RHBA-2015:0635 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are
now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno)
for RHEL 7.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities
for building a private or public infrastructure-as-a-service (IaaS)
cloud running on commonly available physical hardware. This advisory
includes packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for
OpenStack. Just as OpenStack Compute (nova) provides an API to dynamically
request and configure virtual servers, OpenStack Networking provides
an API to dynamically request and configure virtual networks. These
networks connect ‘interfaces’ from other OpenStack services
(e.g. virtual NICs from Compute VMs). The OpenStack Networking API
supports extensions to provide advanced network capabilities (e.g. QoS,
ACLs, network monitoring, etc.)

This update addresses the following issues:

• Previously, the br-tun bridge was reset (OF rules and ports) during openvswitch-agent restarts, and in some conditions because of neutron-server restarts.

Consequently, if a broadcast packet entered br-tun while there were no openflow rules, and at least 2 other hosts br-tun had been reset the same way, the packet generated a network broadcast storm raising the network usage and the Open vSwitch cpu usage on all hosts.
This update fixes this issue by setting br-tun automatically into secure mode during reset. As a result, packets will not be forwarded in the absence of openflow rules, and the race condition has been eliminated. (BZ#1191922)

The rebase package includes a number of notable enhancements and fixes under version 2014.2.2:

• DHCP agent: Don't inject metadata service routes for DVR ports. Spawning metadata proxy for isolated networks fixed.
• Security Groups: Race condition processing port updates fixed. Old firewall rules are now properly cleaned up when a port is detached from security groups.
• IPv6: Gateway IP is now allocated for SLAAC subnets on creation. DHCP server is now properly advertised via Router Advertisement messages for DHCP stateless and stateful subnets. IPv6 address allocation code is optimized to reflect huge sizes of IPv6 ranges. Support IPv6 stateful subnets with prefix-length other than 64. Fixed IP addresses are now not allowed for auto-address subnets. Subnet deletion now properly clean up auto-address ports. IP allocation for networks with multiple SLAAC subnets is now fixed.
• L3 High Availability (HA): Avoid switching green threads from under database transaction when creating a router.
• DVR: Race condition processing floating IP addresses fixed. Empty FIP namespaces are now properly cleaned up. Ensure a Floating IP address is served via single namespace. Fixed OVS agent startup failure due to race condition in RPC message processing.
• API: Green threads are now properly released into pool when connections are stalled.
• Plugin updates for Arista, Bigswitch, Cisco APIC, VMWare NSX. (BZ#1188392)
• Previously, policy initialization was performed before the required information became available. Consequently, information and operations dependent on component-specific policy validation was not available.

This update addresses this issue by ensuring policies are initialized only after the required information is available, and re-initializing if necessary.
As a result, information and operations that rely on component specific policy check information, and supporting operations, now behave as expected. (BZ#1180265)

Solution

Before applying this update, ensure all previously released errata
relevant to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 6 runs on Red Hat
Enterprise Linux 7.1.

This update is available through 'yum update' on systems registered
through Red Hat Subscription manager. For more information about
Red Hat Subscription manager, refer to:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Red Hat Enterprise Linux OpenStack Platform 6 documentation is available
at:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform

The Release Notes include:

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack

Platform 6, including which channels need to be enabled and disabled.

Affected Products

• Red Hat OpenStack 6.0 x86_64

Fixes

• BZ - 1173451 - neutron-openvswitch-agent does not quit
• BZ - 1174091 - DB corruption when starting multiple neutron-server for the first time at once.
• BZ - 1178027 - It takes too much time for L3 agent to make router active ( about 2 minutes ).
• BZ - 1181041 - stopping neutron-server causes exception when stopping rpc workers
• BZ - 1188392 - Rebase openstack-neutron to 2014.2.2
• BZ - 1191922 - ovs-agent restart or ovs restart can cause a network storm bringing down the net

CVEs

(none)

References

(none)