OVSvApp firewall driver: Failed to add learning flows for TCP and UDP

Bug #1498309 reported by Romil Gupta
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
networking-vsphere
Fix Committed
Undecided
Romil Gupta

Bug Description

2015-09-15 16:16:17.217 ^[[01;31mERROR neutron.agent.linux.utils [^[[01;36mreq-89e32565-672f-4d20-bfdf-f45a6d701724 ^[[00;36mNone None^[[01;31m] ^[[01;35m^[[01;31m
Command: ['ovs-ofctl', 'add-flows', 'br-sec', '-']
Exit code: 1
Stdin: hard_timeout=0,idle_timeout=0,priority=20,table=2,tcp,actions=learn(table=5,priority=20,fin_idle_timeout=1,idle_timeout=7200,nw_proto=6,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],dl_type=0x0800,NXM_OF_VLAN_TCI[0..11],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_TCP_SRC[]=NXM_OF_TCP_DST[],NXM_OF_TCP_DST[]=NXM_OF_TCP_SRC[],output:NXM_OF_IN_PORT[])
Stdout:
Stderr: 2015-09-15T23:16:17Z|00001|meta_flow|WARN|source field nw_proto lacks correct prerequisites
ovs-ofctl: -:1: actions are invalid with specified match (OFPBAC_MATCH_INCONSISTENT)
^[[00m
2015-09-15 16:16:17.218 ^[[01;31mERROR neutron.agent.common.ovs_lib [^[[01;36mreq-89e32565-672f-4d20-bfdf-f45a6d701724 ^[[00;36mNone None^[[01;31m] ^[[01;35m^[[01;31mUnable to execute ['ovs-ofctl', 'add-flows', 'br-sec', '-']. Exception:
Command: ['ovs-ofctl', 'add-flows', 'br-sec', '-']
Exit code: 1
Stdin: hard_timeout=0,idle_timeout=0,priority=20,table=2,tcp,actions=learn(table=5,priority=20,fin_idle_timeout=1,idle_timeout=7200,nw_proto=6,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],dl_type=0x0800,NXM_OF_VLAN_TCI[0..11],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_TCP_SRC[]=NXM_OF_TCP_DST[],NXM_OF_TCP_DST[]=NXM_OF_TCP_SRC[],output:NXM_OF_IN_PORT[])
Stdout:
Stderr: 2015-09-15T23:16:17Z|00001|meta_flow|WARN|source field nw_proto lacks correct prerequisites
ovs-ofctl: -:1: actions are invalid with specified match (OFPBAC_MATCH_INCONSISTENT)
^[[00m

2015-09-15 16:16:17.225 ^[[01;31mERROR neutron.agent.linux.utils [^[[01;36mreq-89e32565-672f-4d20-bfdf-f45a6d701724 ^[[00;36mNone None^[[01;31m] ^[[01;35m^[[01;31m
Command: ['ovs-ofctl', 'add-flows', 'br-sec', '-']
Exit code: 1
Stdin: hard_timeout=0,idle_timeout=0,priority=20,table=2,udp,actions=learn(table=5,priority=20,idle_timeout=300,nw_proto=17,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],dl_type=0x0800,NXM_OF_VLAN_TCI[0..11],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_UDP_SRC[]=NXM_OF_UDP_DST[],NXM_OF_UDP_DST[]=NXM_OF_UDP_SRC[],output:NXM_OF_IN_PORT[])
Stdout:
Stderr: 2015-09-15T23:16:17Z|00001|meta_flow|WARN|source field nw_proto lacks correct prerequisites
ovs-ofctl: -:1: actions are invalid with specified match (OFPBAC_MATCH_INCONSISTENT)
^[[00m
2015-09-15 16:16:17.226 ^[[01;31mERROR neutron.agent.common.ovs_lib [^[[01;36mreq-89e32565-672f-4d20-bfdf-f45a6d701724 ^[[00;36mNone None^[[01;31m] ^[[01;35m^[[01;31mUnable to execute ['ovs-ofctl', 'add-flows', 'br-sec', '-']. Exception:
Command: ['ovs-ofctl', 'add-flows', 'br-sec', '-']
Exit code: 1
Stdin: hard_timeout=0,idle_timeout=0,priority=20,table=2,udp,actions=learn(table=5,priority=20,idle_timeout=300,nw_proto=17,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],dl_type=0x0800,NXM_OF_VLAN_TCI[0..11],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_UDP_SRC[]=NXM_OF_UDP_DST[],NXM_OF_UDP_DST[]=NXM_OF_UDP_SRC[],output:NXM_OF_IN_PORT[])
Stdout:
Stderr: 2015-09-15T23:16:17Z|00001|meta_flow|WARN|source field nw_proto lacks correct prerequisites
ovs-ofctl: -:1: actions are invalid with specified match (OFPBAC_MATCH_INCONSISTENT)
^[[00m

Romil Gupta (romilg)
Changed in networking-vsphere:
assignee: nobody → Romil Gupta (romilg)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to networking-vsphere (master)

Reviewed: https://review.openstack.org/226170
Committed: https://git.openstack.org/cgit/openstack/networking-vsphere/commit/?id=100c9ecad686bf535e650df2b0748c706737e4bb
Submitter: Jenkins
Branch: master

commit 100c9ecad686bf535e650df2b0748c706737e4bb
Author: Romil Gupta <email address hidden>
Date: Mon Sep 21 23:09:27 2015 -0700

    Fixed ovs_firewall to add learning flows for TCP and UDP

    The ovs_firewall driver throws exception while adding
    learning flows for TCP and UDP.

    Stderr: 2015-09-15T23:16:17Z|00001|meta_flow|WARN|source field nw_proto lacks correct prerequisites
    ovs-ofctl: -:1: actions are invalid with specified match (OFPBAC_MATCH_INCONSISTENT)

    This patch-set address the same.

    Change-Id: Ie07cf9c04c3c1053ce600ea8142b709586f38f94
    Closes-Bug: #1498309

Changed in networking-vsphere:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to networking-vsphere (stable/kilo)

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/226260

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to networking-vsphere (stable/kilo)

Reviewed: https://review.openstack.org/226260
Committed: https://git.openstack.org/cgit/openstack/networking-vsphere/commit/?id=be7fea1b7d9b42c8bbf0a2e8691c8eafecdeeb06
Submitter: Jenkins
Branch: stable/kilo

commit be7fea1b7d9b42c8bbf0a2e8691c8eafecdeeb06
Author: Romil Gupta <email address hidden>
Date: Mon Sep 21 23:09:27 2015 -0700

    Fixed ovs_firewall to add learning flows for TCP and UDP

    The ovs_firewall driver throws exception while adding
    learning flows for TCP and UDP.

    Stderr: 2015-09-15T23:16:17Z|00001|meta_flow|WARN|source field nw_proto lacks correct prerequisites
    ovs-ofctl: -:1: actions are invalid with specified match (OFPBAC_MATCH_INCONSISTENT)

    This patch-set address the same.

    (Cherry-picked from commit 100c9ecad686bf535e650df2b0748c706737e4bb)

    Change-Id: Ie07cf9c04c3c1053ce600ea8142b709586f38f94
    Closes-Bug: #1498309

tags: added: in-stable-kilo
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.