Public bug reported: Steps to reproduce:
1) Create test network, IPV6 subnet in arbitrary mode, eg. SLAAC; 2) Create test router and add an interface in the test subnet; 3) Create test instance and try to ping the router - it fails. Sample OVN trace: # ovn-trace piotr-geneve-ipv6-stateful 'inport == "9b6d8c19-ca57-4f0d- 8af0-ee29642c6fb8" && eth.src == fa:16:3e:f5:aa:2a && eth.dst == fa:16:3e:6b:1b:79 && ip6.src == 2a01:49a0:112a::289 && ip6.dst == 2a01:49a0:112a::' 0. ls_out_pre_lb (ovn-northd.c:5169): ip && outport == "7f82a5", priority 110, uuid 4cb710e8 next; 1. ls_out_pre_acl (ovn-northd.c:5169): ip && outport == "7f82a5", priority 110, uuid 65a121ee next; 4. ls_out_acl_hint (ovn-northd.c:5486): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid 99195420 reg0[8] = 1; reg0[10] = 1; next; 10. ls_out_port_sec_l2 (ovn-northd.c:5118): outport == "7f82a5", priority 50, uuid cc53fba5 output; /* output to "7f82a5", type "patch" */ ingress(dp="test-router", inport="lrp-7f82a5") ---------------------------------------------- 0. lr_in_admission (ovn-northd.c:9556): eth.dst == fa:16:3e:6b:1b:79 && inport == "lrp-7f82a5", priority 50, uuid ba5e360d xreg0[0..47] = fa:16:3e:6b:1b:79; next; 1. lr_in_lookup_neighbor (ovn-northd.c:9635): 1, priority 0, uuid 75a8a812 reg9[2] = 1; next; 2. lr_in_learn_neighbor (ovn-northd.c:9644): reg9[2] == 1, priority 100, uuid 72706c4a next; 3. lr_in_ip_input (ovn-northd.c:10884): ip6 && ip6.dst == 2a01:49a0:112a:: && !ip.later_frag, priority 70, uuid 13d497b1 icmp6 { eth.dst <-> eth.src; ip6.dst <-> ip6.src; ip.ttl = 255; icmp6.type = 1; icmp6.code = 3; next; }; icmp6 ----- eth.dst <-> eth.src; ip6.dst <-> ip6.src; ip.ttl = 255; icmp6.type = 1; icmp6.code = 3; next; 10. lr_in_ip_routing (ovn-northd.c:8710): ip6.dst == 2a01:49a0:112a::/112, priority 225, uuid 57af3cd5 10. lr_in_ip_routing (ovn-northd.c:8710): ip6.dst == 2a01:49a0:112a::/112, priority 225, uuid 57af3cd5 ip.ttl--; reg8[0..15] = 0; xxreg0 = ip6.dst; xxreg1 = 2a01:49a0:112a::; eth.src = fa:16:3e:6b:1b:79; outport = "lrp-7f82a5"; flags.loopback = 1; next; 11. lr_in_ip_routing_ecmp (ovn-northd.c:9902): reg8[0..15] == 0, priority 150, uuid 7e1242f0 next; 12. lr_in_policy (ovn-northd.c:10027): 1, priority 0, uuid dfb65200 reg8[0..15] = 0; next; 13. lr_in_policy_ecmp (ovn-northd.c:10029): reg8[0..15] == 0, priority 150, uuid a59e560f next; 14. lr_in_arp_resolve (ovn-northd.c:10245): outport == "lrp-7f82a5" && xxreg0 == 2a01:49a0:112a::289, priority 100, uuid 1e99a10c eth.dst = fa:16:3e:f5:aa:2a; next; 18. lr_in_arp_request (ovn-northd.c:10652): 1, priority 0, uuid d05b7ef1 output; egress(dp="test-router", inport="lrp-7f82a5", outport="lrp-7f82a5") ------------------------------------------------------------------- 3. lr_out_delivery (ovn-northd.c:10700): outport == "lrp-7f82a5", priority 100, uuid 3d0b42d6 output; /* output to "lrp-7f82a5", type "patch" */ ingress(dp="piotr-geneve-ipv6-stateful", inport="7f82a5") --------------------------------------------------------- 0. ls_in_port_sec_l2 (ovn-northd.c:5023): inport == "7f82a5", priority 50, uuid e1f011ad next; 5. ls_in_pre_acl (ovn-northd.c:5166): ip && inport == "7f82a5", priority 110, uuid f4b6d9ab next; 6. ls_in_pre_lb (ovn-northd.c:5166): ip && inport == "7f82a5", priority 110, uuid c42a6170 next; 8. ls_in_acl_hint (ovn-northd.c:5486): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid 5d064a89 reg0[8] = 1; reg0[10] = 1; next; 23. ls_in_l2_lkup (ovn-northd.c:7615): eth.dst == fa:16:3e:f5:aa:2a, priority 50, uuid 7faa449b outport = "9b6d8c"; output; egress(dp="piotr-geneve-ipv6-stateful", inport="7f82a5", outport="9b6d8c") -------------------------------------------------------------------------- 1. ls_out_pre_acl (ovn-northd.c:5226): ip, priority 100, uuid 32588e71 reg0[0] = 1; next; 2. ls_out_pre_stateful (ovn-northd.c:5411): reg0[0] == 1, priority 100, uuid 58780681 ct_next; ct_next(ct_state=est|trk /* default (use --ct to customize) */) --------------------------------------------------------------- 4. ls_out_acl_hint (ovn-northd.c:5486): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid 99195420 reg0[8] = 1; reg0[10] = 1; next; 5. ls_out_acl (ovn-northd.c:5744): reg0[10] == 1 && (outport == @neutron_pg_drop && ip), priority 2001, uuid ec8b7afe ct_commit { ct_label.blocked = 1; }; ** Affects: neutron Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1928330 Title: [OVN] Unable to ping router from test IPV6 subnet Status in neutron: New Bug description: Steps to reproduce: 1) Create test network, IPV6 subnet in arbitrary mode, eg. SLAAC; 2) Create test router and add an interface in the test subnet; 3) Create test instance and try to ping the router - it fails. Sample OVN trace: # ovn-trace piotr-geneve-ipv6-stateful 'inport == "9b6d8c19-ca57-4f0d- 8af0-ee29642c6fb8" && eth.src == fa:16:3e:f5:aa:2a && eth.dst == fa:16:3e:6b:1b:79 && ip6.src == 2a01:49a0:112a::289 && ip6.dst == 2a01:49a0:112a::' 0. ls_out_pre_lb (ovn-northd.c:5169): ip && outport == "7f82a5", priority 110, uuid 4cb710e8 next; 1. ls_out_pre_acl (ovn-northd.c:5169): ip && outport == "7f82a5", priority 110, uuid 65a121ee next; 4. ls_out_acl_hint (ovn-northd.c:5486): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid 99195420 reg0[8] = 1; reg0[10] = 1; next; 10. ls_out_port_sec_l2 (ovn-northd.c:5118): outport == "7f82a5", priority 50, uuid cc53fba5 output; /* output to "7f82a5", type "patch" */ ingress(dp="test-router", inport="lrp-7f82a5") ---------------------------------------------- 0. lr_in_admission (ovn-northd.c:9556): eth.dst == fa:16:3e:6b:1b:79 && inport == "lrp-7f82a5", priority 50, uuid ba5e360d xreg0[0..47] = fa:16:3e:6b:1b:79; next; 1. lr_in_lookup_neighbor (ovn-northd.c:9635): 1, priority 0, uuid 75a8a812 reg9[2] = 1; next; 2. lr_in_learn_neighbor (ovn-northd.c:9644): reg9[2] == 1, priority 100, uuid 72706c4a next; 3. lr_in_ip_input (ovn-northd.c:10884): ip6 && ip6.dst == 2a01:49a0:112a:: && !ip.later_frag, priority 70, uuid 13d497b1 icmp6 { eth.dst <-> eth.src; ip6.dst <-> ip6.src; ip.ttl = 255; icmp6.type = 1; icmp6.code = 3; next; }; icmp6 ----- eth.dst <-> eth.src; ip6.dst <-> ip6.src; ip.ttl = 255; icmp6.type = 1; icmp6.code = 3; next; 10. lr_in_ip_routing (ovn-northd.c:8710): ip6.dst == 2a01:49a0:112a::/112, priority 225, uuid 57af3cd5 10. lr_in_ip_routing (ovn-northd.c:8710): ip6.dst == 2a01:49a0:112a::/112, priority 225, uuid 57af3cd5 ip.ttl--; reg8[0..15] = 0; xxreg0 = ip6.dst; xxreg1 = 2a01:49a0:112a::; eth.src = fa:16:3e:6b:1b:79; outport = "lrp-7f82a5"; flags.loopback = 1; next; 11. lr_in_ip_routing_ecmp (ovn-northd.c:9902): reg8[0..15] == 0, priority 150, uuid 7e1242f0 next; 12. lr_in_policy (ovn-northd.c:10027): 1, priority 0, uuid dfb65200 reg8[0..15] = 0; next; 13. lr_in_policy_ecmp (ovn-northd.c:10029): reg8[0..15] == 0, priority 150, uuid a59e560f next; 14. lr_in_arp_resolve (ovn-northd.c:10245): outport == "lrp-7f82a5" && xxreg0 == 2a01:49a0:112a::289, priority 100, uuid 1e99a10c eth.dst = fa:16:3e:f5:aa:2a; next; 18. lr_in_arp_request (ovn-northd.c:10652): 1, priority 0, uuid d05b7ef1 output; egress(dp="test-router", inport="lrp-7f82a5", outport="lrp-7f82a5") ------------------------------------------------------------------- 3. lr_out_delivery (ovn-northd.c:10700): outport == "lrp-7f82a5", priority 100, uuid 3d0b42d6 output; /* output to "lrp-7f82a5", type "patch" */ ingress(dp="piotr-geneve-ipv6-stateful", inport="7f82a5") --------------------------------------------------------- 0. ls_in_port_sec_l2 (ovn-northd.c:5023): inport == "7f82a5", priority 50, uuid e1f011ad next; 5. ls_in_pre_acl (ovn-northd.c:5166): ip && inport == "7f82a5", priority 110, uuid f4b6d9ab next; 6. ls_in_pre_lb (ovn-northd.c:5166): ip && inport == "7f82a5", priority 110, uuid c42a6170 next; 8. ls_in_acl_hint (ovn-northd.c:5486): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid 5d064a89 reg0[8] = 1; reg0[10] = 1; next; 23. ls_in_l2_lkup (ovn-northd.c:7615): eth.dst == fa:16:3e:f5:aa:2a, priority 50, uuid 7faa449b outport = "9b6d8c"; output; egress(dp="piotr-geneve-ipv6-stateful", inport="7f82a5", outport="9b6d8c") -------------------------------------------------------------------------- 1. ls_out_pre_acl (ovn-northd.c:5226): ip, priority 100, uuid 32588e71 reg0[0] = 1; next; 2. ls_out_pre_stateful (ovn-northd.c:5411): reg0[0] == 1, priority 100, uuid 58780681 ct_next; ct_next(ct_state=est|trk /* default (use --ct to customize) */) --------------------------------------------------------------- 4. ls_out_acl_hint (ovn-northd.c:5486): !ct.new && ct.est && !ct.rpl && ct_label.blocked == 0, priority 4, uuid 99195420 reg0[8] = 1; reg0[10] = 1; next; 5. ls_out_acl (ovn-northd.c:5744): reg0[10] == 1 && (outport == @neutron_pg_drop && ip), priority 2001, uuid ec8b7afe ct_commit { ct_label.blocked = 1; }; To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1928330/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp