[ovs-dev] [PATCH ovn v3] northd: Fix the routing for external logical ports of bridged logical switches.

[Dumitru Ceara]

On 8/19/20 9:41 AM, numans at ovn.org wrote:
> From: Numan Siddique <numans at ovn.org>
> 
> Routing for external logical ports is broken if these ports belonged
> to bridged logical switches (with localnet port) and 'ovn-chassis-mac-mappings'
> is configured. External logical ports are those which are external to OVN,
> but there is a logical port for it and it is claimed by one of the HA chassis.
> The claimed chassis provides routing and other native OVN serices like dhcp and dns.
> 
> When the external port sends ARP request for the router IP, the claimed chassis
> replies for the ARP request, but the arp.sha is set to the actual router mac instead
> of the chassis mac. This causes the traffic from external port VM/container to be handled
> incorrectly. A ping to the router ip, is replied by all the chassis which can see this
> packet instead of just the claimed HA chassis.
> 
> This patch fixes this issue by adding a logical flow to drop any packet from the external
> ports destined to the router port mac on all the chassis except the claimed chassis.
> 
> Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1829762
> Reported-by: Daniel Alvarez <dalvarez at redhat.com>
> Suggested-by: Dumitru Ceara <dceara at redhat.com>
> Signed-off-by: Numan Siddique <numans at ovn.org>
> ---

Looks good to me, thanks!

Acked-by: Dumitru Ceara <dceara at redhat.com>

Regards,
Dumitru