[ovs-discuss] [ovn] Duplicated ARP replies from all gateway chassis when sending ARP who-has for IP address of the gateway port

2020-09-11 Thread Krzysztof Klimonda
Hi, I'm testing openstack ussuri deployment with ovn ml2 driver (versions at the end of the email) and seeing an unexpected behavior when sending ARP requests. for IP address of the gateway port configured on the router. from "outside" of OVN network: when I attach a subnet to the router, and

Re: [ovs-discuss] [OVN] Too many resubmits for packets coming from "external" network

2020-09-29 Thread Krzysztof Klimonda
On Tue, Sep 29, 2020, at 10:40, Dumitru Ceara wrote: > On 9/29/20 12:42 AM, Krzysztof Klimonda wrote: > > Hi Dumitru, > > > > This cluster is IPv4-only for now - there are no IPv6 networks defined at > > all - overlay or underlay. > > > > However, once

Re: [ovs-discuss] [OVN] Too many resubmits for packets coming from "external" network

2020-09-29 Thread Krzysztof Klimonda
On Tue, Sep 29, 2020, at 12:40, Dumitru Ceara wrote: > On 9/29/20 12:14 PM, Daniel Alvarez Sanchez wrote: > > > > > > On Tue, Sep 29, 2020 at 11:14 AM Krzysztof Klimonda > > > <mailto:kklimo...@syntaxhighlighted.com>> wrote: > > > >

[ovs-discuss] [OVN] Too many resubmits for packets coming from "external" network

2020-09-28 Thread Krzysztof Klimonda
eview.opendev.org/#/c/752678/ -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] [OVN] Too many resubmits for packets coming from "external" network

2020-09-28 Thread Krzysztof Klimonda
n general? I think all this network is used for is SNAT and/or SNAT+DNAT for overlay networks. -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com On Mon, Sep 28, 2020, at 21:14, Dumitru Ceara wrote: > On 9/28/20 5:33 PM, Krzysztof Klimonda wrote: > > Hi, > > > >

[ovs-discuss] [ovn] TCP/UDP traffic dropped between IP addresses defined in allowed address pairs when remote security group is used

2020-12-14 Thread Krzysztof Klimonda
mp; ip4.src == 172.16.0.0/24 && tcp), priority 2002, uuid a0871ca2 next; 9. ls_out_port_sec_ip (ovn-northd.c:4525): outport == "864929" && eth.dst == fa:16:3e:bc:20:10 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 10.0.0.10, 172.16.0.0/16}, priority 90, uui

Re: [ovs-discuss] [ovn] TCP/UDP traffic dropped between IP addresses defined in allowed address pairs when remote security group is used

2020-12-14 Thread Krzysztof Klimonda
--ingress --protocol tcp --remote-ip 172.16.0.0/24 default` -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com On Mon, Dec 14, 2020, at 14:14, Numan Siddique wrote: > On Mon, Dec 14, 2020 at 4:01 PM Krzysztof Klimonda > wrote: > > > > Hi, > > > > After upg

Re: [ovs-discuss] [ovn] TCP/UDP traffic dropped between IP addresses defined in allowed address pairs when remote security group is used

2020-12-15 Thread Krzysztof Klimonda
Hi Flavio, Dumitru See inline for replies On Tue, Dec 15, 2020, at 12:37, Flavio Fernandes wrote: > > >> On Dec 15, 2020, at 6:20 AM, Dumitru Ceara wrote: >> >> On 12/15/20 12:02 PM, Krzysztof Klimonda wrote: >>> Hi Dumitru, >>> >>> Thanks

Re: [ovs-discuss] [ovn] TCP/UDP traffic dropped between IP addresses defined in allowed address pairs when remote security group is used

2020-12-15 Thread Krzysztof Klimonda
entirely convinced that's the case given that ICMP traffic is being forwarded - I see how it's doing what programmed flows are telling it to do, but that doesn't seem to be expected result. Best Regards, Chris > > Thanks, > Dumitru > > > On 12/14/20 4:43 PM, Krzysztof Kli

Re: [ovs-discuss] [ovn] Broken ovs localport flow for ovnmeta namespaces created by neutron

2020-12-15 Thread Krzysztof Klimonda
Fri, Nov 20, 2020 at 1:17 PM Krzysztof Klimonda > wrote: >> Hi, >> >> Doing some tempest runs on our pre-prod environment (stable/ussuri with ovn >> 20.06.2 release) I've noticed that some network connectivity tests were >> failing randomly. I'

[ovs-discuss] [ovn] Broken ovs localport flow for ovnmeta namespaces created by neutron

2020-11-20 Thread Krzysztof Klimonda
4 modifications) 8<8<8< Once I restart ovn-controller it recalculates local ovs flows and the problem is fixed so I'm assuming it's a local problem and not related to NB and SB databases. -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com __

[ovs-discuss] [ovs] Adding tagged interfaces to ovs-system managed interface in the system configuration.

2021-06-22 Thread Krzysztof Klimonda
to the management interface even if vswitchd is down). This seems to be working fine in my lab (there is access to the management interface - vlan10 - even when bond0 has ovs-system as master), but are there any drawbacks to such a configuration? -- Krzysztof Klimonda kklimo

Re: [ovs-discuss] [ovs] Adding tagged interfaces to ovs-system managed interface in the system configuration.

2021-06-24 Thread Krzysztof Klimonda
9PM +0200, Krzysztof Klimonda wrote: > > Hi, > > > > I have tried the following configuration for the system-level network in > > the lab: > > > > > >

Re: [ovs-discuss] [ovs] Adding tagged interfaces to ovs-system managed interface in the system configuration.

2021-06-29 Thread Krzysztof Klimonda
works at all, especially when vswitchd is turned off. Best Regards, Krzysztof On Tue, Jun 29, 2021, at 18:03, Ben Pfaff wrote: > Any use of OVS will bring down the network if vswitch fails. > > On Mon, Jun 28, 2021 at 03:26:00PM +0200, Krzysztof Klimonda wrote: > > Hi, > &

Re: [ovs-discuss] [ovs] Adding tagged interfaces to ovs-system managed interface in the system configuration.

2021-06-28 Thread Krzysztof Klimonda
, Krzysztof On Fri, Jun 25, 2021, at 01:49, Ben Pfaff wrote: > Linux bonds and OVS bridges don't necessarily mix well. > > On Thu, Jun 24, 2021 at 10:25:58AM +0200, Krzysztof Klimonda wrote: > > Hi, > > > > I had a configuration like that in mind: > > > > # ip lin

[ovs-discuss] [ovn] hardware offload status - supported NICs

2021-03-11 Thread Krzysztof Klimonda
better support, it would be good to know that too. -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] BGP EVPN support

2021-03-16 Thread Krzysztof Klimonda
, for hypervisor to not have a direct access to overlay networks which seems to be the case when you use rules like that). -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com On Tue, Mar 16, 2021, at 13:56, Luis Tomas Bolivar wrote: > Hi Krzysztof, > > On Tue, Mar 16, 2021 at

[ovs-discuss] [OVN] random BFD timeouts between chassis

2021-03-16 Thread Krzysztof Klimonda
nowhere enough to stop it from processing other packets (ovs-vswitchd logs don't report increased CPU usage). openvswitch version: 2.11.0 ovn version: 20.09.90 (a build from 20.09 branch from 2020.12.07) -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com

Re: [ovs-discuss] BGP EVPN support

2021-03-16 Thread Krzysztof Klimonda
hat flows are needed to handle that properly). I guess someone with OVS internals knowledge would have to chime in on this one. > Thanks for your input! Really appreciated! > > Cheers, > Luis > > On Tue, Mar 16, 2021 at 2:22 PM Krzysztof Klimonda > wrote: >> __ >>

Re: [ovs-discuss] BGP EVPN support

2021-03-16 Thread Krzysztof Klimonda
- is this current design or just an artifact of PoC code? -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com On Mon, Mar 15, 2021, at 11:29, Luis Tomas Bolivar wrote: > Hi Sergey, all, > > In fact we are working on a solution based on FRR where a (python) agent > reads from OVN

Re: [ovs-discuss] BGP EVPN support

2021-03-16 Thread Krzysztof Klimonda
to redirect the traffic to br-ex. > > > > Thanks for your input! Really appreciated! > > > > Cheers, > > Luis > > > > On Tue, Mar 16, 2021 at 2:22 PM Krzysztof Klimonda > > wrote: > >> __ > >> Would it make more sense to reverse th

Re: [ovs-discuss] BGP EVPN support

2021-03-16 Thread Krzysztof Klimonda
On Tue, Mar 16, 2021, at 19:15, Mark Gray wrote: > On 16/03/2021 15:41, Krzysztof Klimonda wrote: > > Yes, that seems to be prerequisite (or one of prerequisites) for keeping > > current DPDK / offload capabilities, as far as I understand. By Proxy > > ARP/NDP I thin

Re: [ovs-discuss] [ovn] recommended upgrade/restart procedure for ovn components

2021-08-18 Thread Krzysztof Klimonda
Hi Numan, On Wed, Aug 18, 2021, at 17:42, Numan Siddique wrote: > On Wed, Aug 18, 2021 at 3:55 AM Krzysztof Klimonda > wrote: > > > > Hi, > > > > After reading OVN upgrade documentation[1], my understanding is that the > > order of upgrading components is pre

[ovs-discuss] [ovn] Constant "Claiming virtual lport [uuid] for this chassis with the virtual parent [uuid]

2021-08-17 Thread Krzysztof Klimonda
time (on vrrp failover for example). Regards, Krzysztof -- Krzysztof Klimonda kklimo...@syntaxhighlighted.com ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] [ovn] recommended upgrade/restart procedure for ovn components

2021-08-18 Thread Krzysztof Klimonda
about crashes and high memory usage). When running scale tests for ovn with kubernetes with hundreds of nodes, how are cluster upgrades handled? Regards, Krzysztof [1] https://docs.ovn.org/en/latest/intro/install/ovn-upgrades.html -- Krzysztof Klimonda kklimo...@syntaxh

Re: [ovs-discuss] OVN /OVS openvswitch: ovs-system: deferred action limit reached, drop recirc action

2021-08-02 Thread Krzysztof Klimonda
; > disc...@openvswitch.org > > https://mail.openvswitch.org/mailman/listinfo/ovs-discuss > > Hi Syed, > > Could you check if you have routing loops (i.e. a packet being routed > back and forth between logical routers infinitely) in your logical > topology? > >

Re: [ovs-discuss] OVN /OVS openvswitch: ovs-system: deferred action limit reached, drop recirc action

2021-08-04 Thread Krzysztof Klimonda
; On Tue, Aug 3, 2021 at 6:39 PM Ammad Syed wrote: > > Thanks. Let me try to reproduce it with this way. > > > > Can you please advise if this will cause any trouble if we have this bug in > > production? Any workaround to avoid this issue? > > > > Ammad &

[ovs-discuss] [ovn] distributed traffic for routers without snat with traffic going through intermediate router

2021-12-06 Thread Krzysztof Klimonda
is not distributed - instead all traffic is centralized on the gateway chassis node that is assigned to the LAN router. It feels like it should work and it's either a bug in my setup, or omission in ovn code, where it can't tell that the traffic could be decentralized. -- Krzysztof Klimonda kklimo