id":<br>
> >> > "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>
> >> > |
| "port_range_min":<br>
> >> > 9443,
|<br>
> >> > |
| "tenant_id":<br>
> >> > "73aebe8aa8ab41f58d5e375a03e279bf",
|<br>
> >> > |
| "id":<br>
> >> > "b3e00b04-d398-450b-b1cf-b92fd3dc37a1"
|<br>
> >> > |
|<br>
> >> > }
|<br>
> >> > |
|<br>
> >> > {
|<br>
> >> > |
| "remote_group_id":<br>
> >> > null,
|<br>
> >> > |
| "direction":<br>
> >> > "egress",
|<br>
> >> > |
| "protocol":<br>
> >> > null,
|<br>
> >> > |
| "description":<br>
> >> > "",
|<br>
> >> > |
| "ethertype":<br>
> >> > "IPv4",
|<br>
> >> > |
| "remote_ip_prefix":<br>
> >> > null,
|<br>
> >> > |
| "port_range_max":<br>
> >> > null,
|<br>
> >> > |
| "security_group_id":<br>
> >> > "fbc0c663-f32d-4ddf-9bef-eabac9dfd8ee", |<br>
> >> > |
| "port_range_min":<br>
> >> > null,
|<br>
> >> > |
| "tenant_id":<br>
> >> > "73aebe8aa8ab41f58d5e375a03e279bf",
|<br>
> >> > |
| "id":<br>
> >> > "c528b1cf-b065-4498-986c-13adac4c2a0a"
|<br>
> >> > |
|</font></tt>
<br><tt><font size=2>> >> > }
|<br>
> >> > | tenant_id |<br>
> >> > 73aebe8aa8ab41f58d5e375a03e279bf
|<br>
> >> > +----------------------<br>
> >> > +--------------------------------------------------------------------+<br>
> >> > _______________________________________________<br>
> >> > dev mailing list<br>
> >> > dev@openvswitch.org<br>
> >> > </font></tt><a href=http://openvswitch.org/mailman/listinfo/dev><tt><font size=2>http://openvswitch.org/mailman/listinfo/dev</font></tt></a><tt><font size=2><br>
> >><br>
> >> For issues between ovn and openstack, the openstack-dev mailing<br>
> >> list with a tag of [networking-ovn] is another mailing list
that<br>
> >> you should try. I've added the same in the CC of this
message to<br>
> >> help.<br>
> >><br>
> >> You've shared a lot of information about the ovv/ovs side
of the<br>
> >> situation, but more information on the openstack side would
also<br>
> >> help. Since you say "all-in-one" is this
running with devstack?<br>
> >> Is this the master branch or a stable branch of neutron?
What<br>
> >> is the latest commit in the networking-ovn repository? What<br>
> >> settings are there in the neutron.ini and networking-ovn.ini
files?<br>
> >><br>
> >> I've personally seen tip of the tree neutron, networking-ovn,<br>
> >> and ovn work together in multi-node setups, so my initial
thought<br>
> >> is to check the code versions or configurations you are using...<br>
> >><br>
> >> Ryan<br>
> >><br>
> >><br>
> ><br>
> _______________________________________________<br>
> dev mailing list<br>
> dev@openvswitch.org<br>
> </font></tt><a href=http://openvswitch.org/mailman/listinfo/dev><tt><font size=2>http://openvswitch.org/mailman/listinfo/dev</font></tt></a><tt><font size=2><br>
</font></tt>