[EVPN VXLAN] Multi Homing : Vrouter dropping ARP packet from composite netxthop

Bug #1732285 reported by chhandak
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R4.1
Fix Committed
Critical
Divakar Dharanalakota
Trunk
Fix Committed
Critical
Divakar Dharanalakota

Bug Description

When vrouter getting ARP packet from BMS behind composite next hop, packets are getting dropped with Invalid Nh. Using the vrouter with the fix for 1724681. When ARP has already learned Unicast ICMP packets are fine.

root@5b11s15:~# tcpdump -ni enp4s0f1 usp port 4789
tcpdump: syntax error
root@5b11s15:~# tcpdump -ni enp4s0f1 udp port 4789
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enp4s0f1, link-type EN10MB (Ethernet), capture size 262144 bytes
13:38:13.848918 IP 172.16.3.1.10662 > 172.16.180.102.4789: VXLAN, flags [I] (0x08), vni 4
ARP, Request who-has 1.1.1.4 tell 1.1.1.3, length 42
13:38:14.849014 IP 172.16.3.1.10662 > 172.16.180.102.4789: VXLAN, flags [I] (0x08), vni 4
ARP, Request who-has 1.1.1.4 tell 1.1.1.3, length 42
13:38:15.848944 IP 172.16.3.1.10662 > 172.16.180.102.4789: VXLAN, flags [I] (0x08), vni 4
ARP, Request who-has 1.1.1.4 tell 1.1.1.3, length 42

root@5b11s15:~#
root@5b11s15:~# rt --dump 2 --family bridge
Flags: L=Label Valid, Df=DHCP flood, Mm=Mac Moved, L2c=L2 Evpn Control Word, N=New Entry, Ec=EvpnControlProcessing
vRouter bridge table 0/2
Index DestMac Flags Label/VNID Nexthop Stats
1708 2:20:4e:74:9a:cb - 30 74285
31264 0:0:5e:0:1:0 Df - 3 113527
40992 90:e2:ba:c4:2e:6c LDf -1 23 0 >>> BMS MAC
112924 ff:ff:ff:ff:ff:ff LDf 4 46 49864
242304 90:e2:ba:55:84:2d Df - 3 0
root@5b11s15:~# nh --get 23
Id:23 Type:Composite Fmly: AF_INET Rid:0 Ref_cnt:2 Vrf:2
              Flags:Valid, Ecmp, Etree Root,
              Valid Hash Key Parameters: Proto,SrcIP,SrcPort,DstIp,DstPort
              Sub NH(label): 50(4) 24(4)

Id:50 Type:Tunnel Fmly: AF_INET Rid:0 Ref_cnt:4 Vrf:0
              Flags:Valid, Vxlan, Etree Root,
              Oif:0 Len:14 Data:84 b5 9c c8 00 00 90 e2 ba 55 84 2d 08 00
              Sip:172.16.180.102 Dip:172.16.3.1

Id:24 Type:Tunnel Fmly: AF_INET Rid:0 Ref_cnt:3 Vrf:0
              Flags:Valid, Vxlan, Etree Root,
              Oif:0 Len:14 Data:84 b5 9c c8 00 00 90 e2 ba 55 84 2d 08 00
              Sip:172.16.180.102 Dip:172.16.2.1

root@5b11s15:~# dropstats | grep -v " 0$"
Invalid IF 8

Flow Action Drop 5720

Discards 3330
Cloned Original 7111

Invalid NH 2530
Invalid Mcast Source 2494

Invalid Source 108
No L2 Route 229210

root@5b11s15:~# dropstats | grep -v " 0$"
Invalid IF 8

Flow Action Drop 5720

Discards 3330
Cloned Original 7111

Invalid NH 2531
Invalid Mcast Source 2494

Invalid Source 108
No L2 Route 229210

chhandak (chhandak)
Changed in juniperopenstack:
importance: Undecided → Critical
assignee: nobody → Divakar Dharanalakota (ddivakar)
milestone: none → r4.1.0.0-fcs
information type: Proprietary → Public
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.1

Review in progress for https://review.opencontrail.org/37571
Submitter: Divakar Dharanalakota (<email address hidden>)

Changed in juniperopenstack:
milestone: r4.1.0.0-fcs → r5.0.0
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/37592
Submitter: Divakar Dharanalakota (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/37571
Committed: http://github.com/Juniper/contrail-vrouter/commit/d9000c1e28d79189ae69374e3a904725c48aca36
Submitter: Zuul (<email address hidden>)
Branch: R4.1

commit d9000c1e28d79189ae69374e3a904725c48aca36
Author: Divakar D <email address hidden>
Date: Thu Nov 16 12:19:07 2017 +0530

Calculate Ecmp component NH for non-IP packets

Currently the Ecmp component NH is calculated for IP/IP6 packets only as
Ecmp has been supported for only for L3 packets. With the support of L2 Ecmp, the
component NH needs to be chosen even for L2 packets. As there is no Flow
available for L2 packets, the hash is calculated on Ether dst, src and
VRF

Change-Id: I61085c729da9633630088604c1a6b8db5897bba8
closes-bug: #1732285

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/37592
Committed: http://github.com/Juniper/contrail-vrouter/commit/23e5cb1402cd0b794950d18cdeaae0ff95a7ff27
Submitter: Zuul (<email address hidden>)
Branch: master

commit 23e5cb1402cd0b794950d18cdeaae0ff95a7ff27
Author: Divakar D <email address hidden>
Date: Thu Nov 16 12:19:07 2017 +0530

Calculate Ecmp component NH for non-IP packets

Currently the Ecmp component NH is calculated for IP/IP6 packets only as
Ecmp has been supported for only for L3 packets. With the support of L2 Ecmp, the
component NH needs to be chosen even for L2 packets. As there is no Flow
available for L2 packets, the hash is calculated on Ether dst, src and
VRF

Change-Id: I61085c729da9633630088604c1a6b8db5897bba8
closes-bug: #1732285

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.