Hi, I have some initial thoughts on this. [1] Did you test the traffic without DVR ? [2] I have this Google Doc, https://docs.google.com/document/d/1iXMAyVMf42FTahExmGdYNGOBFyeA4e74sAO3pvr_RjA/edit which can explain the setup. Is the setup and l3 agent configuration as suggested ? Can you recheck the same. -----Original Message----- From: Backhausen, Matthias [mailto:matthias.backhausen at ts.fujitsu.com] Sent: Wednesday, May 13, 2015 6:50 PM To: openstack at lists.openstack.org Subject: [Openstack] [Neutron] DVR - mac-addr on br-int times out - bug ? Hi, we did some performance tests with DVR and run into an issue we think its a bug, but I couldnt read sth similar about it. Would be great someone could comment. Could not imagine this isn't catched yet. Scenario: 2 VMs of same tenant but in different subnets talk to each other. The traffic flow is ... Traffic VM1 to VM2: ========= CN1 ==================== ======== CN2 =========== VM1--->br-int--->Router--->br-int--->br-tun---------->br-tun--->br-int--->VM2 Traffic VM2 to VM1: ========= CN2 ==================== ======== CN1 =========== VM2--->br-int--->Router--->br-int---br-tun----------->br-tun--->br-int--->VM1 This works as designed; however obviously br-int of CN1 never gets traffic from Router of CN1 (except the very first ARP response), same for br-int of CN2. This leads to mac timeout on br-int after 300 secs and degrades performance massively. Thanks, Matthias _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack at lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack