[openstack][neutron][OVN DVR] floating IP issue
Hello, I deloyed a trial openstack cluster with 3 controllers and 3 computers. Neutron is configured as OVN DVR. As of the network topology a virtual router is created behind the physical router. The network is assigned as blew from VM instance toward Internet: 192.168.0.0/24 - 192.168.1.0/24 - 10.2.46.0/24 The virtual router and the physical router are performing 1-to-1 NAT in between respectively. The system is working well until the servers are power cycled. There seem to be something wrong with floating IP(dnat_and_snat), and VM can't reach Internet anymore. Capturing packet from the WAN port of physical router it turns out that the src IP of the ping request from VM is 192.168.1.182 rather than 192.168.1.71-75 as expected. I can't see any issue from traces below. Can anybody please help? root@infra1:~# ovn-nbctl lr-nat-list neutron-e5f7f842-3188-49bf-9c7c-3f5fac41ecfa TYPE GATEWAY_PORT MATCH EXTERNAL_IP EXTERNAL_PORT LOGICAL_IP EXTERNAL_MAC LOGICAL_PORT dnat_and_snat lrp-5dc8c94e-90a5- 192.168.1.71 192.168.0.160 fa:16:3e:bd:1c:80 a2ce465d-ff66-4d61-a513-d3a6cdc61ad2 dnat_and_snat lrp-5dc8c94e-90a5- 192.168.1.72 192.168.0.103 fa:16:3e:e5:4c:81 708ebc99-3f5f-42b6-8e73-25d15228ba47 dnat_and_snat lrp-5dc8c94e-90a5- 192.168.1.73 192.168.0.120 fa:16:3e:31:bf:76 40c00b27-50cc-43c4-89ba-0c037acfa675 dnat_and_snat lrp-5dc8c94e-90a5- 192.168.1.74 192.168.0.164 fa:16:3e:59:5a:2a 5304617a-f041-4031-b2b9-08feb0e01e85 dnat_and_snat lrp-5dc8c94e-90a5- 192.168.1.75 192.168.0.156 fa:16:3e:f5:0c:86 ed4fb084-ccc5-41ac-8da8-47f3ba6c8485 snat 192.168.1.182 192.168.0.0/24 root@infra1:~# ovn-nbctl find NAT type=dnat_and_snat _uuid : 0b0c5930-efeb-4794-b604-5abd5a2dbcc6 allowed_ext_ips : [] exempted_ext_ips : [] external_ids : {"neutron:fip_external_mac"="fa:16:3e:e5:4c:81", "neutron:fip_id"="7f35acd7-b2e9-40f4-bd65-56223448db71", "neutron:fip_network_id"="90eb7d3b-291b-4080-a57d-b01a6259b583", "neutron:fip_port_id"="708ebc99-3f5f-42b6-8e73-25d15228ba47", "neutron:revision_number"="9", "neutron:router_name"=neutron-e5f7f842-3188-49bf-9c7c-3f5fac41ecfa} external_ip : "192.168.1.72" external_mac : "fa:16:3e:e5:4c:81" external_port_range : "" gateway_port : ad8a50c2-2dff-4ef2-8b06-1f3cc8c01e1e logical_ip : "192.168.0.103" logical_port : "708ebc99-3f5f-42b6-8e73-25d15228ba47" match : "" options : {stateless="false"} priority : 0 type : dnat_and_snat Frank
participants (1)
-
holywine@outlook.com