DVR Distributed routers dropping packages to FIPs 90%+ of the time
Bug #1904198 reported by
Diko Parvanov
This bug report is a duplicate of:
Bug #1883321: Neutron OpenvSwitch DVR - connection problem.
Edit
Remove
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
New
|
Undecided
|
Unassigned |
Bug Description
Environment:
cloud: bionic-ussuri
neutron-*: 2:16.1.
openvswitch-
DVR enabled in environment.
External FIPs assigned to VM with a distributed HA router. Issue not appearing with centralized router.
Ping/ssh to VM works for ~10% of the time, 90% of the time packets are dropped.
When not working tcpdumping on the VM directly via virsh console can see the ICMP packets arriving and leaving for the source.
Tcpdumping at the same time on the qrouter namespace can see the packets coming from the VM and leaving for the source, but never reaching the source, resulting in timeouts.
Found that lp:1883321 is the actual bug and this is duplicate. Same behavior is recognized here, just apt package updates starting to run break the connectivity, when they timeout - connectivity restored until the install hook is re-ran and apt starts again.