[Yahoo-eng-team] [Bug 2060587] [NEW] [ML2][OVS] more precise flow table cleaning

2024-04-08 Thread LIU Yulong
Public bug reported: OVS-agent wants to clean flows table by table during restart, but actually it does not. [1] If one table has same cookie with other tables, all related flows will be clean at once. A bit radical in such style. [1]

[Yahoo-eng-team] [Bug 2052681] Re: Many stale neutron-keepalived-state-change processes left after upgrade to native pyroute2 state-change

2024-02-27 Thread LIU Yulong
** Changed in: neutron Status: Invalid => New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/2052681 Title: Many stale neutron-keepalived-state-change processes left after

[Yahoo-eng-team] [Bug 2052681] [NEW] Many stale neutron-keepalived-state-change processes left after upgrade to native pyroute2 state-change

2024-02-07 Thread LIU Yulong
Public bug reported: Needs a post-upgrade script to remove those stale "ip -o monitor" and traditional "neutron-keepalived-state-change" processes. ** Affects: neutron Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 2052367] [NEW] neutron-keepalived-state-change run neutron-rootwrap-daemon anyway regardless of config

2024-02-03 Thread LIU Yulong
Public bug reported: neutron-keepalived-state-change run neutron-rootwrap-daemon anyway regardless of config https://review.opendev.org/q/topic:%22bug/1680183%22 It is the series of patches which replace "ip -o monitor" to pyroute2 python native process. But we noticed that the

[Yahoo-eng-team] [Bug 2051863] Re: Race condition during VM creation - could not open network device tapXXX (No such device)

2024-02-01 Thread LIU Yulong
Looks more like a libvirt error, or nova side problem. Neutron does not take responsibilities to create the tap-XXX device. It is plugged by nova-compute. Need to find out why the tap device is not created before TC rules creating. ** Also affects: nova Importance: Undecided Status: New

[Yahoo-eng-team] [Bug 1847747] Re: [RPC] digging RPC timeout for client and server

2024-02-01 Thread LIU Yulong
** Changed in: neutron Status: New => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1847747 Title: [RPC] digging RPC timeout for client and server Status in neutron:

[Yahoo-eng-team] [Bug 2048979] [NEW] [ml2][ovs] ports without local vlan tag are processed on openflow security group

2024-01-10 Thread LIU Yulong
Public bug reported: We recently met an issue during VM live migration: 1. nova starts live migration 2. plug ports on new host 3. neutron-ovs-agent starts to process the port, but the port is in 'added' and 'updated' set at the same time. 4. because nova still not activate the destination port

[Yahoo-eng-team] [Bug 2047100] [NEW] Agent resource cache updates

2023-12-21 Thread LIU Yulong
Public bug reported: 1. Agent resource cache has an infinite growth set: _satisfied_server_queries https://github.com/openstack/neutron/blob/master/neutron/agent/resource_cache.py#L41 there is no entry removal for this set. 2. Because this set has a non-standard structure, for instance:

[Yahoo-eng-team] [Bug 2046510] [NEW] neutron-servers have high memory usage

2023-12-14 Thread LIU Yulong
Public bug reported: USERPID %CPU %MEMVSZ RSS TTY STAT START TIME COMMAND neutron 11686 6.8 7.3 29205516 28869568 ? SNov30 1438:32 /usr/bin/python2 /usr/bin/neutron-server --config-file /usr/share/neutron/neutron-dist.conf --config-dir /usr/share/neutron/server

[Yahoo-eng-team] [Bug 2043761] [NEW] Creating subnet for exsiting external network is time-comsuming

2023-11-16 Thread LIU Yulong
Public bug reported: If an external network has many router on it, then create a subnet will be time-consuming. Neutron will try to update all routers' external gateway ports anyway, ignore the subnet service_type. ** Affects: neutron Importance: Undecided Status: New -- You

[Yahoo-eng-team] [Bug 2042411] [NEW] [CI][Fullstack] neutron.tests.fullstack.test_securitygroup cases are missing

2023-11-01 Thread LIU Yulong
Public bug reported: For instance: neutron.tests.fullstack.test_securitygroup.TestSecurityGroupsSameNetwork.test_securitygroup https://f9c28e74a4e26f2c90e8-fa663b3b43bb6eacc0d3184a52007f13.ssl.cf5.rackcdn.com/888098/11/check/neutron- fullstack-with-uwsgi/e34e362/testr_results.html Code:

[Yahoo-eng-team] [Bug 2039553] [NEW] dhcp-agent can not interact with neutron-server after neutron-server restarted

2023-10-17 Thread LIU Yulong
Public bug reported: Recently we meet a strange issue between neutron-server and neutron- dhcp-agents. In a long run deployment, we just restart all neutron- servers, then we failed to boot VM. Yes, it is vif-plug-timeout!!! We noticed that the DHCP provisioningblock was not deleted. Our

[Yahoo-eng-team] [Bug 2039554] [NEW] dhcp-agent can not interact with neutron-server after neutron-server restarted

2023-10-17 Thread LIU Yulong
Public bug reported: Recently we meet a strange issue between neutron-server and neutron- dhcp-agents. In a long run deployment, we just restart all neutron- servers, then we failed to boot VM. Yes, it is vif-plug-timeout!!! We noticed that the DHCP provisioningblock was not deleted. Our

[Yahoo-eng-team] [Bug 2016198] [NEW] [L3][HA] race condition between first two router creations when tenant has no HA network

2023-04-13 Thread LIU Yulong
Public bug reported: When the tenant creates the first HA router-1, neutron will try to create HA network for this project. But during the HA network creation procedure, we assume it has 2 steps: (1) create HA network (2) create subnet for this HA network another router-2 creation API call is

[Yahoo-eng-team] [Bug 2016197] [NEW] [Open Discussion] neutron can create port from network which has no subnet

2023-04-13 Thread LIU Yulong
Public bug reported: # openstack network create test-network +---+--+ | Field | Value| +---+--+ | admin_state_up|

[Yahoo-eng-team] [Bug 2000046] [NEW] [ml2][ovs] port flows Unexpectedly deleted by arp_spoofing_protection

2022-12-18 Thread LIU Yulong
Public bug reported: Port arp_spoofing_protection will install flows like this: table=0, priority=9,in_port=2 actions=goto_table:25 table=25, priority=2,in_port=2,dl_src=fa:16:3e:54:f0:71 actions=goto_table:60 For network ports or port_security_enabled = False, those flows will be delete by

[Yahoo-eng-team] [Bug 1998751] [NEW] [L3][DVR][vlan] HA VRRP traffic flooding on physical bridges on compute nodes

2022-12-04 Thread LIU Yulong
Public bug reported: For L3 DVR of VLAN networks, the HA VRRP traffic flooding from vlan HA networks will be flooding on physical bridges on compute nodes forever. For compute nodes, the physical bridges can directly drop the multicast packets of CIDR "l3_ha_net_cidr". ** Affects: neutron

[Yahoo-eng-team] [Bug 1998749] [NEW] [L3][DVR][vlan] east-west traffic flooding on physical bridges

2022-12-04 Thread LIU Yulong
Public bug reported: For L3 DVR of VLAN networks, the east west traffic between router subnets will be flooding on the physical bridge. Assuming we have resources like this: 1. subnet-1 10.10.10.0/24 with gateway-1 10.10.10.1, mac-address-[01] 2. subnet-2 20.20.20.0/24 with gateway-2

[Yahoo-eng-team] [Bug 1990840] Re: Log Agent rpc_loop very noisy

2022-09-26 Thread LIU Yulong
*** This bug is a duplicate of bug 1988077 *** https://bugs.launchpad.net/bugs/1988077 ** Changed in: neutron Importance: Undecided => Wishlist ** Changed in: neutron Status: New => Opinion ** This bug has been marked a duplicate of bug 1988077 Noisy neutron-openvswitch-agent

[Yahoo-eng-team] [Bug 1964342] [NEW] [QoS][OvS] implement QoS bandwidth limitation by leveraging ovs meter

2022-03-09 Thread LIU Yulong
Public bug reported: We are going to implement packet rate limit on ovs bridge by using meter rules [1], at the same time, meter can also be used to limit the bandwidth. os-key(ryu) supports the rule types of OFPMF_KBPS [2]. And usually, some smart-NICs for ovs offloading will support offloading

[Yahoo-eng-team] [Bug 1961011] [NEW] [RFE][L3][OVS] use controller (ovs-agent) send (packet-out) RA to (VMs) ports

2022-02-15 Thread LIU Yulong
Public bug reported: Currently neutron l3 router will run radvd to send out RA packets about the ManagedFlag, LinkMTU and prefix of IPv6 subnet. But rememeber we have a distributed SDN controller, aka ovs-agent, which can do this work more naturally and gracefully. Current radvd config looks

[Yahoo-eng-team] [Bug 1952867] [NEW] [ml2][ovs] allow multiple physical networks map to one physical ovs bridge

2021-11-30 Thread LIU Yulong
Public bug reported: In real cloud production environment, there are many hosts, which can access external network, which may not. Some have enough NICs to work for different networks, while some are lack of NICs. For instance, an external network, provider:network_type is ``vlan``,

[Yahoo-eng-team] [Bug 1952567] [NEW] [ml2][ovs] ports tag are missing and flood on those

2021-11-28 Thread LIU Yulong
be related to these problems. ** Affects: neutron Importance: High Assignee: LIU Yulong (dragon889) Status: In Progress ** Changed in: neutron Importance: Undecided => High ** Changed in: neutron Status: New => In Progress ** Changed in: neutron Assignee: (unas

[Yahoo-eng-team] [Bug 1940226] [NEW] OVN related functional cases keep getting failed recently

2021-08-17 Thread LIU Yulong
Public bug reported: OVN related cases keep getting failed recently, examples: [1] https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_d0a/804378/3/check/neutron-functional-with-uwsgi/d0a39b4/testr_results.html [2]

[Yahoo-eng-team] [Bug 1938966] [NEW] [RFE] pps limitation on neutron ports for openvswitch agent

2021-08-04 Thread LIU Yulong
Public bug reported: Since neutron supports packet rate limit rule [1][2], it's time for us to support real pps limitation in agent side for neutron ports and IPs. So this RFE is for real pps limitation functionality. We are going to implement neutron port's pps limitation with ovs meter first.

[Yahoo-eng-team] [Bug 1937039] [NEW] dsvm-functional can not run due to some ovs/ovn commands not found

2021-07-21 Thread LIU Yulong
Public bug reported: The dsvm-functional test can not run even for those test cases not involved with OVN. $ tox -e dsvm-functional neutron.tests.functional.db.test_migrations.TestModelsMigrationsMysql dsvm-functional develop-inst-noop: /opt/stack/neutron dsvm-functional installed: ... ...

[Yahoo-eng-team] [Bug 1934948] [NEW] [RFE] refactor of L3 resources update procedure

2021-07-07 Thread LIU Yulong
Public bug reported: In the L3 meeting 2021-06-30, I mentioned this topic. https://meetings.opendev.org/meetings/neutron_l3/2021/neutron_l3.2021-06-30-14.00.log.html#l-28 Current L3 resources (floating IPs, router interface, router external gateway) processing procedure is a bit heavy, and

[Yahoo-eng-team] [Bug 1934646] [NEW] fullstack fails locally after several times run due to shared dhclient lease file

2021-07-05 Thread LIU Yulong
Public bug reported: Each cases are sharing the common lease path for dhclient, for instance, in CentOS it is: /var/lib/dhclient/dhclient.leases. That means all fullstack cases will use this file to store fake VM's NIC DHCP lease information. After run several times of fullstack cases, the

[Yahoo-eng-team] [Bug 1934466] [NEW] Devstack install for ML2 OVS

2021-07-02 Thread LIU Yulong
-conf ** Affects: neutron Importance: Undecided Assignee: LIU Yulong (dragon889) Status: In Progress ** Changed in: neutron Assignee: (unassigned) => LIU Yulong (dragon889) ** Changed in: neutron Status: New => In Progress -- You received this bug notifi

[Yahoo-eng-team] [Bug 1933222] [NEW] [RFE] Add distributed datapath for metadata

2021-06-22 Thread LIU Yulong
Public bug reported: When instances are booting, they will try to retrieve metadata from Nova by the path of Neutron virtual switches(bridges), virtual devices, namespaces and metadata-agents. After that, metadata agent has no other functionalities. In large-scale scenarios, a large number of

[Yahoo-eng-team] [Bug 1932483] [NEW] CI neutron.tests.functional.services.l3_router.test_l3_dvr get failed frequently

2021-06-18 Thread LIU Yulong
Public bug reported: These 4 cases get failed frequently neutron.tests.functional.services.l3_router.test_l3_dvr_ha_router_plugin.L3DvrHATestCase 1) test_agent_gw_port_delete_when_last_gateway_for_ext_net_removed 2) test_delete_agent_gw_port_for_network

[Yahoo-eng-team] [Bug 1931844] Re: Can't ping router with packet size greater than 1476 when ovs datapath_type set to netdev

2021-06-14 Thread LIU Yulong
"ovs datapath_type netdev" should only be used for VM, neutron router related virtual network devices are not compatible with it, [1] has those limitations. The only way you can run L3 routers with VMs (using DPDK) is to run l3-agents and ovs-agents in dedicated nodes with data patch type system,

[Yahoo-eng-team] [Bug 1811352] Re: [RFE] Include neutron CLI floatingip port-forwarding support

2021-06-11 Thread LIU Yulong
** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1811352 Title: [RFE] Include neutron CLI floatingip port-forwarding

[Yahoo-eng-team] [Bug 1930432] [NEW] [L2] provisioning_block should be added to Neutron internal service port? Or should not?

2021-06-01 Thread LIU Yulong
Public bug reported: provisioning_blocks are mostly used for compute port to notify that Neutron has done the networking settings, so VM can go power-on now. But now, Neutron does not check the port's device owner, it adds provisioning_block to all types of ports, even it is used by neutron. For

[Yahoo-eng-team] [Bug 1926109] [NEW] SSH timeout (wait timeout) due to potential paramiko issue

2021-04-25 Thread LIU Yulong
Public bug reported: Recently, nothing changed on the test case, but we got this failure: https://04a9f9fdd9afdf12de4e-f889a65b4dfb1f628c8309e9eb44b225.ssl.cf2.rackcdn.com/787304/5/check/neutron-tempest-plugin-scenario-openvswitch-iptables_hybrid/bb9e9a9/testr_results.html LOG: Traceback (most

[Yahoo-eng-team] [Bug 1925406] [NEW] [functional] run dsvm-functional locally will need ovn no matter the running cases are

2021-04-21 Thread LIU Yulong
Public bug reported: Code: neutron master Env: a new deployment by devstack $ tox -e dsvm-functional neutron.tests.functional.agent.test_firewall.FirewallTestCase.test_rule_ordering_correct = Failures during discovery = --- import errors ---

[Yahoo-eng-team] [Bug 1922653] [NEW] [L3][Port forwarding] multiple floating_ip:port to same internal fixed_ip:port (N-to-1 rule support)

2021-04-06 Thread LIU Yulong
Public bug reported: Floating ip port forwradings table has constraints: TABLE_NAME = 'portforwardings' op.create_unique_constraint( constraint_name=('uniq_port_forwardings0floatingip_id0' 'external_port0protocol'), table_name=TABLE_NAME,

[Yahoo-eng-team] [Bug 1917409] Re: neutron-l3-agents won't become active

2021-03-17 Thread LIU Yulong
*** This bug is a duplicate of bug 1883089 *** https://bugs.launchpad.net/bugs/1883089 ** This bug has been marked a duplicate of bug 1883089 [L3] floating IP failed to bind due to no agent gateway port(fip-ns) -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 1919107] [NEW] [L3][L2 pop] Is it necessary to enforce enabling the option arp_responder and l2_population?

2021-03-14 Thread LIU Yulong
Public bug reported: Recently I played the ovs-agent with bagpipe_bgpvpn. It has some mechanism which will install the same flows to br-tun by using BGP. But now arp_responder and l2_population are enforced, after this patch https://review.opendev.org/c/openstack/neutron/+/669938. ** Affects:

[Yahoo-eng-team] [Bug 1917409] Re: neutron-l3-agents won't become active

2021-03-10 Thread LIU Yulong
*** This bug is a duplicate of bug 1883089 *** https://bugs.launchpad.net/bugs/1883089 ** This bug has been marked a duplicate of bug 1883089 [L3] floating IP failed to bind due to no agent gateway port(fip-ns) -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 1752903] Re: Floating IPs should not allocate IPv6 addresses

2021-03-10 Thread LIU Yulong
Add service type [1] to your subnets of public network, then it will overcome the 'problem'. It's a bit complicated because there are some deployment and usage situations: 1. None DVR and IPv4 only (1) public network has only one subnet which is serving for floating IP and external gateways.

[Yahoo-eng-team] [Bug 1917393] [NEW] [L3][Port forwarding] admin state DOWN/UP router will lose all pf-floating-ips and nat rules

2021-03-01 Thread LIU Yulong
Public bug reported: Need to clean cache when router is down, otherwise the port forwarding extension will skip all objects processing due to cache is hitting. ** Affects: neutron Importance: High Status: Confirmed -- You received this bug notification because you are a member of

[Yahoo-eng-team] [Bug 1917279] Re: [L3][Port forwarding][DVR] failed to process floating ip port forwarding on 'legacy' mode L3 agent

2021-02-28 Thread LIU Yulong
For DVR router the snat node should be configured with "dvr_snat". For now, "legacy/ha router" can run on a "dvr_snat" node. But, DVR router can not run on "legacy" node, since the RouterInfo instance type is based on the agent mode [1]. [1]

[Yahoo-eng-team] [Bug 1917279] [NEW] [L3][Port forwarding][DVR] failed to process floating ip port forwarding on 'legacy' mode L3 agent

2021-02-28 Thread LIU Yulong
Public bug reported: Create dvr router on 'legacy' agent node, then we got AttributeError: 'DvrLocalRouter' object has no attribute 'snat_namespace'. ERROR LOG: .agent.l3.agent [-] Failed to process compatible router: b247f145-569a-4d5a-bdd8-31a5213641ea: AttributeError: 'DvrLocalRouter' object

[Yahoo-eng-team] [Bug 1916889] [NEW] StaleDataError: DELETE statement on table 'standardattributes' expected to delete 2 row(s); 1 were matched. Please set confirm_deleted_rows=False within the mapper

2021-02-25 Thread LIU Yulong
Public bug reported: Delete port failed with final DB error: Feb 25 19:24:34 devstack neutron-server[15279]: DEBUG neutron.api.rpc.handlers.l3_rpc [None req-a6ccb04c-401f-4e23-bc16-e7fc9cfc9ae6 None None] New status for floating IP f681d60c-edf9-41e9-b8b3-70c7cf3d8d42: ERROR {{(pid=15361)

[Yahoo-eng-team] [Bug 1916572] [NEW] neutron.tests.unit.common.test_utils.TestThrottler test_throttler is failing

2021-02-23 Thread LIU Yulong
bd488dcf6af- 941e362261845d27ff2c0dd3e3a521f3.ssl.cf1.rackcdn.com/773283/6/check /openstack-tox-py36/4e6fea3/testr_results.html Log search: http://logstash.openstack.org/#dashboard/file/logstash.json?query=message%3A%5C%22AssertionError%3A%201%20not%20greater%20than%201%5C%22 ** Affects: neutron

[Yahoo-eng-team] [Bug 1916332] [NEW] neutron-specs's zuul job openstack-tox-docs fails

2021-02-20 Thread LIU Yulong
Public bug reported: Examples: Build failed (check pipeline). For information on how to proceed, see https://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing openstack-tox-docs

[Yahoo-eng-team] [Bug 1732067] Re: openvswitch firewall flows cause flooding on integration bridge

2021-02-01 Thread LIU Yulong
** Changed in: neutron Status: In Progress => Fix Committed ** Changed in: neutron Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron.

[Yahoo-eng-team] [Bug 1913664] [NEW] [CI] neutron multinode jobs does not run neutron_tempest_plugin scenario cases

2021-01-28 Thread LIU Yulong
Public bug reported: This is the job neutron-tempest-plugin-scenario-openvswitch's cases: https://812aefd7f17477a1c0dc-8bc1c0202523f17b73621207314548bd.ssl.cf5.rackcdn.com/772255/6/check/neutron-tempest-plugin-scenario-openvswitch/5221232/testr_results.html This is

[Yahoo-eng-team] [Bug 1907175] Re: intermittently ALL VM's floating IP connection is disconnected, and can be reconnected after 5-6 minutes

2021-01-20 Thread LIU Yulong
** Changed in: neutron Status: New => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1907175 Title: intermittently ALL VM's floating IP connection is disconnected, and

[Yahoo-eng-team] [Bug 1912460] [NEW] [QoS] add qos rule type packet per second (pps)

2021-01-20 Thread LIU Yulong
Public bug reported: For cloud providers, to limit the packet per second (pps) of VM NIC is popular and sometimes essential. Transit large set packets for VM in physical compute hosts will consume the CPU/phy-nic performance. And for small packets, even the bandwidth is low, the pps can still be

[Yahoo-eng-team] [Bug 1911864] [NEW] [DHCP] AgentBinding for network will be created no matter the state

2021-01-15 Thread LIU Yulong
Public bug reported: Neutron creates N NetworkDhcpAgentBindings (N is equal to dhcp_agents_per_network) for network even if the subnets disabled the dhcp. This means no matter the DHCP state, the dhcp_scheduler will schedule the network anyway. Reproduce steps: $ source demo_rc $ openstack

[Yahoo-eng-team] [Bug 1911126] [NEW] [RFE][L3] add ability to control router SNAT more granularly

2021-01-12 Thread LIU Yulong
Public bug reported: Neutron router now supports SNAT when the attribute ``enable_snat`` of the gateway is set to True. This will enable all the VMs which has no binding floating IP to access the public world. But, generally the DataCenter bandwidths for cloud providers are not free. And some

[Yahoo-eng-team] [Bug 1906487] [NEW] [L2][scale] add a trunk size config option for bundle flow install

2020-12-02 Thread LIU Yulong
n the last 0 s (1000 adds) 2020-12-02T08:13:47.834Z|01322|connmgr|INFO|br-int<->unix#1334: 222 flow_mods in the last 0 s (222 adds) So we can say maybe we should increase the trunk (step) size for the ovs-ofctl bundle installaion. We do not want to add a fixed value because the vswitchd ma

[Yahoo-eng-team] [Bug 1906381] [NEW] [L2] current binding port get type errors

2020-12-01 Thread LIU Yulong
ding 2020-11-30 16:46:55.942 62088 ERROR oslo_messaging.rpc.server for level in levels: 2020-11-30 16:46:55.942 62088 ERROR oslo_messaging.rpc.server TypeError: 'NoneType' object is not iterable 2020-11-30 16:46:55.942 62088 ERROR oslo_messaging.rpc.server ** Affects: neutron Importance: Low

[Yahoo-eng-team] [Bug 1906375] [NEW] [L3] router HA port concurrently deleting

2020-12-01 Thread LIU Yulong
020-12-01 10:52:46.738 62077 ERROR oslo_messaging.rpc.server PortNotFound: Port 3f838c59-e84a-49de-a381-f3328d47a69f could not be found. 2020-12-01 10:52:46.738 62077 ERROR oslo_messaging.rpc.server 2020-12-01 10:53:03.921 62076 ERROR oslo_messaging.rpc.server [req-3822c366-0cb7-46c3-ad6b-b50081

[Yahoo-eng-team] [Bug 1896563] Re: Floating IP port forwarding rule update external_ Port, HTTP return code 500 error

2020-10-26 Thread LIU Yulong
Neutron had covered such issue [1][2][3]. [1] https://github.com/openstack/neutron/blob/master/neutron/services/portforwarding/pf_plugin.py#L433-L439 [2]

[Yahoo-eng-team] [Bug 1900934] [NEW] [RFE][DHCP][OVS] flow based DHCP

2020-10-21 Thread LIU Yulong
Public bug reported: Add a new ovs agent extension to support fully distributed DHCP for VMs in compute nodes, especially for large scale cloud. We had some disscussions during Shanghai PTG: https://etherpad.opendev.org/p/Shanghai-Neutron-Planning-restored

[Yahoo-eng-team] [Bug 1897423] [NEW] [L3] Let agent extension do delete router first

2020-09-26 Thread LIU Yulong
Public bug reported: For some agent extension implementation, it may need the router_info to do some clean up work. So the L3 agent extensions(s) can move the delete action ahead of the L3 agent cache deleting. ** Affects: neutron Importance: Low Assignee: LIU Yulong (dragon889

[Yahoo-eng-team] [Bug 1895950] Re: keepalived can't perform failover if the l3 agent is down

2020-09-23 Thread LIU Yulong
OK, let's mark this as "Won't Fix". And move to state change can be a way to new install envrionment. But for running could, the existing keepalived-state-change processes may need to re-create. ** Changed in: neutron Status: New => Won't Fix -- You received this bug notification because

[Yahoo-eng-team] [Bug 1895401] [NEW] [L3][IPv6][DVR] missing address scope mark for IPv6 traffic

2020-09-12 Thread LIU Yulong
** Affects: neutron Importance: Low Assignee: LIU Yulong (dragon889) Status: In Progress ** Changed in: neutron Importance: Undecided => Low ** Changed in: neutron Status: New => In Progress -- You received this bug notification because you are a member of

[Yahoo-eng-team] [Bug 1891448] [NEW] [RFE] l3 agent mode transition between dvr and dvr_no_external

2020-08-13 Thread LIU Yulong
Public bug reported: For now if the L3 agent change the agent mode (dvr to dvr_no_external, or dvr_no_external to dvr), the floating IP traffic will not recover. There is a mannully workflow to achive the transition, but it will need to shutdown the router during the transition. The backwards is

[Yahoo-eng-team] [Bug 1888121] Re: L3 agent fails to update routers with onlink gateway

2020-07-20 Thread LIU Yulong
*** This bug is a duplicate of bug 1861674 *** https://bugs.launchpad.net/bugs/1861674 ** Changed in: neutron Status: New => Incomplete ** Changed in: neutron Status: Incomplete => Confirmed ** This bug has been marked a duplicate of bug 1861674 Gateway which is not in

[Yahoo-eng-team] [Bug 1883089] [NEW] [L3] floating IP failed to bind due to no agent gateway port(fip-ns)

2020-06-11 Thread LIU Yulong
ort.get('fixed_ips', []) 2020-06-11 15:39:28.391 1285214 ERROR oslo_messaging.rpc.server AttributeError: 'NoneType' object has no attribute 'get' 2020-06-11 15:39:28.391 1285214 ERROR oslo_messaging.rpc.server ** Affects: neutron Importance: Medium Assignee: LIU Yulong (dragon889)

[Yahoo-eng-team] [Bug 1880657] [NEW] [openstack][net] static subnet type does not work

2020-05-26 Thread LIU Yulong
Public bug reported: commit 62bbc262c3c7f633eac1d09ec78c055eef05166a changes the default code branch condition which breaks the existing cloud static network config. [1] https://github.com/canonical/cloud-init/commit/62bbc262c3c7f633eac1d09ec78c055eef05166a#r39437585 ** Affects: cloud-init

[Yahoo-eng-team] [Bug 1879215] [NEW] [L3] Unexcepted HA router scheduled instance shows up after manully scheduling

2020-05-17 Thread LIU Yulong
Public bug reported: ENV: stable/queens, but master branch basically has the same code. Unexcepted HA router scheduled instance shows up after manully scheduling and admin-state down/up. Step to reproduce: $ openstack network agent list --router c0f96d58-5521-40fa-9536-205635facc69 --long

[Yahoo-eng-team] [Bug 1871850] [NEW] [L3] existing router resources are partial deleted unexceptedly when MQ is gone

2020-04-09 Thread LIU Yulong
Public bug reported: ENV: meet this issue on our stable/queens deployment, but master branch has the same code logic When the L3 agent get a router update notification, it will try to retrieve the router info from DB server [1]. But at this time, if the message queue is down/unreachable. It will

[Yahoo-eng-team] [Bug 1871730] [NEW] [OVN] local conf devstack for a ovn-northd (DB only) node does not work

2020-04-08 Thread LIU Yulong
Public bug reported: Code branch: master Assuming you have 5 nodes to run a multi-node devstack deployment with neutron and OVN. One node for "ovn-northd" DB only. Two chassis for compute, and two for gateway. For the DB only node, if you do not set "ovn-controller" to the enable_services

[Yahoo-eng-team] [Bug 1867119] Re: [security] Add allowed-address-pair 0.0.0.0/0 to one port will open all others' protocol under same security group

2020-03-12 Thread LIU Yulong
** This bug is no longer a duplicate of bug 1793029 adding 0.0.0.0/0 address pair to a port bypasses all other vm security groups -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron.

[Yahoo-eng-team] [Bug 1867119] [NEW] [security] Add allowed-address-pair 0.0.0.0/0 to one port will open all others' protocol under same security group

2020-03-12 Thread LIU Yulong
Public bug reported: [security] Add allowed-address-pair 0.0.0.0/0 to one port will open all others' protocol under same security group When add allowed-address-pair 0.0.0.0/0 to one port, it will unexpectedly open all others' protocol under same security group. First found in stable/queens,

[Yahoo-eng-team] [Bug 1867101] [NEW] Deployment has security group with empty tenant id

2020-03-12 Thread LIU Yulong
Public bug reported: ENV: devstack, master $ openstack security group list +--+-++--+--+ | ID | Name| Description| Project

[Yahoo-eng-team] [Bug 1866445] Re: br-int bridge in one compute can't learn MAC addresses of VMs in other compute nodes

2020-03-11 Thread LIU Yulong
** This bug is no longer a duplicate of bug 1732067 openvswitch firewall flows cause flooding on integration bridge -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1866445 Title:

[Yahoo-eng-team] [Bug 1866077] [NEW] [L3][IPv6] IPv6 traffic with DVR in compute host

2020-03-04 Thread LIU Yulong
Public bug reported: One question: how to let the IPv6 traffic to the outside world run directly in the compute host? We have a BP before: https://blueprints.launchpad.net/neutron/+spec/ipv6-router-and-dvr And one spec for it: https://review.opendev.org/#/c/136878/ ** Affects: neutron

[Yahoo-eng-team] [Bug 1863830] [NEW] Testing ERROR: "Exit code: 2; Stdin: ; Stdout: ; Stderr: Ncat: Invalid -w timeout (must be greater than 0). QUITTING."

2020-02-18 Thread LIU Yulong
Public bug reported: Branch: neutron master, HEAD: commit 7a0e5185c6cf7b5f8bcfe50576e86798947a7ba7 Exception: File "/home/yulong/github/neutron/neutron/agent/l3/dvr_edge_router.py", line 160, in initialize self._create_snat_namespace() File

[Yahoo-eng-team] [Bug 1858262] Re: "CREATE TABLE ovn_hash_ring" Specified key was too long; max key length is 767 bytes

2020-01-06 Thread LIU Yulong
** Changed in: neutron Status: Invalid => New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1858262 Title: "CREATE TABLE ovn_hash_ring" Specified key was too long; max key

[Yahoo-eng-team] [Bug 1858262] Re: "CREATE TABLE ovn_hash_ring" Specified key was too long; max key length is 767 bytes

2020-01-04 Thread LIU Yulong
** Changed in: neutron Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1858262 Title: "CREATE TABLE ovn_hash_ring" Specified key was too long; max key

[Yahoo-eng-team] [Bug 1858262] [NEW] "CREATE TABLE ovn_hash_ring" Specified key was too long; max key length is 767 bytes

2020-01-04 Thread LIU Yulong
Public bug reported: During the DB upgrading of neutron, the following error raised: CREATE TABLE ovn_hash_ring ( node_uuid VARCHAR(36) NOT NULL, group_name VARCHAR(256) NOT NULL, hostname VARCHAR(256) NOT NULL, created_at DATETIME NOT NULL, updated_at

[Yahoo-eng-team] [Bug 1858260] [NEW] Upstream CI neutron-tempest-plugin-* fails

2020-01-03 Thread LIU Yulong
Public bug reported: neutron-tempest-plugin-dvr-multinode-scenario FAILURE in 1h 22m 34s (non-voting) neutron-tempest-plugin-scenario-linuxbridge FAILURE in 1h 01m 47s neutron-tempest-plugin-scenario-openvswitch FAILURE in 1h 02m 16s

[Yahoo-eng-team] [Bug 1856839] [NEW] [L3] router processing time increase if there are large large set ports

2019-12-18 Thread LIU Yulong
/blob/master/neutron/agent/l3/dvr_local_router.py#L260 ** Affects: neutron Importance: Medium Assignee: LIU Yulong (dragon889) Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launch

[Yahoo-eng-team] [Bug 1840979] Re: [L2] update the port DB status directly in agent-side

2019-12-14 Thread LIU Yulong
** Changed in: neutron Assignee: (unassigned) => LIU Yulong (dragon889) ** Changed in: neutron Status: Won't Fix => New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1

[Yahoo-eng-team] [Bug 1854051] [NEW] py36 unit test cases fails

2019-11-26 Thread LIU Yulong
Public bug reported: This should be a NOTE, not a bug in case someone who meets this issue someday, since the minimum support python version of neutron is 3.7 now. Branch: master heads: 2a8b70d Merge "Update security group rule if port range is all ports" fd5e292 Merge "Remove neutron-grenade

[Yahoo-eng-team] [Bug 1850779] [NEW] [L3] snat-ns will be initialized twice for DVR+HA routers during agent restart

2019-10-31 Thread LIU Yulong
Public bug reported: If the DVR+HA router has external gateway, the snat-namespace will be initialized twice during agent restart. And that initialized function will run many [1][2] external resource processing actions which will definitely increase the starting time of agent.

[Yahoo-eng-team] [Bug 1849510] [NEW] Multiple IPv6 subnets with SLAAC

2019-10-23 Thread LIU Yulong
Public bug reported: For one network with multiple slaac IPv6 subnets, the created port will have all IPv6 subnets address automatically by default. For some use case, we do not want the port to have all the IPv6 address from all IPv6 subnets, but only one of it. It is a behavior for neutron

[Yahoo-eng-team] [Bug 1847747] [NEW] [RPC] digging RPC timeout for client and server

2019-10-11 Thread LIU Yulong
Public bug reported: RPC timeout can be found frequently, but we have no statistical data for it. A simple log can help. Since all the projects are using oslo.messaging as midlware between services and message queue, we can add a log in it, something like this, a local test: 2019-10-11

[Yahoo-eng-team] [Bug 1845145] [NEW] [L3] add abilitiy for iptables_manager to ensure rule was added only once

2019-09-24 Thread LIU Yulong
Assignee: LIU Yulong (dragon889) Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1845145 Title: [L3] add abilitiy for iptables_manager to ensure rule was added

[Yahoo-eng-team] [Bug 1844168] [NEW] [L3] TooManyExternalNetworks: More than one external network exists.

2019-09-16 Thread LIU Yulong
Public bug reported: Code: master with nothing changed. Exception: Sep 17 00:41:16 controller neutron-server[10222]: ERROR oslo_messaging.rpc.server [None req-9b3e8e62-b6b3-4506-8950-f73c3e5e2be3 None None] Exception during message handling: TooManyExternalNetworks: More than one external

[Yahoo-eng-team] [Bug 1841865] [NEW] [L2] stop processing ports twice in ovs-agent

2019-08-28 Thread LIU Yulong
Public bug reported: When port installed to the agent, it will be processed in rpc_loop X as "added". In next X + 1 rpc_loop, it will be processed again as "updated". This is unnecessary. And it can highly probably increase the processing time of new "added" ports in this X+1 loop. We have do

[Yahoo-eng-team] [Bug 1841622] [NEW] [L2][OVS] add accepted egress fdb flows

2019-08-27 Thread LIU Yulong
Public bug reported: Bug https://bugs.launchpad.net/neutron/+bug/1732067 has a bad impact on VM traffic. And all the fix has some potenial risk of data-plane down. So we added a new bug for the new solution: It will add a flow table something like a switch FDB table. The accepted egress flows

[Yahoo-eng-team] [Bug 1840979] [NEW] [L2] [opinion] update the port DB status directly in agent-side

2019-08-21 Thread LIU Yulong
Public bug reported: When ovs-agent done processing the port, it will call neutron-server to make some DB update. Especially when restart the ovs-agent, all ports in one agent will do such RPC and DB update again to make port status consistent. When a large number of concurrent agent restart

[Yahoo-eng-team] [Bug 1840737] Re: Neutron create IPv6 subnet error. Gateway is not valid on subnet.

2019-08-20 Thread LIU Yulong
A really old neutron version. But anyway, IMO, you met this bug: https://bugs.launchpad.net/neutron/+bug/1682094 This is the error comes from: https://github.com/openstack/neutron/blob/master/neutron/db/db_base_plugin_v2.py#L611-L616 According to the exception, I did the following tests: >>> ip

[Yahoo-eng-team] [Bug 1838431] [NEW] [scale issue] ovs-agent port processing time increases linearly and eventually timeouts

2019-07-30 Thread LIU Yulong
Public bug reported: ENV: stable/queens But master has basically same code, so the issue may also exist. Config: L2 ovs-agent with enabled openflow based security group. Recently I run one extreme test locally, booting 2700 instances for one single tenant. The instance will be booted in 2000

[Yahoo-eng-team] [Bug 1835663] [NEW] Some L3 RPCs are time-consuming especially get_routers

2019-07-07 Thread LIU Yulong
Public bug reported: Examples: http://logs.openstack.org/11/669111/4/check/neutron-tempest-plugin-dvr-multinode-scenario/dc3af26/controller/logs/screen-q-l3.txt.gz#_Jul_07_04_18_11_791730

[Yahoo-eng-team] [Bug 1830014] Re: [RFE] add API for neutron debug tool "probe"

2019-07-02 Thread LIU Yulong
** Changed in: neutron Assignee: (unassigned) => LIU Yulong (dragon889) ** Changed in: neutron Status: Opinion => New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1

[Yahoo-eng-team] [Bug 1834308] [NEW] [DVR][DB] too many slow query during agent restart

2019-06-26 Thread LIU Yulong
Public bug reported: ENV: stable/queens In a large scale cloud deployment, when restart neutron agent, especially l3 agents, neutron server side will trigger too many slow DB query. And this will cause the agent restart time to be too long to operate. ** Affects: neutron Importance: Medium

[Yahoo-eng-team] [Bug 1832968] [NEW] neutron test fails 100% due to abandoned ubuntu image release

2019-06-15 Thread LIU Yulong
/neutron-tempest-plugin/blob/master/.zuul.yaml#L395 https://github.com/openstack/neutron-tempest-plugin/blob/master/.zuul.yaml#L510 ** Affects: neutron Importance: Critical Assignee: LIU Yulong (dragon889) Status: In Progress -- You received this bug notification because you

[Yahoo-eng-team] [Bug 1491317] Re: [RFE] Add TCP/UDP port forwarding extension to L3

2019-06-14 Thread LIU Yulong
** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1491317 Title: [RFE] Add TCP/UDP port forwarding extension to L3 Status

[Yahoo-eng-team] [Bug 1832745] [NEW] _update_network_segmentation_id KeyError: 'provider:network_type'

2019-06-13 Thread LIU Yulong
Public bug reported: ENV: master Exception: Jun 14 00:51:28 network2 neutron-openvswitch-agent[10081]: ERROR neutron_lib.callbacks.manager [None req-1c6689ba-8524-4f93-9387-d5bcce5101dd None None] Error during notification for

[Yahoo-eng-team] [Bug 1832743] [NEW] delete_dvr_dst_mac_for_arp uses wrong table id

2019-06-13 Thread LIU Yulong
twork2 neutron-openvswitch-agent[8378]: ERROR neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent TypeError: 'int' object is not iterable Jun 14 00:30:49 network2 neutron-openvswitch-agent[8378]: ERROR neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent ** Affects: neutron

[Yahoo-eng-team] [Bug 1831534] [NEW] [l3][dvr] with openflow security group east-west traffic between different vlan networks is broken

2019-06-03 Thread LIU Yulong
Public bug reported: ENV: stable/queens & master This is a long story long time ago [1] [2] [3]. But we recently meet such issue, when dvr router is connected to two different vlan networks, the east-west traffic is not reachable. # ovs-ofctl show br-int 1(int-br-ex): addr:22:32:17:d4:08:6a

[Yahoo-eng-team] [Bug 1830014] Re: [RFE] add API for neutron debug tool "probe"

2019-05-29 Thread LIU Yulong
** Changed in: neutron Status: New => Opinion -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1830014 Title: [RFE] add API for neutron debug tool "probe" Status in neutron:

  1   2   3   >