<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p><font face="Helvetica, Arial, sans-serif">Hey,<br>
</font></p>
<p><font face="Helvetica, Arial, sans-serif">we are using OVN 22.03 and face an issue where a VM that is directly connected to the provider network won't be accessible, because it cannot arp for the Gateway IP. </font><font face="Helvetica, Arial, sans-serif">OVN
routers do reply to the arp request though.</font><font face="Helvetica, Arial, sans-serif">
</font><font face="Helvetica, Arial, sans-serif">We know that this exact scenario works as we have it running in our staging environment.</font></p>
<p><font face="Helvetica, Arial, sans-serif">Oddly enough if the right MAC-IP Binding is </font><font face="Helvetica, Arial, sans-serif">manually</font><font face="Helvetica, Arial, sans-serif"> defined within the VM and the Gateway, the traffic will begin
to flow correctly according to the right SGs. <br>
</font></p>
<p><font face="Helvetica, Arial, sans-serif">I did an ovn-trace and were able to see that the traffic is supposed to be flooded to the right ports. The ovs-trace on the other hand did not show the same picture. It just did 4k recirculations and then dropped
the packet. I already restarted the ovn-controller on the right hv, but that did not do anything.<br>
</font></p>
<p><font face="Helvetica, Arial, sans-serif">The LSP:<br>
</font></p>
<pre>$ ovn-nbctl list Logical_Switch_Port cfce175b-9d88-4c2e-a5cc-d76cd5c71deb
_uuid : c5dfb248-941e-4d4e-af1a-9ccafc22db70
addresses : [<a class="moz-txt-link-rfc2396E" href="fa:16:3e:a2:d7:1a2a02:ed80:0:3::34191.198.2.33">"fa:16:3e:a2:d7:1a 2a02:ed80:0:3::341 91.198.2.33"</a>]
dhcpv4_options : 1922ee38-282f-4f5c-ade8-6cd157ee52e9
dhcpv6_options : []
dynamic_addresses : []
enabled : true
external_ids : {<a class="moz-txt-link-rfc2396E" href="neutron:cidrs">"neutron:cidrs"</a>="2a02:<a class="moz-txt-link-freetext" href="ed80:0:3::341/64">ed80:0:3::341/64</a> 91.198.2.33/24", <a class="moz-txt-link-rfc2396E" href="neutron:device_id">"neutron:device_id"</a>="8062ec61-0c68-41dd-b77c-e8b72ad16a88", <a class="moz-txt-link-rfc2396E" href="neutron:device_owner">"neutron:device_owner"</a>=<a class="moz-txt-link-rfc2396E" href="compute:AZ1">"compute:AZ1"</a>, <a class="moz-txt-link-rfc2396E" href="neutron:network_name">"neutron:network_name"</a>=neutron-210e26d7-942f-4e17-89b2-571eee87d7e4, <a class="moz-txt-link-rfc2396E" href="neutron:port_name">"neutron:port_name"</a>="", <a class="moz-txt-link-rfc2396E" href="neutron:project_id">"neutron:project_id"</a>="99fb21796a8f4cbda42ba5b9d1e307dd", <a class="moz-txt-link-rfc2396E" href="neutron:revision_number">"neutron:revision_number"</a>="16", <a class="moz-txt-link-rfc2396E" href="neutron:security_group_ids">"neutron:security_group_ids"</a>="3e41777f-7aa4-4368-9992-5ca7cc2a5372 873b3b62-0918-4b1e-be73-fdbed50d2ac2"}
ha_chassis_group : []
name : "cfce175b-9d88-4c2e-a5cc-d76cd5c71deb"
options : {mcast_flood_reports="true", requested-chassis=net-openstack-hv31}
parent_name : []
port_security : [<a class="moz-txt-link-rfc2396E" href="fa:16:3e:a2:d7:1a2a02:ed80:0:3::34191.198.2.33">"fa:16:3e:a2:d7:1a 2a02:ed80:0:3::341 91.198.2.33"</a>]
tag : []
tag_request : []
type : ""
up : true
</pre>
<p>The PB:</p>
<pre>$ ovn-sbctl find Port_Binding logical_port=cfce175b-9d88-4c2e-a5cc-d76cd5c71deb
_uuid : e9e5ce44-698f-4a29-acd1-2f24cc1d1950
chassis : c944c21a-3344-4fda-ab4e-a4cc07403125
datapath : 993b44d5-1629-4e9b-b44e-24096d8b3959
encap : []
external_ids : {<a class="moz-txt-link-rfc2396E" href="neutron:cidrs">"neutron:cidrs"</a>="2a02:<a class="moz-txt-link-freetext" href="ed80:0:3::341/64">ed80:0:3::341/64</a> 91.198.2.33/24", <a class="moz-txt-link-rfc2396E" href="neutron:device_id">"neutron:device_id"</a>="8062ec61-0c68-41dd-b77c-e8b72ad16a88", <a class="moz-txt-link-rfc2396E" href="neutron:device_owner">"neutron:device_owner"</a>=<a class="moz-txt-link-rfc2396E" href="compute:AZ1">"compute:AZ1"</a>, <a class="moz-txt-link-rfc2396E" href="neutron:network_name">"neutron:network_name"</a>=neutron-210e26d7-942f-4e17-89b2-571eee87d7e4, <a class="moz-txt-link-rfc2396E" href="neutron:port_name">"neutron:port_name"</a>="", <a class="moz-txt-link-rfc2396E" href="neutron:project_id">"neutron:project_id"</a>="99fb21796a8f4cbda42ba5b9d1e307dd", <a class="moz-txt-link-rfc2396E" href="neutron:revision_number">"neutron:revision_number"</a>="16", <a class="moz-txt-link-rfc2396E" href="neutron:security_group_ids">"neutron:security_group_ids"</a>="3e41777f-7aa4-4368-9992-5ca7cc2a5372 873b3b62-0918-4b1e-be73-fdbed50d2ac2"}
gateway_chassis : []
ha_chassis_group : []
logical_port : "cfce175b-9d88-4c2e-a5cc-d76cd5c71deb"
mac : [<a class="moz-txt-link-rfc2396E" href="fa:16:3e:a2:d7:1a2a02:ed80:0:3::34191.198.2.33">"fa:16:3e:a2:d7:1a 2a02:ed80:0:3::341 91.198.2.33"</a>]
nat_addresses : []
options : {mcast_flood_reports="true", requested-chassis=net-openstack-hv31}
parent_port : []
requested_chassis : c944c21a-3344-4fda-ab4e-a4cc07403125
tag : []
tunnel_key : 344
type : ""
up : true
virtual_parent : []
</pre>
<p>The LS:</p>
<pre>$ ovn-nbctl list Logical_Switch public-network
_uuid : 56d8be55-462a-4b93-8710-3c79ca386213
acls : []
copp : []
dns_records : []
external_ids : {<a class="moz-txt-link-rfc2396E" href="neutron:mtu">"neutron:mtu"</a>="1500", <a class="moz-txt-link-rfc2396E" href="neutron:network_name">"neutron:network_name"</a>=public-network, <a class="moz-txt-link-rfc2396E" href="neutron:revision_number">"neutron:revision_number"</a>="21"}
forwarding_groups : []
load_balancer : []
load_balancer_group : []
name : neutron-210e26d7-942f-4e17-89b2-571eee87d7e4
other_config : {mcast_flood_unregistered="false", mcast_snoop="false"}
ports : [00225774-8fbc-473f-ae5e-d486c54212c8, ..., c5dfb248-941e-4d4e-af1a-9ccafc22db70, ...
qos_rules : []
</pre>
<p>The patchport:</p>
<pre>$ ovn-nbctl list Logical_Switch_Port provnet-aa35051c-6fc0-463a-8807-0cb28903be14
_uuid : f7259aeb-0e63-4d20-8a8e-54ebf454a524
addresses : [unknown]
dhcpv4_options : []
dhcpv6_options : []
dynamic_addresses : []
enabled : []
external_ids : {}
ha_chassis_group : []
name : provnet-aa35051c-6fc0-463a-8807-0cb28903be14
options : {mcast_flood="false", mcast_flood_reports="true", network_name=physnet1}
parent_name : []
port_security : []
tag : []
tag_request : []
type : localnet
up : false
</pre>
<p>I hope I provided the needed context!<br>
Thanks in advance!</p>
<p>Best regards,<br>
Justin Lamp<br>
</p>
<br>
-- <br>
Justin Lamp<br>
Systems Engineer<br>
<br>
NETWAYS Managed Services GmbH | Deutschherrnstr. 15-19 | D-90429 Nuernberg<br>
Tel: +49 911 92885-0 | Fax: +49 911 92885-77<br>
CEO: Julian Hein, Bernd Erk, Sebastian Saemann | AG Nuernberg HRB25207<br>
https://www.netways.de | justin.lamp@netways.de<br>
<br>
** stackconf 2023 - September - https://stackconf.eu **<br>
** OSMC 2023 - November - https://osmc.de **<br>
** NETWAYS Web Services - https://nws.netways.de **<br>
** NETWAYS Trainings - https://netways.de/trainings **<br>
</body>
</html>