We are ecstatic to announce the release of: neutron 16.3.0: OpenStack Networking This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 16.3.0 ^^^^^^ Known Issues ************ * Even with the "igmp_snooping_enable" configuration option stating that traffic would not be flooded to unregistered VMs when this option was enabled, the ML2/OVN driver didn't follow that behavior. This has now been fixed and ML2/OVN will no longer flood traffic to unregistered VMs when this configuration option is set to True. Bug Fixes ********* * Fixed MAC learning issue when ovs offload enabled. OVS firewall reduce the usage of normal actions to reduce cpu utilization. This causing flood rule because there is no MAC learning on ingress traffic. While this ok for none offload case, when using ovs offload flood rule is not offloaded. This fix the MAC learning in the offload, so we avoid flood rule. #1897637 (https://bugs.launchpad.net/neutron/+bug/1897637). Changes in neutron 16.2.0..16.3.0 --------------------------------- 16befa0385 Use consistent filter API syntax 72189fff4a [FT] Add the datapath binding wait event to the watched list 3fd93470c0 Ensure "keepalived" is correcly disabled 37a65b1d27 Disable dns-integration API extension if it's not enabled in ML2 dfeac37371 Randomize port name in "BaseOVSTestCase" 97d404c8c5 Dropping lower constraints testing (stable Ussuri) 1780962bed Limit usage of resources in the fullstack tests job 1096001fa3 Improve the CIDRs overlap check method for router add interface 31c6b28c6d Don't fail if FIP is not in port forwarding cache during cleaning 9f72ba5707 Upgrade RPC version of SecurityGroup*Rpc 2a481aa0ab [GRE] Add possibility to create GRE tunnels over IPv6 d5ea5d305f Fix calling of add_tunnel_port method from sanity checks module e252634c78 Fix imports order in neutron.services.ovn_l3_plugin module b82e2f735e Neutron ovs agent: set mtu of smartnic port c720f26b6a Fix OVS conjunctive IP flows cleanup 9b82a20891 ovn: Always use UTC for Hash ring timestamps a34783be3b [OVN] Fix inconsistent IGMP configuration 2a88356230 Flush ebtables arp protect chains before deleting them 0f41ad641a Fix removal of dvr-src mac flows when non-gateway port on router is deleted 0d00c4e17e [ussuri] Fix tests with new pip resolver 598dcec812 fix dhcp bulk reload exceptions 65d3f79ce6 Ensure ovsdb_probe_interval set before connect() 941aae1b56 Add locks for methods which sets nat rules in router 144d921947 Fix migration from the HA to non-HA routers 5ac50b220e Rehome api tests for propagate_uplink_status 3ba5da849e Fix ovs agent, avoiding import error b9c2dd48fa Fix formatting error in agent/linux/external_process.py 7d8853c6af Switch tripleo standalone job to content provider 9fd5102408 [OVN] Fix get/update/delete of non-OVN agents ef14d258ee Local mac direct flow for non-openflow firewall d865165cc8 ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled cd0526dce8 "scope" conversion only just before pyroute2 method call b0892ec3f7 [Functional] Add logging to the check test file function 010d8f74a9 "round" may bump 1 second to 2 if sleep takes more than 1.49 sec 389bae74ae Import "oslo_config.cfg" before "eventlet" 29b8d567fc windows: fix terminating processes 2bedb02a80 Support gateway which is not in subnet CIDR in ha_router 3447613efa Default dnsmasq --conf-file to /dev/null c874c44cdc Make NeutronOvsdbIdl singleton 58e2def05f [OVN] update_port should not remove values from external_ids Diffstat (except docs and test files) ------------------------------------- TESTING.rst | 6 +- lower-constraints.txt | 155 --------------- neutron/agent/common/ovs_lib.py | 16 ++ neutron/agent/dhcp/agent.py | 11 +- neutron/agent/l3/agent.py | 17 ++ neutron/agent/l3/extensions/port_forwarding.py | 12 +- neutron/agent/l3/ha_router.py | 9 + neutron/agent/l3/router_info.py | 3 + neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/external_process.py | 2 +- neutron/agent/linux/ip_lib.py | 2 +- neutron/agent/linux/keepalived.py | 12 +- .../agent/linux/openvswitch_firewall/firewall.py | 19 +- neutron/agent/ovn/metadata/ovsdb.py | 6 +- neutron/agent/ovsdb/impl_idl.py | 4 +- neutron/agent/windows/utils.py | 15 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 38 +++- neutron/cmd/sanity/checks.py | 22 ++- neutron/common/ovn/hash_ring_manager.py | 6 +- neutron/common/utils.py | 12 ++ neutron/db/l3_db.py | 15 +- neutron/db/models/ovn.py | 5 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 14 +- .../drivers/openvswitch/agent/common/constants.py | 4 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 80 ++++++-- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 186 ++++++++++++------ .../ml2/drivers/ovn/mech_driver/mech_driver.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 - .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 7 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 11 +- neutron/services/ovn_l3/plugin.py | 29 ++- .../functional/agent/linux/bin/ipt_binname.py | 5 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 2 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 65 +++++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 39 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 21 ++ .../linux/openvswitch_firewall/test_firewall.py | 10 + .../unit/common/ovn/test_hash_ring_manager.py | 2 + .../drivers/linuxbridge/agent/test_arp_protect.py | 16 ++ .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 214 +++++++++++++++++++-- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 28 +++ .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 66 ------- .../ovn/mech_driver/ovsdb/test_maintenance.py | 6 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 2 +- ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 10 + ...n-igmp-flood-unregistered-82aeb640f5dded84.yaml | 8 + tox.ini | 9 +- zuul.d/base.yaml | 1 + zuul.d/project.yaml | 18 +- 72 files changed, 1289 insertions(+), 449 deletions(-)