[ovs-discuss] latest 2.9 geneve/stt tunnel adds a drop flow for src and dst

aginwala aginwala at asu.edu
Thu Mar 8 09:16:48 UTC 2018


When setting up central node on a BM with latest ovs 2.9 on ubuntu 16.04
with any tunnel type(stt/geneve), there is tunnel port not found warning on
the central node along with drop flows for the guest vms due to which vms
cannot ping each other via tunnel.

ovn-nbctl show
switch a4ff74cb-540f-4347-a4ad-ffffdecb42b5 (ls1)
    port lsp2
        addresses: ["52:54:00:bc:7f:37 10.0.0.12"]
    port lsp1
        addresses: ["52:54:00:bb:7f:38 10.0.0.11"]

e.g.
When VM1 on HV1(+controller) associated to lsp1,  pings VM2 associated to
lsp2 on HV2 and vice versa.  virsh destroy and redefining the vms didn't
help which recreated the port on br-int.


Below *vswitchd logs* are populated on central node:

2018-03-08T07:55:55.819Z|00018|ofproto_dpif_upcall(handler106)|INFO|received
packet on unassociated datapath port 3
2018-03-08T07:56:55.277Z|00019|tunnel(handler106)|WARN|Dropped 118 log
messages in last 60 seconds (most recently, 1 seconds ago) due to excessive
rate
2018-03-08T07:56:55.277Z|00020|tunnel(handler106)|WARN|receive tunnel port
not found
(icmp,tun_id=0x1,tun_src=10.99.155.34,tun_dst=10.99.152.95,tun_ipv6_src=::,tun_ipv6_dst=::,tun_gbp_id=0,tun_gbp_flags=0,tun_tos=0,tun_ttl=64,tun_flags=csum|key,in_port=3,vlan_tci=0x0000,dl_src=52:54:00:bc:7f:37,dl_dst=52:54:00:bb:7f:38,nw_src=10.0.0.12,nw_dst=10.0.0.11,nw_tos=0,nw_ecn=0,nw_ttl=64,icmp_type=8,icmp_code=0)


*ovs-appctl dpctl/show*
system at ovs-system:
lookups: hit:223 missed:423 lost:0
flows: 1
masks: hit:400 total:1 hit/pkt:0.62
port 0: ovs-system (internal)
port 1: br-int (internal)
port 2: vnet0
port 3: genev_sys_6081 (geneve:* packet_type=ptap*)

*ovs-dpctl dump-flows*
recirc_id(0),dp_hash(0),skb_priority(0),tunnel(tun_id=0x1,src=10.99.155.34,dst=10.99.152.95,ttl=64,tp_src=13361,tp_dst=6081,geneve({class=0x102,type=0x80,len=4,0x20001}),flags(+csum+key)),in_port(3),skb_mark(0),ct_state(-new-est-rel-rpl-inv-trk-snat-dnat),ct_zone(0),ct_mark(0),ct_label(0),eth(src=52:54:00:bc:7f:37,dst=52:54:00:bb:7f:38),eth_type(0x0800),ipv4(src=10.0.0.12,dst=10.0.0.11,proto=1,tos=0,ttl=64,frag=no),icmp(type=8/0x8),
packets:0, bytes:0, used:never, *actions:drop*


So I did the following:
1. deleted flows using ovs-dpctl del-flows
2. ifconfig genev_sys_6081 down which is anyways tunnel port .
3. Restarted ovn-controllers on both HVs and the connectivity restored.



Below is the log of *vswitchd* after connectivity is restored:
0:00:00:00:00:00),
actions:set(tunnel(tun_id=0x1,dst=10.99.155.34,ttl=64,tp_dst=6081,geneve({class=0x102,type=0x80,len=4,0x1ffff}),flags(df|csum|key))),3
2018-03-08T08:54:49.940Z|00078|bridge|INFO|bridge br-int: deleted interface
ovn-503634-0 on port 8
2018-03-08T08:54:49.940Z|00005|dpif(revalidator160)|WARN|system at ovs-system:
failed to put[modify] (No such file or directory)
ufid:00a1d729-ba1e-426f-bc4e-07bc8176b02f
recirc_id(0),dp_hash(0/0),skb_priority(0/0),in_port(2),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=52:54:00:bb:7f:38/01:00:00:00:00:00,dst=ff:ff:ff:ff:ff:ff/01:00:00:00:00:00),eth_type(0x0806),arp(sip=
10.0.0.11/0.0.0.0,tip=10.0.0.1,op=1/0xff,sha=52:54:00:bb:7f:38/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00
)
2018-03-08T08:54:49.962Z|00003|dpif(revalidator156)|WARN|system at ovs-system:
failed to put[modify] (No such file or directory)
ufid:ee192376-7f15-4cef-91d5-01126d43394b
recirc_id(0),dp_hash(0/0),skb_priority(0/0),in_port(2),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=52:54:00:bb:7f:38,dst=ff:ff:ff:ff:ff:ff),eth_type(0x0806),arp(sip=10.0.0.11,tip=10.0.0.12,op=1/0xff,sha=52:54:00:bb:7f:38,tha=00:00:00:00:00:00)
2018-03-08T08:54:49.992Z|00079|connmgr|INFO|br-int<->unix#25: 66 flow_mods
in the 9 s starting 10 s ago (61 adds, 5 deletes)
2018-03-08T08:54:50.048Z|00080|bridge|INFO|bridge br-int: added interface
ovn-503634-0 on port 9
2018-03-08T08:54:50.053Z|00004|dpif(revalidator156)|WARN|system at ovs-system:
failed to put[modify] (No such file or directory)
ufid:ee192376-7f15-4cef-91d5-01126d43394b
recirc_id(0),dp_hash(0/0),skb_priority(0/0),in_port(2),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=52:54:00:bb:7f:38,dst=ff:ff:ff:ff:ff:ff),eth_type(0x0806),arp(sip=10.0.0.11,tip=10.0.0.12,op=1/0xff,sha=52:54:00:bb:7f:38,tha=00:00:00:00:00:00),
actions:userspace(pid=4155565177,slow_path(action))
2018-03-08T08:54:50.053Z|00006|dpif(revalidator160)|WARN|system at ovs-system:
failed to put[modify] (No such file or directory)
ufid:00a1d729-ba1e-426f-bc4e-07bc8176b02f
recirc_id(0),dp_hash(0/0),skb_priority(0/0),in_port(2),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=52:54:00:bb:7f:38/01:00:00:00:00:00,dst=ff:ff:ff:ff:ff:ff/01:00:00:00:00:00),eth_type(0x0806),arp(sip=
10.0.0.11/0.0.0.0,tip=10.0.0.1,op=1/0xff,sha=52:54:00:bb:7f:38/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00),
actions:set(tunnel(tun_id=0x1,dst=10.99.155.34,ttl=64,tp_dst=6081,geneve({class=0x102,type=0x80,len=4,0x1ffff}),flags(df|csum|key))),3


Hence wanted to know is there any specific reason to introduce drop rule or
need to pass extra configs because I never ran into this issue while during
tunnel setup.


Regards,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-discuss/attachments/20180308/ce77438c/attachment-0001.html>


More information about the discuss mailing list