[Openstack] OpenVSwitch inside Instance no ARP passthrough
Mathias Strufe (DFKI)
mathias.strufe at dfki.de
Wed Jan 31 20:49:15 UTC 2018
Dear Volodymyr, all,
thanks for your fast answer ...
but I'm still facing the same problem, still can't ping the instance
with configured and up OVS bridge ... may because I'm quite new to
OpenStack and OpenVswitch and didn't see the problem ;)
My setup is devstack Mitaka in single machine config ... first of all I
didn't find there the openvswitch_agent.ini anymore, I remember in
previous version it was in the neutron/plugin folder ...
Is this config now done in the ml2 config file in the [OVS] section????
I'm really wondering ...
so I can ping between the 2 instances without any problem. But as soon I
bring up the OVS bridge inside the vm the ARP requests only visible at
the ens interface but not reaching the OVSbr ...
please find attached two files which may help for troubleshooting. One
are some network information from inside the Instance that runs the OVS
and one ovs-vsctl info of the OpenStack Host.
If you need more info/logs please let me know! Thanks for your help!
BR Mathias.
On 2018-01-27 22:44, Volodymyr Litovka wrote:
> Hi Mathias,
>
> whether you have all corresponding bridges and patches between them
> as described in openvswitch_agent.ini using
>
> integration_bridge
> tunnel_bridge
> int_peer_patch_port
> tun_peer_patch_port
> bridge_mappings
>
> parameters? And make sure, that service "neutron-ovs-cleanup" is in
> use during system boot. You can check these bridges and patches using
> "ovs-vsctl show" command.
>
> On 1/27/18 9:00 PM, Mathias Strufe (DFKI) wrote:
>
>> Dear all,
>>
>> I'm quite new to openstack and like to install openVSwtich inside
>> one Instance of our Mitika openstack Lab Enviornment ...
>> But it seems that ARP packets got lost between the network
>> interface of the instance and the OVS bridge ...
>>
>> With tcpdump on the interface I see the APR packets ...
>>
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol
>> decode
>> listening on ens6, link-type EN10MB (Ethernet), capture size 262144
>> bytes
>> 18:50:58.080478 ARP, Request who-has 192.168.120.10 tell
>> 192.168.120.6, length 28
>> 18:50:58.125009 ARP, Request who-has 192.168.120.1 tell
>> 192.168.120.6, length 28
>> 18:50:59.077315 ARP, Request who-has 192.168.120.10 tell
>> 192.168.120.6, length 28
>> 18:50:59.121369 ARP, Request who-has 192.168.120.1 tell
>> 192.168.120.6, length 28
>> 18:51:00.077327 ARP, Request who-has 192.168.120.10 tell
>> 192.168.120.6, length 28
>> 18:51:00.121343 ARP, Request who-has 192.168.120.1 tell
>> 192.168.120.6, length 28
>>
>> but on the OVS bridge nothing arrives ...
>>
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol
>> decode
>> listening on OVSbr2, link-type EN10MB (Ethernet), capture size
>> 262144 bytes
>>
>> I disabled port_security and removed the security group but nothing
>> changed
>>
>>
> +-----------------------+---------------------------------------------------------------------------------------+
>>
>> | Field | Value
>> |
>>
> +-----------------------+---------------------------------------------------------------------------------------+
>>
>> | admin_state_up | True
>> |
>> | allowed_address_pairs |
>> |
>> | binding:host_id | node11
>> |
>> | binding:profile | {}
>> |
>> | binding:vif_details | {"port_filter": true, "ovs_hybrid_plug":
>> true} |
>> | binding:vif_type | ovs
>> |
>> | binding:vnic_type | normal
>> |
>> | created_at | 2018-01-27T16:45:48Z
>> |
>> | description |
>> |
>> | device_id | 74916967-984c-4617-ae33-b847de73de13
>> |
>> | device_owner | compute:nova
>> |
>> | extra_dhcp_opts |
>> |
>> | fixed_ips | {"subnet_id":
>> "525db7ff-2bf2-4c64-b41e-1e41570ec358", "ip_address":
>> "192.168.120.10"} |
>> | id | 74b754d6-0000-4c2e-bfd1-87f640154ac9
>> |
>> | mac_address | fa:16:3e:af:90:0c
>> |
>> | name |
>> |
>> | network_id | 917254cb-9721-4207-99c5-8ead9f95d186
>> |
>> | port_security_enabled | False
>> |
>> | project_id | c48457e73b664147a3d2d36d75dcd155
>> |
>> | revision_number | 27
>> |
>> | security_groups |
>> |
>> | status | ACTIVE
>> |
>> | tenant_id | c48457e73b664147a3d2d36d75dcd155
>> |
>> | updated_at | 2018-01-27T18:54:24Z
>> |
>>
> +-----------------------+---------------------------------------------------------------------------------------+
>>
>>
>> maybe the port_filter causes still the problem? But how to disable
>> it?
>>
>> Any other idea?
>>
>> Thanks and BR Mathias.
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack [1]
>> Post to : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack [1]
>
> --
> Volodymyr Litovka
> "Vision without Execution is Hallucination." -- Thomas Edison
>
>
> Links:
> ------
> [1] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
--
Vielen Dank und Gruß Mathias.
Many Thanks and kind regards, Mathias.
--
Dipl.-Ing. (FH) Mathias Strufe
Wissenschaftlicher Mitarbeiter / Researcher
Intelligente Netze / Intelligent Networks
Phone: +49 (0) 631 205 75 - 1826
Fax: +49 (0) 631 205 75 – 4400
E-Mail: Mathias.Strufe at dfki.de
WWW: http://www.dfki.de/web/forschung/in
WWW: https://selfnet-5g.eu/
--------------------------------------------------------------
Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH
Trippstadter Strasse 122
D-67663 Kaiserslautern, Germany
Geschaeftsfuehrung:
Prof. Dr. Dr. h.c. mult. Wolfgang Wahlster (Vorsitzender) Dr. Walter
Olthoff
Vorsitzender des Aufsichtsrats:
Prof. Dr. h.c. Hans A. Aukes
Amtsgericht Kaiserslautern, HRB 2313
VAT-ID: DE 148 646 973
--------------------------------------------------------------
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ovs-vsctl_from_OpenStack_Host.text
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20180131/d5edbae6/attachment.text>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: NetworkInfoInsideOpenStackInstance.txt
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20180131/d5edbae6/attachment.txt>
More information about the Openstack
mailing list