Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-64771

Missing connectivity to worker nodeports services in DPU-HOST mode

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      While trying to run metallb operator and creating LB in hypershift we are loosing connectivity from external host to metallb vip after vip is moving to worker. This is caused by failure in reaching nodeport service through the worker.
      Example:
      nc -zv 10.6.135.6 30332
      Ncat: Version 7.92 ( https://nmap.org/ncat )
      Ncat: TIMEOUT. 
      In OCP dpu-host mode runs with disable-forwarding (default for all modes) that adds FORWARD DROP iptable rule and set 
       sysctl -w net.ipv4.ip_forward=0
      sysctl -w net.ipv6.conf.all.forwarding=0
      
      This disables port forwarding that is required for offloading to work

      How reproducible:

          Create cluster with DPF operator, set worker to dpu-host

      Steps to Reproduce:

          1. nc any to any nodeport on the one of the dpu hosts
          2.
          3.
          

      Actual results:

          nc will fail with timeout

      Expected results:

          Success

      Additional info:

          

              rh-ee-datucker Dave Tucker
              itsoiref@redhat.com Igal Tsoiref
              None
              None
              Anurag Saxena Anurag Saxena
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: