Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-24219

Azure - OCP IPI Installation UDP packets are subject to SNAT with LB Service using ETP equals to Local (OVN-Kubernetes as CNI)

    XMLWordPrintable

Details

    • Critical
    • No
    • SDN Sprint 246, SDN Sprint 247, SDN Sprint 248
    • 3
    • False
    • Hide

      None

      Show
      None
    • Users can now use a new way to configure session affinity without a timeout in OVNK which is to set the timeout to 86400 seconds, in which case affinity is treat like permanent unless we have network disruptions like endpoints or nodes going down.
    • Enhancement
    • In Progress
    • Network
    • customers who need session affinity

    Description

      UDP Packets are subject to SNAT in a self-managed OCP 4.13.13 cluster on Azure (OVN-K as CNI) using a Load Balancer Service with `externalTrafficPolicy: Local`. UDP Packets correctly arrive to the Node hosting the Pod but the source IP seen by the Pod is the OVN GW Router of the Node.

      I've reproduced the customer scenario with the following steps:

      This is issue is very critical because it is blocking customer business.

      Attachments

        Issue Links

          blocks

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-28818 [4.15.z] Azure - OCP IPI Installation UDP packets are subject to SNAT with LB Service using ETP equals to Local (OVN-Kubernetes as CNI)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. FDP-223 OVN drops the first packet for session affinity timeout feature

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • New
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-28818 [4.15.z] Azure - OCP IPI Installation UDP packets are subject to SNAT with LB Service using ETP equals to Local (OVN-Kubernetes as CNI)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          links to

          Web Link ItalGas Session Affinity Issues

          GitHub openshift/ovn-kubernetes#2038: OCPBUGS-24219,OCPBUGS-22221,OCPBUGS-25670: Downstream Merge 31st Jan 2024

          Web Link RHEA-2024:0041 OpenShift Container Platform 4.16.z bug fix update

          Activity

            People

              sseethar Surya Seetharaman
              rhn-support-gizzi Giovanni Luca Izzi
              Arti Sood Arti Sood
              Votes:
              0 Vote for this issue
              Watchers:
              13 Start watching this issue

              Dates

                Created:
                Updated: