<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">Hi Roman,</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">I'm using 'geneve' for my tenant networks.</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">By the way, by pinging 8.8.8.8 from an instance with FIP, tcpdump on its Compute node shows an ARP request for every lost ping. Is it normal behaviour?</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">21:13:04.808508 ARP, Request who-has dns.google tell
X.X.X.X
, length 28<br>21:13:05.808726 ARP, Request who-has dns.google tell
X.X.X.X
, length 28<br>21:13:06.808900 ARP, Request who-has dns.google tell
X.X.X.X
, length 28</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">.</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">.</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">.</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066">X.X.X.X if FIP of VM.<br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#000066"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 8 Sep 2020 at 17:21, Roman Safronov <<a href="mailto:rsafrono@redhat.com">rsafrono@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Reza,<div><br></div><div>Are you using 'geneve' tenant networks or 'vlan' ones? I am asking because with VLAN we have the following DVR issue [1]</div><div><br></div><div>[1] <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1704596" target="_blank">Bug 1704596 - FIP traffix does not work on OVN-DVR setup when using VLAN tenant network type</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 8, 2020 at 2:04 PM Reza Bakhshayeshi <<a href="mailto:reza.b2008@gmail.com" target="_blank">reza.b2008@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)">Hi Slawek,</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)">I'm using the latest CentOS 8 Ussuri OVN packages at:</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"><a href="https://trunk.rdoproject.org/centos8-ussuri/deps/latest/x86_64/" target="_blank">https://trunk.rdoproject.org/centos8-ussuri/deps/latest/x86_64/</a></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)">On both Controller and Compute I get:</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"># rpm -qa | grep ovn<br>ovn-host-20.03.0-4.el8.x86_64<br>ovn-20.03.0-4.el8.x86_64</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"># yum info ovn<br>Installed Packages<br>Name : ovn<br>Version : 20.03.0<br>Release : 4.el8<br>Architecture : x86_64<br>Size : 12 M<br>Source : ovn-20.03.0-4.el8.src.rpm<br>Repository : @System<br>From repo : delorean-ussuri-testing<br>Summary : Open Virtual Network support<br>URL : <a href="http://www.openvswitch.org/" target="_blank">http://www.openvswitch.org/</a><br>License : ASL 2.0 and LGPLv2+ and SISSL<br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)">Do you suggest installing ovn manually from source on containers?<br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:rgb(0,0,102)" dir="rtl">ي<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 8 Sep 2020 at 12:39, Slawek Kaplonski <<a href="mailto:skaplons@redhat.com" target="_blank">skaplons@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi,<br>
<br>
Maybe You hit this bug [1]. Please check what ovn version do You have and maybe<br>
update it if needed.<br>
<br>
On Mon, Sep 07, 2020 at 06:23:44PM +0430, Reza Bakhshayeshi wrote:<br>
> Hi all,<br>
> <br>
> I deployed an environment with TripleO Ussuri with 3 HA Controllers and<br>
> some Compute nodes with neutron-ovn-dvr-ha.yaml<br>
> Instances have Internet access through routers with SNAT traffic (in this<br>
> case traffic is routed via a controller node), and by assigning IP address<br>
> directly from provider network (not having a router).<br>
> <br>
> But in case of assigning FIP from provider to an instance, VM Internet<br>
> connection is lost.<br>
> Here is the output of router nat lists, which seems OK:<br>
> <br>
> <br>
> # ovn-nbctl lr-nat-list 587182a4-4d6b-41b0-9fd8-4c1be58811b0<br>
> TYPE EXTERNAL_IP EXTERNAL_PORT LOGICAL_IP<br>
> EXTERNAL_MAC LOGICAL_PORT<br>
> dnat_and_snat X.X.X.X 192.168.0.153<br>
> fa:16:3e:0a:86:4d e65bd8e9-5f95-4eb2-a316-97e86fbdb9b6<br>
> snat Y.Y.Y.Y <a href="http://192.168.0.0/24" rel="noreferrer" target="_blank">192.168.0.0/24</a><br>
> <br>
> <br>
> I replaced FIP with X.X.X.X and router IP with Y.Y.Y.Y<br>
> <br>
> When I remove * EXTERNAL_MAC* and *LOGICAL_PORT*, FIP works fine and as it<br>
> has to be, but traffic routes from a Controller node and it won't be<br>
> distributed anymore.<br>
> <br>
> Any idea or suggestion would be grateful.<br>
> Regards,<br>
> Reza<br>
<br>
[1] <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1834433" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1834433</a><br>
<br>
-- <br>
Slawek Kaplonski<br>
Principal software engineer<br>
Red Hat<br>
<br>
</blockquote></div>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"><span>ROMAN</span> <span>SAFRONOV</span><br></p><p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:10px;margin:0px 0px 4px;text-transform:uppercase"><span>SENIOR QE, OPENSTACK NETWORKING</span><span style="color:rgb(170,170,170);margin:0px"></span></p><p style="font-family:overpass,sans-serif;margin:0px;font-size:10px;color:rgb(153,153,153)"><a href="https://www.redhat.com/" style="color:rgb(0,136,206);margin:0px" target="_blank">Red Hat<span></span></a></p><p style="font-size:10px;margin:0px">Israel</p><p style="font-family:overpass,sans-serif;margin:0px 0px 6px;font-size:10px;color:rgb(153,153,153)"><span>M: <a href="tel:+972545433957" style="color:rgb(0,136,206);font-size:11px;margin:0px" target="_blank">+972545433957</a> </span></p><p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"><span style="font-weight:400;text-transform:none;font-size:10px;margin:0px;color:rgb(153,153,153)"></span><span style="font-size:medium;font-weight:400;text-transform:none"></span></p><table style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:medium" border="0"><tbody><tr><td width="100px"><a href="https://red.ht/sig" target="_blank"><img src="https://www.redhat.com/files/brand/email/sig-redhat.png" width="90" height="auto"></a></td></tr></tbody></table></div></div>
</blockquote></div>