[ovs-discuss] How do I add a network to an existing logical router port?

2020-04-09 Thread Brendan Doyle
Hi, How can I add a network to an existing lrp port, I thought I might be able to use --may-exist but:  ovn-nbctl --may-exist lrp-add lgi_vcn1 lgi_vcn1-ls_external_vcn1 40:44:00:00:00:c0 172.20.1.105/24 10.0.0.0/8 ovn-nbctl: lgi_vcn1-ls_external_vcn1: port already exists with different

Re: [ovs-discuss] How do I add a network to an existing logical router port?

2020-04-09 Thread Brendan Doyle
OK thanks, I looked though the documentation and man pages and could not find any hints. On 09/04/2020 18:26, Numan Siddique wrote: On Thu, Apr 9, 2020 at 10:47 PM Brendan Doyle wrote: Hi, How can I add a network to an existing lrp port, I thought I might be able to use --may-exist

Re: [ovs-discuss] How do I add a network to an existing logical router port?

2020-04-10 Thread Brendan Doyle
view, so apologies if I'm missing the "obvious" ways to do things, just trying to get to grips with the documentation. Thanks again Brendan On 09/04/2020 18:44, Numan Siddique wrote: On Thu, Apr 9, 2020 at 11:00 PM Brendan Doyle wrote: OK thanks, I looked though the documentation

[ovs-discuss] OVN vxlan tutorial/documentation

2020-04-13 Thread Brendan Doyle
HI, I was wondering if anybody could point me to a "how to guide" in setting up  OVN VXLAN. Basically I want to exit my OVN logical network through a VXLAN tunnel with the remote VTEP being in a physical switch. How do I get off the OVN logical  network and into a VNI. I've come across OVN/OVS

Re: [ovs-discuss] OVN vxlan tutorial/documentation

2020-04-15 Thread Brendan Doyle
flows for each individual bridge." Brendan On 15/04/2020 16:19, Numan Siddique wrote: On Mon, Apr 13, 2020 at 5:59 PM Brendan Doyle wrote: HI, I was wondering if anybody could point me to a "how to guide" in setting up OVN VXLAN. Basically I want to exit my OVN logical network th

Re: [ovs-discuss] ovs-vsctl br-get-external-id displays nothing after mappings set

2020-04-17 Thread Brendan Doyle
keys with names prefixed by fake-bridge- in the Port table. " Just wondering what this cmd actually is for then. On 17/04/2020 16:10, Numan Siddique wrote: On Fri, Apr 17, 2020 at 8:10 PM Brendan Doyle wrote: Hi, Am I missing something here, after setting bridge mappings fo

Re: [ovs-discuss] ovs-vsctl br-get-external-id displays nothing after mappings set

2020-04-17 Thread Brendan Doyle
OK thanks for clarifying. On 17/04/2020 16:36, Numan Siddique wrote: On Fri, Apr 17, 2020 at 8:57 PM Brendan Doyle wrote: Thanks, maybe I misinterpreted the ovs-vsctl(8) man page then: " br-get-external-id bridge [key] This command displays the external_ids column of the bridge row.

[ovs-discuss] ssh not working between VMs on different hypervisors

2020-04-21 Thread Brendan Doyle
Folks, Anybody seen this, is it a known problem? VM1 on hypervisor 1 ping IP of VM1 on hypervisor2 # ping -c1 192.16.1.5 PING 192.16.1.5 (192.16.1.5) 56(84) bytes of data. 64 bytes from 192.16.1.5: icmp_seq=1 ttl=64 time=0.494 ms But # ssh 192.16.1.5 Connection

Re: [ovs-discuss] ssh not working between VMs on different hypervisors

2020-04-21 Thread Brendan Doyle
Solved, the darn MTU! forgot that it needs to be lowered to take account of the tunnel on both VMs "ip link set eth1 mtu 1400" Now ssh works :) On 21/04/2020 15:29, Numan Siddique wrote: On Tue, Apr 21, 2020 at 6:37 PM Brendan Doyle wrote: Folks, Anybody seen this, is it a kno

[ovs-discuss] IPv4 to IPv6 NAT and vice a versa

2020-04-21 Thread Brendan Doyle
Hi, I noticed  patch for IPv6 NAT  support went in late last year. But all the test cases in the patch had either both IPv4 addresses or both IPv6 addresses. So just wondering is it possible to do IPv4 to IPv6 NAT and vice a versa. Thanks ___

Re: [ovs-discuss] OVN vxlan tutorial/documentation

2020-04-16 Thread Brendan Doyle
Thanks On 16/04/2020 07:40, Numan Siddique wrote: On Thu, Apr 16, 2020 at 1:01 AM Brendan Doyle wrote: Thanks, I was hoping for something a bit more intuitive, but I have a fundamental question I usually start the ovsdb-server and create the OVS databases using 'ovs-ctl start

[ovs-discuss] ovs-vsctl br-get-external-id displays nothing after mappings set

2020-04-17 Thread Brendan Doyle
Hi, Am I missing something here, after setting bridge mappings for external-ids, I would have thought that 'ovs-vsctl br-get-external-id' would show them? #ovs-vsctl set Open_vSwitch . external-ids:ovn-bridge-mappings=physnet:br-ex #ovs-vsctl br-get-external-id br-ext Nothing?? #ovs-vsctl

Re: [ovs-discuss] [OVN]: Routing external traffic through a specific gateway

2020-04-24 Thread Brendan Doyle
Hi, I'm a bit of a newbie so may not be the best to advise, but I think what you are trying to do (if I understand correctly) is possible, have you checked out Numan's write up here:

Re: [ovs-discuss] Second distributed router port on a gateway not being scheduled to a chassis

2020-04-24 Thread Brendan Doyle
On 24/04/2020 14:19, Numan Siddique wrote: On Thu, Apr 23, 2020 at 9:59 PM Brendan Doyle wrote: Hi, Sorry, this feels like another gotya FAQ type of question .. I have a logical router "lr_vcn1" and an "public" localnet switch "ls_external_vcn1" I config

Re: [ovs-discuss] IPv4 to IPv6 NAT and vice a versa

2020-04-22 Thread Brendan Doyle
OK thanks, it's what I thought but just wanted to confirm. It might be a useful feature to support in the future though. On 22/04/2020 08:06, Numan Siddique wrote: On Tue, Apr 21, 2020 at 8:26 PM Brendan Doyle wrote: Hi, I noticed patch for IPv6 NAT support went in late last year. But all

[ovs-discuss] BFD failover not working when gateways are scheduled to compute node chassis

2020-04-22 Thread Brendan Doyle
Hi, So I have two hypervisors HV1 and HV2 I have two VMs in the same subnet one on each hypervisor HV1-VM1 and HV2-VM1 I have a distributed gateway router configured and scheduled to both hypervisors Initially scheduled on HV2. When I set the network interface on HV2 to down, I expected the

Re: [ovs-discuss] BFD failover not working when gateways are scheduled to compute node chassis

2020-04-22 Thread Brendan Doyle
On 22/04/2020 11:15, Numan Siddique wrote: On Wed, Apr 22, 2020 at 3:37 PM Brendan Doyle wrote: Hi, So I have two hypervisors HV1 and HV2 I have two VMs in the same subnet one on each hypervisor HV1-VM1 and HV2-VM1 I have a distributed gateway router configured and scheduled to both

[ovs-discuss] Second distributed router port on a gateway not being scheduled to a chassis

2020-04-23 Thread Brendan Doyle
Hi, Sorry, this feels like another gotya FAQ type of question .. I have a logical router "lr_vcn1" and an "public" localnet switch "ls_external_vcn1" I configured a distributed router port on "lr_vcn1" and connect it to "ls_external_vcn1", schedule it and every thing works fine. But when I

[ovs-discuss] Problems with proxy ARP

2020-05-01 Thread Brendan Doyle
Hi, I'm having an issue with proxy ARP I have a VM ca-rain06-vmovs-3 (192.16.1.6) and I want to use an unassigned IP (192.16.1.106) in that VM's subnet to "map" to an underlay IP 253.255.0.33, such that when I ping 192.16.1.106 pkts sent from ca-rain06-vmovs-3 to 192.16.1.106 have the dst IP

Re: [ovs-discuss] Problems with proxy ARP

2020-05-02 Thread Brendan Doyle
preciated. Thanks On 01/05/2020 19:48, Brendan Doyle wrote: Hi, I'm having an issue with proxy ARP I have a VM ca-rain06-vmovs-3 (192.16.1.6) and I want to use an unassigned IP (192.16.1.106) in that VM's subnet to "map" to an underlay IP 253.255.0.33, such that when I ping 192.1

[ovs-discuss] Problems with DNAT and host static routes

2020-05-03 Thread Brendan Doyle
Hi, I have a couple of questions/issues with DNAT and static host routes... 1) Can I dnat the destination address of a pkt that is being sent    out of the Logical network through a gateway.    From a VM in the Logical Network I want to send a pkt to    the Logical Network IP 192.16.1.106. But

Re: [ovs-discuss] Problems with DNAT and host static routes

2020-05-06 Thread Brendan Doyle
On 06/05/2020 19:12, Numan Siddique wrote: On Wed, May 6, 2020 at 12:00 AM Brendan Doyle mailto:brendan.do...@oracle.com>> wrote: On 05/05/2020 18:45, Numan Siddique wrote: On Sun, May 3, 2020 at 9:17 PM Brendan Doyle mailto:brendan.do...@oracle.com>> wrote:

Re: [ovs-discuss] Problems with DNAT and host static routes

2020-05-05 Thread Brendan Doyle
On 05/05/2020 18:45, Numan Siddique wrote: On Sun, May 3, 2020 at 9:17 PM Brendan Doyle <mailto:brendan.do...@oracle.com>> wrote: Hi, I have a couple of questions/issues with DNAT and static host routes... 1) Can I dnat the destination address of a pkt that is b

Re: [ovs-discuss] Problems with DNAT and host static routes

2020-05-07 Thread Brendan Doyle
On 06/05/2020 19:41, Brendan Doyle wrote: On 06/05/2020 19:12, Numan Siddique wrote: On Wed, May 6, 2020 at 12:00 AM Brendan Doyle mailto:brendan.do...@oracle.com>> wrote: On 05/05/2020 18:45, Numan Siddique wrote: On Sun, May 3, 2020 at 9:17 PM Brendan

[ovs-discuss] error parsing actions "reg0 = 0; handle_dhcpv6_reply; ": Syntax error at `handle_dhcpv6_reply' expecting action

2020-05-21 Thread Brendan Doyle
Hi Folks, Sorry if this has already been flagged, or is a non issue, but I'm seeing lots of these error messages in ovn-controller.log: 2020-05-21T10:48:23.937Z|00080|lflow|WARN|Dropped 1 log messages in last 758 seconds (most recently, 758 seconds ago) due to excessive rate

Re: [ovs-discuss] Port_Group Address_Set not created as described in ovn-nb.5

2020-09-05 Thread Brendan Doyle
Duh, yes, thanks On 04/09/2020 19:42, Lucas Alvares Gomes wrote: ovn-sbctl list Address_Set ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] Port Groups to add a port to a Port Group

2020-09-07 Thread Brendan Doyle
So the ovn-nbctl Port Group commands are: pg-add group [port] pg-set-ports pg-del But this is not great if I create a Port Group, and then later want to  add a new Logical Switch Port to the Group. I have to find the uuid of the port then use Database commands to add it. So If I create

Re: [ovs-discuss] Port Groups to add a port to a Port Group

2020-09-08 Thread Brendan Doyle
Brendan On 07/09/2020 20:05, Brendan Doyle wrote: So the ovn-nbctl Port Group commands are: pg-add group [port] pg-set-ports pg-del But this is not great if I create a Port Group, and then later want to  add a new Logical Switch Port to the Group. I have to find the uuid of the port then use Da

Re: [ovs-discuss] Port Groups to add a port to a Port Group

2020-09-08 Thread Brendan Doyle
On 08/09/2020 12:00, Numan Siddique wrote: On Tue, Sep 8, 2020 at 2:21 PM Brendan Doyle wrote: I wonder would it be better if the ovn-nbctl Port Group commands are as follows: pg-create group [ports] Create a port group named 'group' with a list of optional Logical Switch ports

[ovs-discuss] Port_Group Address_Set not created as described in ovn-nb.5

2020-09-04 Thread Brendan Doyle
Hi Folks, From ovn-nb.5. "     For each port group, there are two address sets generated to the*A**d**‐ d**r**e**s**s**_**S**e**t* table of the*O**V**N**_**S**o**u**t**h**b**o**u**n**d* database, containing the IP ad‐     dresses of the group of ports, one for IPv4, and the

[ovs-discuss] Connecting a container deployed by Kubernetes to an OVN switch

2020-10-01 Thread Brendan Doyle
Hi, So in my OVN work to date I add VMs deployed by libvert/KVM to my OVN network. Libvert takes care of the veth and external_ids:iface-id plumbing on the OVS br-int and I just use the Libvert interference Id as the LS port name. So now I want to connect a a container deployed by Kubernetes

Re: [ovs-discuss] SB flows not being created in OVN K8 Stateful set

2020-08-06 Thread Brendan Doyle
OK, thanks for the pointers, I think we will eventually move to an OVN CNI But for now I need to get this working. On 06/08/2020 16:49, Girish Moodalbail wrote: On Thu, Aug 6, 2020 at 8:23 AM Brendan Doyle <mailto:brendan.do...@oracle.com>> wrote: On 06/08/2020 16:1

Re: [ovs-discuss] SB flows not being created in OVN K8 Stateful set

2020-08-06 Thread Brendan Doyle
On 06/08/2020 16:19, Girish Moodalbail wrote: On Thu, Aug 6, 2020 at 7:36 AM Brendan Doyle <mailto:brendan.do...@oracle.com>> wrote: OK thanks, perhaps Girish can comment, I thinking that the steps are |# Create OVN namespace, service accounts, ovnkube-db headless

[ovs-discuss] SB flows not being created in OVN K8 Stateful set

2020-08-05 Thread Brendan Doyle
Folks, I'm stumped here, I have the k8 ovnkube-db-raft Stateful set up and running. But when I create a simple network, no SB flows are generated. ovn-nbctl show shows my network. ovn-sbctl show shows the physicals systems in my network. But I can't ping between any hosts because ovn-sbctl

Re: [ovs-discuss] SB flows not being created in OVN K8 Stateful set

2020-08-06 Thread Brendan Doyle
/08/2020 20:54, Dumitru Ceara wrote: On 8/5/20 5:14 PM, Brendan Doyle wrote: Folks, I'm stumped here, I have the k8 ovnkube-db-raft Stateful set up and running. But when I create a simple network, no SB flows are generated. ovn-nbctl show shows my network. ovn-sbctl show shows the physicals

Re: [ovs-discuss] SB flows not being created in OVN K8 Stateful set

2020-08-06 Thread Brendan Doyle
On 06/08/2020 12:31, Dumitru Ceara wrote: On 8/6/20 11:54 AM, Brendan Doyle wrote: I don't see any ovn-northd.log log, I only see those when I'm running OVN outside the k8s cluster. Before I start the Satefulset on my k8 nodes I run: ovn-ctl stop_northd ovn-ctl stop_ovsdb rm -rf /usr/etc/ovn

Re: [ovs-discuss] SB flows not being created in OVN K8 Stateful set

2020-08-06 Thread Brendan Doyle
/github.com/ovn-org/ovn-kubernetes/dist/yaml/ovnkube-node.yaml| Brendan On 06/08/2020 14:44, Dumitru Ceara wrote: On 8/6/20 2:03 PM, Brendan Doyle wrote: On 06/08/2020 12:31, Dumitru Ceara wrote: On 8/6/20 11:54 AM, Brendan Doyle wrote: I don't see any ovn-northd.log log, I only see those when I'm

Re: [ovs-discuss] OVSDB in Kubernetes: raft cluster breaks when pod IPs change

2020-07-09 Thread Brendan Doyle
Matt, I don't have any answers just questions, sorry. I'm interested because I've just started playing with this stuff too. On 09/07/2020 11:53, Matthew Booth wrote: I'm running a 3-node ovsdb raft cluster in kubernetes without using host networking, NET_ADMIN, or any special networking

Re: [ovs-discuss] HA OVN "Central" as a kubernetes service

2020-07-07 Thread Brendan Doyle
follow, are you saying this is all work in progress? I agree that overall documentation needs to be consolidated on both ovn-k8s side or ovn repo. On Mon, Jul 6, 2020 at 9:49 AM Brendan Doyle <mailto:brendan.do...@oracle.com>> wrote: Hi, I've been trying to follow the ins

Re: [ovs-discuss] HA OVN "Central" as a kubernetes service

2020-07-07 Thread Brendan Doyle
On 06/07/2020 21:10, aginwala wrote: On Mon, Jul 6, 2020 at 4:33 AM Brendan Doyle <mailto:brendan.do...@oracle.com>> wrote: Hi, So I'm really confused by what you have pointed me to here. As stated I do NOT want to use OVN as a CNI. I have a k8s cluster that us

Re: [ovs-discuss] HA OVN "Central" as a kubernetes service

2020-07-07 Thread Brendan Doyle
-db=true`>. So, you will need to annotate at least 3 nodes with that label. Yes, would be good to have that in a README. Thanks I will try again with these. HTH Regards, ~Girish On Mon, Jul 6, 2020 at 8:37 AM Brendan Doyle <mailto:brendan.do...@oracle.com>> wrote: So I've t

Re: [ovs-discuss] HA OVN "Central" as a kubernetes service

2020-07-06 Thread Brendan Doyle
r to etcd operator https://github.com/coreos/etcd-operator which just takes the count of raft replicas and does the job in the background. I also added ovn-k8s group so they can comment on any other ideas too. Hope it helps. On Thu, Jun 25, 2020 at 7:15 AM Brendan Doyle mailto:brendan.

Re: [ovs-discuss] HA OVN "Central" as a kubernetes service

2020-07-07 Thread Brendan Doyle
-daemonset:latest Thanks Brendan On 07/07/2020 11:33, Brendan Doyle wrote: On 06/07/2020 21:29, Girish Moodalbail wrote: Hello Brendan, After you run the './daemonset.sh` script, there will be two DB related yaml files in `dist/yaml` folder. The ovnkube-db.yaml brings up standalone OVN DBs

Re: [ovs-discuss] HA OVN "Central" as a kubernetes service

2020-07-06 Thread Brendan Doyle
be-master Error from server (NotFound): deployments.extensions "ovnkube-master" not found Has anybody got this working, or used any other means to deploy an OVN cluster as a K8 Statefulset? Brendan | On 06/07/2020 12:33, Brendan Doyle wrote: Hi, So I'm really confused by what you have

Re: [ovs-discuss] question about OVN Clustered DB Model

2020-07-02 Thread Brendan Doyle
have thought they would migrate to the same node. Is this expected behavior? Everything still works, but was just surprised by this. Brendan On 29/06/2020 15:21, Numan Siddique wrote: On Mon, Jun 29, 2020 at 7:42 PM Brendan Doyle mailto:brendan.do...@oracle.com>> wrote: Hi,

[ovs-discuss] HA OVN "Central" as a kubernetes service

2020-06-25 Thread Brendan Doyle
Hi, So I'm trying to find information on setting up an OVN "Central/Master" high availability (HA) Not as Active-Backup with Pacemaker, but as a cluster. But I want to deploy and manage that cluster as a Kubernetes service . I can find lots of stuff on "ovn-kube" but this seems to be using

Re: [ovs-discuss] HA OVN "Central" as a kubernetes service

2020-06-26 Thread Brendan Doyle
operator https://github.com/coreos/etcd-operator which just takes the count of raft replicas and does the job in the background. I also added ovn-k8s group so they can comment on any other ideas too. Hope it helps. On Thu, Jun 25, 2020 at 7:15 AM Brendan Doyle mailto:brendan.do...@oracle.com

[ovs-discuss] question about OVN Clustered DB Model

2020-06-29 Thread Brendan Doyle
Hi, I've a question about running OVN "central" in a cluster. So I have (I think) successfully created a cluster on nodes ca-rain01 (leader) , ca-rain03 and ca-rain03 (See cluster status dumps) below. But It seems I can only run ovn-nbctl/ovn-sbctl on the leader node? Is this how it is

Re: [ovs-discuss] question about OVN Clustered DB Model

2020-06-29 Thread Brendan Doyle
OK, thanks, I'll give it a try On 29/06/2020 15:21, Numan Siddique wrote: On Mon, Jun 29, 2020 at 7:42 PM Brendan Doyle mailto:brendan.do...@oracle.com>> wrote: Hi, I've a question about running OVN "central" in a cluster. So I have (I think) successf

Re: [ovs-discuss] OVN DNS support questions

2020-06-10 Thread Brendan Doyle
So as I understand it OVN DNS is not operating as either an iterative or recursive DNS resolver. It won't respond  with a referral to another DNS server nor will it do iterative requests to root, top level and  authoritative servers to find the response. It essentially intercepts the DNA

[ovs-discuss] Dynamic routing protocol

2020-06-11 Thread Brendan Doyle
Hi, Are there any plans to support a dynamic routing protocol such as OSPF in OVN? Currently if I have multiple Logical Routers connected to a "backbone" switch and I want to route between networks attached to those routers I have to add manually add static routes. It would be great if there

Re: [ovs-discuss] OVC port MTU 1500 dhcp-options mtu 9000

2020-11-19 Thread Brendan Doyle
Brendan On 19/11/2020 10:53, Brendan Doyle wrote: Folks, I'm trying to get OVN working in a 9000 MTU config so :  ovn-nbctl list dhcp-option _uuid   : 00f684c8-42bb-4fad-a248-f5697926778d cidr    : "10.225.1.0/24" external_ids    : {} options : {

[ovs-discuss] OVC port MTU 1500 dhcp-options mtu 9000

2020-11-19 Thread Brendan Doyle
Folks, I'm trying to get OVN working in a 9000 MTU config so :  ovn-nbctl list dhcp-option _uuid   : 00f684c8-42bb-4fad-a248-f5697926778d cidr    : "10.225.1.0/24" external_ids    : {} options : {lease_time="3600", mtu="9000", router="10.225.1.1",

[ovs-discuss] problems ovn-trace and ACLs with a DR Port

2021-01-08 Thread Brendan Doyle
Folks, Has anyone seen this os is it a know bug. I have an ACLs on an "external"/"provider" local net switch that my DR port uses, when I run an ovn-trace on it the trace says the pkt will be dropped, but in reality it is not dropped as expected and designed. My Gateway is doing an SNAT:

Re: [ovs-discuss] [External] : Re: tracing ovs flows in br-int

2021-01-19 Thread Brendan Doyle
Thanks On 19/01/2021 11:33, Dumitru Ceara wrote: On 1/18/21 11:21 PM, Brendan Doyle wrote: I found some stuff about using ovs-appctl ofproto/trace here (https://urldefense.com/v3/__https://docs.ovn.org/_/downloads/en/stable/pdf/__;!!GqivPVa7Brio

[ovs-discuss] tracing ovs flows in br-int

2021-01-18 Thread Brendan Doyle
Hi Folks, I'm trying to trace a flow through br-int but ovs-appctl ofproto/trace br-int is not giving me the output I expect to see. I'm trying to trace the pkt below through br-int on the remote chassis. The pkt does get tunnel and delivered to its destination, which replies, and the reply

Re: [ovs-discuss] tracing ovs flows in br-int

2021-01-18 Thread Brendan Doyle
:00:00),eth_type(0x0800),ipv4(src=0.0.0.0,dst=0.0.0.0,proto=1,tos=0,ttl=0,frag=no),icmp(type=8,code=0) ovs-appctl: ovs-vswitchd: server returned an error Brendan On 18/01/2021 18:31, Brendan Doyle wrote: Hi Folks, I'm trying to trace a flow through br-int but ovs-appctl ofproto/trace br-int

Re: [ovs-discuss] [External] : Re: OVN does not work with vlans when CX5 does UDP tx checksum offload on OEL 7.7 (RHEL 7.7 based) / OEL 7.9 (RHEL 7.9) based

2021-05-10 Thread Brendan Doyle
Thanks do you have a bug id/ further details of how to get the fix? On 10/05/2021 15:10, Frode Nordahl wrote: Hello Brendan, This resembles an issue I have seen with CX5 when not using OVS flow offload. The resolution in my case was to apply a fix [0] to the mlx5 kernel driver. 0:

Re: [ovs-discuss] [External] : Re: Almost half OVN unit tests are skipped (ovn.at:xxx) - OVN_FOR_EACH_NORTHD

2021-05-26 Thread Brendan Doyle
On 25/05/2021 18:36, Han Zhou wrote: > > ## - ## > ## Test results. ## > ## - ## > > 2 tests were successful. > 2 tests were skipped. > make[2]: Leaving directory `/root/ovn' > make[1]: Leaving directory `/root/ovn' > > I'm not sure how I'm supposed to interpret that

[ovs-discuss] Almost half OVN unit tests are skipped (ovn.at:xxx) - OVN_FOR_EACH_NORTHD

2021-05-25 Thread Brendan Doyle
Folks, Perhaps I'm missing something, but in a recent pull of the OVN src, having boot strapped and built the code and executed unit tests as per instructions: Documentation/topics/testing.rst I see that almost half of the unit tests are skipped, seems to be any that begin with:

[ovs-discuss] Is this a bug in the "Egress Loopback table" or am I missing something

2021-06-29 Thread Brendan Doyle
Hi, With a very simple notwork (two VMs on different chassis), 1 subnet, single LS and LR/Gateway. The two VMs can ping each other using their Logical IPs. Each has an "External IP", and each can be accessed from an external network on that external IP. BUT they can't ping each other using

Re: [ovs-discuss] [External] : Re: Is this a bug in the "Egress Loopback table" or am I missing something

2021-06-29 Thread Brendan Doyle
On 29/06/2021 21:38, Numan Siddique wrote: On Tue, Jun 29, 2021 at 4:13 PM Brendan Doyle wrote: Hi, With a very simple notwork (two VMs on different chassis), 1 subnet, single LS and LR/Gateway. The two VMs can ping each other using their Logical IPs. Each has an "External IP", an

Re: [ovs-discuss] [External] : Re: Is this a bug in the "Egress Loopback table" or am I missing something

2021-07-01 Thread Brendan Doyle
On 30/06/2021 18:44, Numan Siddique wrote: On Wed, Jun 30, 2021 at 10:54 AM Brendan Doyle wrote: OK so the simple 1 line change to northd.c in: [ovs-dev,v8,1/6] northd: Swap src and dst eth addresses in router egress loop. fixes the problem, can access all external networks

Re: [ovs-discuss] [External] : Re: Is this a bug in the "Egress Loopback table" or am I missing something

2021-06-30 Thread Brendan Doyle
st eth addresses in router egress loop. I'll try adding this, and incrementally the other patches in the series. Brendan On 29/06/2021 22:40, Numan Siddique wrote: On Tue, Jun 29, 2021 at 5:06 PM Brendan Doyle wrote: On 29/06/2021 21:38, Numan Siddique wrote: On Tue, Jun 29, 2021 at 4:13

Re: [ovs-discuss] [External] : Re: Is this a bug in the "Egress Loopback table" or am I missing something

2021-06-30 Thread Brendan Doyle
I spoke too soon, making this change then breaks all other External network connectivity. I guess I'll try the patch(s) On 30/06/2021 10:11, Brendan Doyle wrote: So If I do : ovn-nbctl add logical_router_port lr1-ls1_external networks "10.68.49.185/32 10.68.49.184/32" Then the hai

Re: [ovs-discuss] [External] : Re: Is this a bug in the "Egress Loopback table" or am I missing something

2021-06-30 Thread Brendan Doyle
6/2021 10:11, Brendan Doyle wrote: So If I do : ovn-nbctl add logical_router_port lr1-ls1_external networks "10.68.49.185/32 10.68.49.184/32" Then the hairpin works and I have connectivity between 10.68.49.185 <-> 10.68.49.185 But This patch also look promising: [ovs-dev,v8

[ovs-discuss] TCP tunnel traffic stops working when move from RHEL 7.7 to 7.9

2021-04-29 Thread Brendan Doyle
Hi Folks, In a very basic OVN config, where I have two VMs on different chassis: switch 7b89d593-05f3-41a7-a246-8dade975df48 (ls_vcn1)     port a6a358c5-5db4-49c7-b68a-3a7429161ab4     addresses: ["52:54:00:71:ad:a0 192.16.1.5"]     port b6c5ef1a-acd9-4053-9986-88e1a6a12b81    

[ovs-discuss] OVN does not work with vlans when CX5 does UDP tx checksum offload on OEL 7.7 (RHEL 7.7 based) / OEL 7.9 (RHEL 7.9) based

2021-05-05 Thread Brendan Doyle
081* I got it to work. Seems like a bit of a performance limitation that OVN does not work with NIC checksum offload? Brendan On 29/04/2021 10:54, Brendan Doyle wrote: Hi Folks, In a very basic OVN config, where I have two VMs on different chassis: switch 7b89d593-05f3-41a7-a246-8dade975df48 (l

[ovs-discuss] Modifying udp ports with OVS flows, match on udp_dst=53 but can't do mod_udp_dst=30053

2021-02-22 Thread Brendan Doyle
Hi, If I try add a rule as follows: ovs-ofctl add-flow br-ext priority=1001,ip,in_port="patch-ln-ls_vcn",nw_proto=17,nw_dst=169.254.239.254,udp_dst=53,actions=mod_nw_dst:253.255.0.31,mod_udp_dst=30053,output:"bond0.3900" I get : ovs-ofctl: unknown action mod_udp_dst Yet OVS is quiet happy

Re: [ovs-discuss] [External] : OVN Error Logs

2021-10-12 Thread Brendan Doyle
I see lots of these exact errors in my logs too, let me know if you get to the bottom of it. On 12/10/2021 13:06, Ammad Syed wrote: Hi, I am using openstack with ml2/ovn. I have two gateway chassis whenever I shutdown one chassis and bring it back online, I see below error in

Re: [ovs-discuss] [External] : Re: MAC_Binding\" table to have identical values

2021-10-21 Thread Brendan Doyle
://urldefense.com/v3/__https://review.opendev.org/c/openstack/neutron/*/813610__;Kw!!ACWV5N9M2RV99hQ!fKjD2ymIm0WKBrKvJ-6cjyKvYNJHCXYBXsL0nhWde_anAW_7exk9teq3h2_dIMoCVyw$ Ammad On Mon, Oct 18, 2021 at 3:40 PM Brendan Doyle wrote: I too am seeing many entries in the ovn-controller log like these: ovn/ovn

Re: [ovs-discuss] [External] : Re: MAC_Binding\" table to have identical values

2021-10-19 Thread Brendan Doyle
When I get a chance will try in my lab, but first I have to chase down an ovs-switchd SEG that we see very frequently. On 18/10/2021 16:36, Numan Siddique wrote: On Mon, Oct 18, 2021 at 9:01 AM Brendan Doyle wrote: Actually looking at the comments in those patches I'm a little worried

Re: [ovs-discuss] [External] : Re: MAC_Binding\" table to have identical values

2021-10-18 Thread Brendan Doyle
openstack/neutron/*/813610__;Kw!!ACWV5N9M2RV99hQ!cn97GSHkLNk2IAP88xCMhUL0NQRFKZzL0KAGHtHhBr9I2o-4rM-4MhSF4y_MrPfrn6U$> Ammad On Mon, Oct 18, 2021 at 3:40 PM Brendan Doyle wrote: I too am seeing many entries in the ovn-controller log like these: ovn/ovn-controller

[ovs-discuss] ACL logs severity seems to be ignored

2021-09-28 Thread Brendan Doyle
Folks, I can't find anything in docs on how this is supposed to work, but I would have assumed that if I set the ACL severity to 'alert; then I would only get a log, if a pkt were dropped. So for example i have an ACL rule:   to-lport 27000 (outport == @pg_vcn3_net1_sl3 && ip4.src ==

Re: [ovs-discuss] [External] : ACL logs severity seems to be ignored

2021-09-28 Thread Brendan Doyle
Also the ovn-controller proc  is running with file log level info, which I would have taken that only ovn logs greater than info would have been logged: ovn-controller unix:/run/openvswitch/db.sock -vconsole:emer -vsyslog:err -vfile:info On 28/09/2021 15:04, Brendan Doyle wrote: Folks, I

Re: [ovs-discuss] [External] : ACL logs severity seems to be ignored

2021-09-28 Thread Brendan Doyle
See bellow On 28/09/2021 17:10, Numan Siddique wrote: On Tue, Sep 28, 2021 at 11:17 AM Brendan Doyle wrote: Also the ovn-controller proc is running with file log level info, which I would have taken that only ovn logs greater than info would have been logged: ovn-controller unix:/run

[ovs-discuss] MTU Physical Node (MTU 9100) -> OVN Gateway -> VM (MTU 9000)

2021-09-29 Thread Brendan Doyle
Folks, Was the issue described here ever resolved: https://mail.openvswitch.org/pipermail/ovs-discuss/2016-February/039958.html Where we have a Physical Node on the underlay (physical network) with an MTU  of 9100 sending to a VM on an OVN switch via  OVN Gateway  where the VM MTU is 9000?

[ovs-discuss] /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-22 Thread Brendan Doyle
Hi, Looking at /etc/openvswitch/conf.db I see it getting very large: [root@pcacn001 ~]#  ls -l /etc/openvswitch/conf.db -rw-r--r--. 1 root root 6069248828 Oct 22 11:55 /etc/openvswitch/conf.db And has lots and lots (mostly)  "ovn-controller: modifying OVS tunnels" updates entries, like

Re: [ovs-discuss] [External] : Re: OVN using the wrong SNAT for established connections

2021-11-18 Thread Brendan Doyle
On 18/11/2021 17:01, Numan Siddique wrote: On Thu, Nov 18, 2021 at 10:46 AM Brendan Doyle wrote: On 08/11/2021 16:14, Numan Siddique wrote: On Mon, Nov 8, 2021 at 5:39 AM Brendan Doyle wrote: Hi, So I have a Distributed router port gateway that had the following NAT entry nat

Re: [ovs-discuss] [External] : Re: OVN using the wrong SNAT for established connections

2021-11-19 Thread Brendan Doyle
On 18/11/2021 21:22, Numan Siddique wrote: On Thu, Nov 18, 2021 at 12:40 PM Brendan Doyle wrote: On 18/11/2021 17:01, Numan Siddique wrote: On Thu, Nov 18, 2021 at 10:46 AM Brendan Doyle wrote: On 08/11/2021 16:14, Numan Siddique wrote: On Mon, Nov 8, 2021 at 5:39 AM Brendan Doyle

Re: [ovs-discuss] [External] : Re: OVN using the wrong SNAT for established connections

2021-11-18 Thread Brendan Doyle
On 08/11/2021 16:14, Numan Siddique wrote: On Mon, Nov 8, 2021 at 5:39 AM Brendan Doyle wrote: Hi, So I have a Distributed router port gateway that had the following NAT entry nat 2dbfe551-50ff-43f3-b8b0-7d2e857dea8c external ip: "253.255.80.24"

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-26 Thread Brendan Doyle
eleted? switch 712757c3-2481-4f8b-940c-05dc13ce37a5 (ls_vcn9319435_external_ugw)     port ls_vcn9319435_external_ugw-lr_vcn9319435     type: router     router-port: lr_vcn9319435-ls_vcn9319435_external_ugw     port ln-ls_vcn9319435_external_ugw     type: localnet     addresses: [&q

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-26 Thread Brendan Doyle
On 26/10/2021 15:50, Numan Siddique wrote: On Tue, Oct 26, 2021 at 8:20 AM Brendan Doyle wrote: Hi, So what is very odd here, is that I have used ovn-nbctl to delete the NB config, so # ovn-nbctl show # ovn-sbctl lflow-list Yet I still see /etc/openvswitch/conf.db growing with updates

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-28 Thread Brendan Doyle
Numan, Just wondering if you got  a chance to look at those logs? Thanks Brendan On 27/10/2021 11:25, Brendan Doyle wrote: Hi, I finally got some debug logs, truncated after the failure occurs, the truncated entries just are repeated updates of the same entry. So some more light

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-28 Thread Brendan Doyle
On 28/10/2021 18:53, Numan Siddique wrote: On Thu, Oct 28, 2021 at 12:21 PM Brendan Doyle wrote: I'm also hoping that this is the reason for the frequent SEGV's we see, this a stacktrace that looks like: Core was generated by `ovs-vswitchd unix:/var/run/openvswitch/db.sock -vconsole:emer

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-28 Thread Brendan Doyle
On 28/10/2021 16:41, Numan Siddique wrote: On Thu, Oct 28, 2021 at 5:20 AM Brendan Doyle wrote: Numan, Just wondering if you got a chance to look at those logs? I looked into the logs, and as I had mentioned earlier you need this fix - https://urldefense.com/v3/__https://github.com/ovn

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-25 Thread Brendan Doyle
On 25/10/2021 15:08, Numan Siddique wrote: On Fri, Oct 22, 2021 at 9:30 AM Brendan Doyle wrote: Hi, Looking at /etc/openvswitch/conf.db I see it getting very large: [root@pcacn001 ~]# ls -l /etc/openvswitch/conf.db -rw-r--r--. 1 root root 6069248828 Oct 22 11:55 /etc/openvswitch/conf.db

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-10-27 Thread Brendan Doyle
, Brendan Doyle wrote: On 26/10/2021 15:50, Numan Siddique wrote: On Tue, Oct 26, 2021 at 8:20 AM Brendan Doyle wrote: Hi, So what is very odd here, is that I have used ovn-nbctl to delete the NB config, so # ovn-nbctl show # ovn-sbctl lflow-list Yet I still see /etc/openvswitch/conf.db

Re: [ovs-discuss] [External] : Re: /etc/openvswitch/conf.db filling up with lost of "ovn-controller: modifying OVS tunnels" updates

2021-11-09 Thread Brendan Doyle
On 28/10/2021 16:41, Numan Siddique wrote: On Thu, Oct 28, 2021 at 5:20 AM Brendan Doyle wrote: Numan, Just wondering if you got a chance to look at those logs? I looked into the logs, and as I had mentioned earlier you need this fix - https://urldefense.com/v3/__https://github.com/ovn

[ovs-discuss] OVN using the wrong SNAT for established connections

2021-11-08 Thread Brendan Doyle
Hi, So I have a Distributed router port gateway that had the following NAT entry     nat 2dbfe551-50ff-43f3-b8b0-7d2e857dea8c     external ip: "253.255.80.24"     logical ip: "10.117.0.0/23"     type: "snat" A VM with IP 10.117.0.3 is using this to mount a filesystem in the

Re: [ovs-discuss] [External] : Re: ovsdb-server --private-key=db:OVN_Northbound, SSL, private_key etc

2021-07-20 Thread Brendan Doyle
On 19/07/2021 17:32, Ben Pfaff wrote: On Mon, Jul 19, 2021 at 04: 29:07PM +0100, Brendan Doyle wrote: When I start OVN/OVs using ovn-ctl /ovs-ctl the ovsdb-server processes have SSL credentials of the form: --private-key=db:Open_vSwitch,SSL,private_key --certificate=db:Open_vSwitch,SSL

Re: [ovs-discuss] [External] : Re: ovsdb-server --private-key=db:OVN_Northbound, SSL, private_key etc

2021-07-20 Thread Brendan Doyle
On 20/07/2021 19:21, Ben Pfaff wrote: On Tue, Jul 20, 2021 at 10:27:30AM +0100, Brendan Doyle wrote: On 19/07/2021 17:32, Ben Pfaff wrote: On Mon, Jul 19, 2021 at 04: 29:07PM +0100, Brendan Doyle wrote: When I start OVN/OVs using ovn-ctl /ovs-ctl the ovsdb-server processes have SSL

[ovs-discuss] ovsdb-server --private-key=db:OVN_Northbound, SSL, private_key etc

2021-07-19 Thread Brendan Doyle
Folks, When I start OVN/OVs using ovn-ctl /ovs-ctl the ovsdb-server processes have SSL credentials of the form: --private-key=db:Open_vSwitch,SSL,private_key --certificate=db:Open_vSwitch,SSL,certificate --bootstrap-ca-cert=db:Open_vSwitch,SSL,ca_cert

Re: [ovs-discuss] ovsdb-server --private-key=db:OVN_Northbound, SSL, private_key etc

2021-07-19 Thread Brendan Doyle
Not sure if this got sent out. On 19/07/2021 16:29, Brendan Doyle wrote: Folks, When I start OVN/OVs using ovn-ctl /ovs-ctl the ovsdb-server processes have SSL credentials of the form: --private-key=db:Open_vSwitch,SSL,private_key --certificate=db:Open_vSwitch,SSL,certificate --bootstrap

[ovs-discuss] ACL logging does not work with allow-stateless

2022-01-12 Thread Brendan Doyle
Folks, Is this a know bug? to demonstrate consider this very basic config, where I have two VMs connected via a single Logical Switch: # ovn-nbctl show switch afccc74b-901c-4d22-ae04-76cca36f511b (ls1)     port 00bff7c0-2e2d-41ba-9485-3b5fa9801365     addresses: ["52:54:00:e6:4f:46

Re: [ovs-discuss] [External] : ACL logging does not work with allow-stateless

2022-01-12 Thread Brendan Doyle
Scratch this I was looking in the wrong log file location, but I believe that this was the case in an earlier build. But with the current top of the tree pull I do see the log entries. On 12/01/2022 14:37, Brendan Doyle wrote: Folks, Is this a know bug? to demonstrate consider this very

[ovs-discuss] SR-IOV OVN OpenStack Mellanox

2022-02-15 Thread Brendan Doyle
Hi, I'm trying to understand if OVN supports SR-IOV. I found some OpentStack documentation: https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/wallaby/app-ovn.html#configuration that suggests it might, but it is short on details, with specifics abstracted via the OpenStack

Re: [ovs-discuss] [External] : Re: SR-IOV OVN OpenStack Mellanox

2022-02-15 Thread Brendan Doyle
://urldefense.com/v3/__https://docs.openstack.org/neutron/xena/admin/config-sriov.html__;!!ACWV5N9M2RV99hQ!eHoUiPE3yK4G7wru3NHOe4xZEY8JZCTBMzsMhhoNnkr7oZQDSf-4QrFyS4Y5t7g5lTU$ Tony From: discuss on behalf of Brendan Doyle Sent: February 15, 2022 07:10 AM To: Satish Patel

Re: [ovs-discuss] [External] : Re: SR-IOV OVN OpenStack Mellanox

2022-02-15 Thread Brendan Doyle
://docs.nvidia.com/networking/display/TAN10/ASAP*OVS*Offload__;Kys!!ACWV5N9M2RV99hQ!dFnukkvR8ggDcHotwyqXNVu8B3dWlc7LBGXbc5fECYqHdok6NIeoKkz5aSlp-RCKC10$ On Tue, Feb 15, 2022 at 5:47 AM Brendan Doyle wrote: Hi, I'm trying to understand if OVN supports SR-IOV. I found some OpentStack documentation: https

Re: [ovs-discuss] [External] : Re: reside-on-redirect-chassis and redirect-type

2022-02-28 Thread Brendan Doyle
On 20/02/2022 23:38, Han Zhou wrote: On Thu, Feb 17, 2022 at 3:23 AM Brendan Doyle wrote: > > Hi, > > So I have a Distributed Gateway Port (DGP) on a Gateway through which > VMs in the overlay can access > underlay networks. If the VM is not on the chassis where the

  1   2   >