IPv6 Router Advertisements are blocked in secgroups when using radvd based networks
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
Fix Released
|
Medium
|
Ihar Hrachyshka | ||
Juno |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Description of problem:
=======
Discovered in: https:/
I Created n radvd IPv6 subnet with:
1. ipv6_ra_mode: dhcpv6-stateless
2. ipv6_address_mode: dhcpv6-stateless
Version-Release number of selected component (if applicable):
=======
openstack-
How reproducible:
=================
100%
Steps to Reproduce:
===================
1. Create an IPv4 neutron network (might not be mandatory but this is how I did it):
# neutron net-create internal_ipv4_a --shared
2. Create an IPv4 subnet:
# neutron subnet-create <IPv4_net_id> 192.168.1.0/24 --name internal_
3. Create an IPv6 neutron network:
# neutron net-create tenant_
4. Create an IPv6 subnet:
# neutron subnet-create <IPv6_net_id> 2001:1234:1234::/64 --name internal_
5. Create a neutron router:
# neutron router-create router1
6. Attach subnets to the router
# neutron router-
# neutron router-
7. boot an instance with that network
# nova boot tenant_
Actual results:
===============
1. RAs reach the instance qbr but not to the instance tap device.
2. Instance did not obtain IPv6 address.
Expected results:
=================
IPv6 Router Advertisements should reach the instance.
Additional info:
================
1. Compute node and L3 agent deployed on different servers.
2. Communication between the nodes (RAs) done via GRE tunnels.
3. This worked before openstack-
4. Tested with RHEL7
Changed in neutron: | |
assignee: | nobody → Numan Siddique (numansiddique) |
tags: | added: ipv6 |
Changed in neutron: | |
importance: | Undecided → Medium |
description: | updated |
Changed in neutron: | |
assignee: | Numan Siddique (numansiddique) → Ihar Hrachyshka (ihar-hrachyshka) |
Changed in neutron: | |
milestone: | none → kilo-1 |
status: | Fix Committed → Fix Released |
Changed in neutron: | |
milestone: | kilo-1 → 2015.1.0 |
Subnets do not have gateway_ip set, so no RA rules are set for them. This should be solved by: https:/ /review. openstack. org/#/c/ 135872/ that is already merged (we just need to backport it to Juno; backport is also requested: https:/ /review. openstack. org/142002).