On 8/19/20 9:41 AM, num...@ovn.org wrote: > From: Numan Siddique <num...@ovn.org> > > Routing for external logical ports is broken if these ports belonged > to bridged logical switches (with localnet port) and > 'ovn-chassis-mac-mappings' > is configured. External logical ports are those which are external to OVN, > but there is a logical port for it and it is claimed by one of the HA chassis. > The claimed chassis provides routing and other native OVN serices like dhcp > and dns. > > When the external port sends ARP request for the router IP, the claimed > chassis > replies for the ARP request, but the arp.sha is set to the actual router mac > instead > of the chassis mac. This causes the traffic from external port VM/container > to be handled > incorrectly. A ping to the router ip, is replied by all the chassis which can > see this > packet instead of just the claimed HA chassis. > > This patch fixes this issue by adding a logical flow to drop any packet from > the external > ports destined to the router port mac on all the chassis except the claimed > chassis. > > Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1829762 > Reported-by: Daniel Alvarez <dalva...@redhat.com> > Suggested-by: Dumitru Ceara <dce...@redhat.com> > Signed-off-by: Numan Siddique <num...@ovn.org> > ---
Looks good to me, thanks! Acked-by: Dumitru Ceara <dce...@redhat.com> Regards, Dumitru _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev