-
Bug
-
Resolution: Done-Errata
-
Normal
-
4.10.z
-
None
-
+
-
Important
-
None
-
SDN Sprint 243
-
1
-
Rejected
-
False
-
Description of problem:
Customer has identified that we are seeing packets leave from two egressIPs to the same target address and port; splitting traffic instead of selecting a primary interface to use as egress when multiple egress IPs are
Version-Release number of selected component (if applicable):
OCP 4.10.30
How reproducible:
every time on customer endpoint
Steps to Reproduce:
1. Deploy egressIP object with two selected IPs in valid range, scope eip to namespace with pods reaching to upstream source. 2. Capture packets at target and observe incoming packets from two separate sources attempting to continue conversation with continued ACKs instead of starting a new conversation with SYN on first contact from new IP. 3. traffic is fragmented, dropped/rejected by host for not coming from same origination point between requests from openshift-hosted services through EIP(s)
Actual results:
Traffic is dropped at target due to two origin points
Expected results:
traffic should flow from single eip as leader.
Additional info:
issue is mitigated when EIP is set to only include a single IP address; (occurs on multiple egressIPs deployed across multiple projects; multiple clusters affected in customer environment) See next comments for specific information/case number/data sets and conversation.
- clones
-
OCPBUGS-7406 [4.13] Egress appears to be splitting traffic between all applicable egress IPs instead of selecting a primary host address
- Closed
- is blocked by
-
OCPBUGS-7406 [4.13] Egress appears to be splitting traffic between all applicable egress IPs instead of selecting a primary host address
- Closed
- links to
-
RHBA-2023:5677 OpenShift Container Platform 4.12.z bug fix update