There was a recent commit in OVN to allow LSPs with port security enabled to participate in FDB Learning at [1] which may be relevant to this bug. I'm not exactly familiar with the issue outlined in this bug report, but I have been investigating a similar issue [2] where VIP failover is broken among LSPs that share a VIP via their AAPs with the intention employing an active / standby setup. The primary difference is that in that case there was no usage of keepalived for VRRP to move the VIP. Both nodes had the VIP present on an interface and the failover was expected to work based on switching. In any case, part of the solution on the OVN side was to allow FDB learning on secured ports.
[1] https://github.com/ovn-org/ovn/commit/873ac74eb7553737f57f8dc4f79fb6408524296b#diff-7ee66c4f1536ac84dc5bbff1b8312e2eef24b974b3e48a5c5c2bcfdf2eb8f3ce [2] https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/2170987 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2166984 Title: OVN Mac_Binding table not refreshed after keepalived VIP failover between virtual port parents To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ovn/+bug/2166984/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
