[Openstack] [Neutron] asymetric DHCP brokenness on tenant GRE networks

Jonathan Proulx jon at jonproulx.com
Wed Jan 29 21:38:36 UTC 2014


On Wed, Jan 29, 2014 at 3:39 PM, Robert Collins
<robertc at robertcollins.net> wrote:
> On 30 January 2014 08:16, Jonathan Proulx <jon at jonproulx.com> wrote:
>> On Wed, Jan 29, 2014 at 1:49 PM, Joe Topjian <joe at topjian.net> wrote:

> Always use ovs-vsctl show on ovs switches - brcompat is super limited.

usually do just interesting that what looks the same in ovs-vsctl
looks different in brctl & wondering if that indicates software of
configuiation differences that aren't meant to be there

> What flows do you have defined?

This is where I start to wade out of my depth a bit, not sure what I
should expect to see here...

> ovs-ofctl show br-int #(to id ports)

This is the tap device I'm woring on:
root at nova-50:~# ovs-ofctl show br-int|grep tap78facbbc-b
 274(tap78facbbc-ba): addr:fe:16:3e:c8:68:dd

> ovs-ofctl dump-flows br-int

I was passing tcp traffic on this port and seeing the gre wrapped
packets on eth0 when I did this dump:
root at nova-50:~# ovs-ofctl dump-flows br-int
NXST_FLOW reply (xid=0x4):
 cookie=0x0, duration=69292.093s, table=0, n_packets=0, n_bytes=0,
priority=2,in_port=229 actions=drop
 cookie=0x0, duration=1545268.042s, table=0, n_packets=1505156487,
n_bytes=1980423852187, priority=2,in_port=250 actions=drop
 cookie=0x0, duration=1545232.778s, table=0, n_packets=1739274846,
n_bytes=1721505405944, priority=3,in_port=250,dl_vlan=2113
actions=mod_vlan_vid:1,NORMAL
 cookie=0x0, duration=1545269.298s, table=0, n_packets=1935466381,
n_bytes=1703070038331, priority=1 actions=NORMAL

Oddly none of the flows seem relevant to this, port 250 is int-eth1-br
which connects to the trunking port used for the provider VLANs (2113
in this case), the other tap device seems orphaned, but in any case
isn't the one I'm looking at:
root at nova-50:~# ovs-ofctl show br-int|grep -e 229 -e 250
 229(tap9570dfc8-0e): addr:fe:16:3e:72:f3:3f
 250(int-eth1-br): addr:fa:a7:f4:76:f6:8a

On the tunnel bridge port 1 is the patch-int port that connects back
to the br-int and port 53 is the gre tunnel to the netowrk controller:

root at nova-50:~# ovs-ofctl dump-flows br-tun|grep port=53
 cookie=0x0, duration=1546132.157s, table=0, n_packets=0, n_bytes=0,
priority=1,in_port=53 actions=resubmit(,2)
root at nova-50:~# ovs-ofctl dump-flows br-tun|grep port=1\
 cookie=0x0, duration=1546174.719s, table=0, n_packets=64370751,
n_bytes=3775833955, priority=1,in_port=1 actions=resubmit(,1)


Thanks,
-Jon




More information about the Openstack mailing list