https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/NETVIRT-658 netvirt <p>Setup Used:</p> <p>1. 3 node ODL cluster + HA proxy<br/> 2. new netvirt (carbon)<br/> 3. Packstack with ocata.</p> <p>Steps followed for testing:</p> <p>1.Created Network<br/> 2.Created 2 VMs.<br/> 3.Created SG1 with <span class="error">&#91;Other Protocol&#93;</span> - <span class="error">&#91;IP Protocol&#93;</span> - <span class="error">&#91;0&#93;</span>.<br/> 4.Applied SG1 to both the VMs.</p> <p>Observed communication failed .</p> <p>Operating System: All<br/> Platform: All</p> NETVIRT-658

After applying Other_protocol(IP Protocol - [0]) SG Rule to VMs , communication is not happening.

Bug Resolved Cannot Reproduce Vinoth B Hari Prasidh Mon, 8 May 2017 12:12:22 +0000 Thu, 3 May 2018 14:37:00 +0000 Thu, 29 Jun 2017 07:28:37 +0000 Carbon General 0 13 <p>Logs when tested with patch 10 of <a href="https://git.opendaylight.org/gerrit/#/c/57705" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/57705</a></p> <p>Attachment karaf.tar.gz has been added with description: Logs</p> <p>(In reply to Aswin Suryanarayanan from comment #1)<br/> &gt; Created attachment 1805 <span class="error">&#91;details&#93;</span><br/> &gt; Logs<br/> &gt; <br/> &gt; Logs when tested with patch 10 of<br/> &gt; <a href="https://git.opendaylight.org/gerrit/#/c/57705" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/57705</a></p> <p>wrong attachment ignore</p> <p>Is the netfilter marking the packet as invalid here? where in pipeline packet is dropped?</p> <p>Patch pushed </p> <p>For Genius,<br/> <a href="https://git.opendaylight.org/gerrit/#/c/58502/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/58502/</a><br/> For Netvirt,<br/> <a href="https://git.opendaylight.org/gerrit/#/c/58494" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/58494</a></p> <p>Fix provided :</p> <p>For ip_proto=0 rule, Installed the same set of flows as ip_proto=ANY rule</p> <p>Test case:</p> <p>1. Created SG1 with <span class="error">&#91;Other Protocol&#93;</span> - <span class="error">&#91;IP Protocol&#93;</span> - <span class="error">&#91;0&#93;</span> rule<br/> 2. Created 2 VMs with SG1<br/> 3. Verified the communication (ICMP, TCP and UDP) between VMs.</p> <p>Setup - 1 : Pure openstack with IPTable_firewall</p> <p>Tested the above test case and observed that the communication between VMs is working.</p> <p>Setup 2 : Pure openstack with OVS firewall</p> <p>The communication between VMs is not working in above test case.</p> <p>(In reply to Vinoth B from comment #4)<br/> &gt; Patch pushed <br/> &gt; <br/> &gt; For Genius,<br/> &gt; <a href="https://git.opendaylight.org/gerrit/#/c/58502/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/58502/</a><br/> &gt; For Netvirt,<br/> &gt; <a href="https://git.opendaylight.org/gerrit/#/c/58494" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/58494</a><br/> &gt; <br/> &gt; Fix provided :<br/> &gt; <br/> &gt; For ip_proto=0 rule, Installed the same set of flows as ip_proto=ANY rule</p> <p>Since protocol number 0 having a valid protocol, It is not a good idea to treat 0 as ANY. So I am abandoned the above patches from merge.</p> Development External issue ID 8399 External issue URL Rank 0|i01t5r: