On a focal-ussuri deployment, performing the steps as described in the
Test Case I can see before adding the security groups:
$ ping -c 3 10.78.95.92
PING 10.78.95.92 (10.78.95.92) 56(84) bytes of data.
64 bytes from 10.78.95.92: icmp_seq=1 ttl=63 time=2.63 ms
64 bytes from 10.78.95.92: icmp_seq=2 ttl=63 time=1.61 ms
64 bytes from 10.78.95.92: icmp_seq=3 ttl=63 time=0.906 ms
--- 10.78.95.92 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 0.906/1.714/2.630/0.707 ms
After adding the security groups I can see the NXBAC_BAD_CONJUNCTION messages
in /var/log/ovn/ovn-controller.log:
2021-02-16T09:46:10.520Z|00017|ofp_actions|WARN|"conjunction" actions may be
used along with "note" but not any other kind of action (such as the "resubmit"
action used here)
2021-02-16T09:46:10.520Z|00018|ofctrl|INFO|OpenFlow error: OFPT_ERROR (OF1.3)
(xid=0x19f): NXBAC_BAD_CONJUNCTION
OFPT_FLOW_MOD (OF1.3) (xid=0x19f): ***decode error: NXBAC_BAD_CONJUNCTION***
00000000 04 0e 00 c0 00 00 01 9f-00 00 00 00 a2 7f ee 59 |...............Y|
00000010 00 00 00 00 00 00 00 00-2c 00 00 00 00 00 07 d2 |........,.......|
00000020 ff ff ff ff ff ff ff ff-ff ff ff ff 00 00 00 00 |................|
00000030 00 01 00 53 80 00 0a 02-08 00 80 00 14 01 01 00 |...S............|
00000040 01 1e 04 00 00 00 03 00-01 d3 08 00 00 00 22 00 |..............".|
00000050 00 00 2b 00 01 d9 20 00-00 00 00 00 00 00 00 00 |..+... .........|
00000060 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 |................|
00000070 00 00 00 00 00 00 01 80-00 04 08 00 00 00 00 00 |................|
00000080 00 00 03 00 00 00 00 00-00 04 00 38 00 00 00 00 |...........8....|
00000090 ff ff 00 10 00 00 23 20-00 0e ff f8 2d 00 00 00 |......# ....-...|
000000a0 ff ff 00 10 00 00 23 20-00 22 01 02 00 00 00 05 |......# ."......|
000000b0 ff ff 00 10 00 00 23 20-00 22 01 02 00 00 00 0d |......# ."......|
And connectivity to the server is impacted:
$ ping -c 3 10.78.95.92
PING 10.78.95.92 (10.78.95.92) 56(84) bytes of data.
64 bytes from 10.78.95.92: icmp_seq=1 ttl=63 time=3.62 ms
64 bytes from 10.78.95.92: icmp_seq=3 ttl=63 time=1.09 ms
--- 10.78.95.92 ping statistics ---
3 packets transmitted, 2 received, 33.3333% packet loss, time 2004ms
rtt min/avg/max/mdev = 1.085/2.352/3.619/1.267 ms
Installing the ovn packages from -proposed removes the messages from the
log and connectivity is restored:
$ ping -c 3 10.78.95.92
PING 10.78.95.92 (10.78.95.92) 56(84) bytes of data.
64 bytes from 10.78.95.92: icmp_seq=1 ttl=63 time=2.38 ms
64 bytes from 10.78.95.92: icmp_seq=2 ttl=63 time=1.34 ms
64 bytes from 10.78.95.92: icmp_seq=3 ttl=63 time=0.765 ms
--- 10.78.95.92 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 0.765/1.494/2.381/0.668 ms
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.2 LTS
Release: 20.04
Codename: focal
$ dpkg -l | grep ovn
ii neutron-ovn-metadata-agent 2:16.2.0-0ubuntu2
all Neutron is a virtual network service for Openstack -
OVN metadata agent
ii ovn-common 20.03.1-0ubuntu1.2
amd64 OVN common components
ii ovn-host 20.03.1-0ubuntu1.2
amd64 OVN host components
** Tags removed: verification-needed-focal
** Tags added: verification-done-focal
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1906922
Title:
Unpredictable behaviour on conflicting flow actions
To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1906922/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
