[Openstack] Openstack Kilo, problems with SCTP and neutron DVR...

Brian Haley brian.haley at hpe.com
Wed Dec 9 14:42:36 UTC 2015


Hi Daniel,

On 12/09/2015 05:57 AM, Daniel.Balsiger at swisscom.com wrote:
> Hello everybody.
>
>
> I am not sure if it is the right place to ask this question, please direct me to
> the right list in case it is not.
>
> I am running OpenStack Kilo on top of Ubuntu 14.04 with neutron DVR (openvswitch
> agents, l2population, vxlan overlay)
>
>
> When assigning a public floating IP to a VM and connect from outside by SCTP I
> cannot see any SCTP packet arriving in the VM. (I can see it on the
> corresponding compute node br-ex interface though)
>
>
> Security Groups are set up to allow incoming IP protocol 132 from everywhere.
>
> SCTP connections are working fine from VM to VM as well (tested with sctp_darn)
>
>
> Is anybody facing the same problem ? Any hints to find out where those packets
> are dropped/lost ?
>
>
> I already checked the qrouter-* and fip-* namespaces on the corresponding
> compute node. Did not see anything blocking/dropping those packets in the
> iptables setup there.
>
>
> Any help is appreciated. Thank you in advance.

Can you verify it works without DVR and/or with the latest Liberty code?  There 
have been a number of bugs fixed in the DVR space since Kilo, and perhaps 
something needs to be backported.

Thanks,

-Brian




More information about the Openstack mailing list