neutron

OVS firewall doesn't work with recent ovs

Bug #1634757 reported by IWAMOTO Toshihiro on 2016-10-19

This bug affects 3 people

Affects		Status	Importance	Assigned to	Milestone
	neutron	Fix Released	Medium	IWAMOTO Toshihiro

Bug Description

On ovs branch-2.5 after commit fd6daf7, ovs firewall fails to install flows with a following error.

ovs-ofctl: -:17: actions are invalid with specified match (OFPBAC_MATCH_INCONSISTENT)

Similar commit exists on master, so the firewall won't work on master, either. (not confirmed)

Tags:

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-19: Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.openstack.org/388467

Changed in neutron:
assignee:	nobody → IWAMOTO Toshihiro (iwamoto)
status:	New → In Progress

Jakub Libosvar (libosvar) on 2016-10-19

tags:

added: mitaka-backport-potential newton-backport-potential

Anindita Das (anindita-das) on 2016-10-19

Changed in neutron:
importance:	Undecided → Medium

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-20: Fix merged to neutron (master)

Reviewed: https://review.openstack.org/388467
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=14ee32940c87186d36b253773e1d73b5274349bf
Submitter: Jenkins
Branch: master

commit 14ee32940c87186d36b253773e1d73b5274349bf
Author: IWAMOTO Toshihiro <email address hidden>
Date: Wed Oct 19 15:28:32 2016 +0900

ovsfw: Add a dl_type match for action=ct flows

Recently ovs has been changed to require a dl_type match for
action=ct flows.

Change-Id: I9040d8c50ee30f5daef7ea931a28cd0cf7855f3e
Closes-bug: #1634757

Changed in neutron:
status:	In Progress → Fix Released

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-20: Fix proposed to neutron (stable/newton)

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/389312

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-20: Fix proposed to neutron (stable/mitaka)

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/389313

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-21: Fix merged to neutron (stable/newton)

Reviewed: https://review.openstack.org/389312
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=ca5c050f9744a82fc9370fd429fd0dad2c849094
Submitter: Jenkins
Branch: stable/newton

commit ca5c050f9744a82fc9370fd429fd0dad2c849094
Author: IWAMOTO Toshihiro <email address hidden>
Date: Wed Oct 19 15:28:32 2016 +0900

ovsfw: Add a dl_type match for action=ct flows

Recently ovs has been changed to require a dl_type match for
action=ct flows.

    Change-Id: I9040d8c50ee30f5daef7ea931a28cd0cf7855f3e
    Closes-bug: #1634757
    (cherry picked from commit 14ee32940c87186d36b253773e1d73b5274349bf)

tags:

added: in-stable-newton

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-11-04: Fix included in openstack/neutron 9.1.0

This issue was fixed in the openstack/neutron 9.1.0 release.

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-11-08: Fix merged to neutron (stable/mitaka)

Reviewed: https://review.openstack.org/389313
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=577a472d67a5b8763d9322001f7ebd95694818e2
Submitter: Jenkins
Branch: stable/mitaka

commit 577a472d67a5b8763d9322001f7ebd95694818e2
Author: IWAMOTO Toshihiro <email address hidden>
Date: Wed Oct 19 15:28:32 2016 +0900

ovsfw: Add a dl_type match for action=ct flows

Recently ovs has been changed to require a dl_type match for
action=ct flows.

    Change-Id: I9040d8c50ee30f5daef7ea931a28cd0cf7855f3e
    Closes-bug: #1634757
    (cherry picked from commit 14ee32940c87186d36b253773e1d73b5274349bf)