RHBA-2019:0029 - Bug Fix Advisory

Topic

Updated openvswitch2.10 packages that fix several bugs and add various enhancements are now available in Fast Datapath for Red Hat Enterprise Linux 7.

Description

Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.

This update fixes the following bugs:

• OVN: Fixed the issue caused by a duplicate MAC address. As a result, a logical child interface can get an IPv6 address by Dynamic Host Configuration Protocol (DHCP), and the IPv6 traffic can be forwarded on it. (BZ#1616129)
• Backported "VF Tx error issue" fix to OvS 2.10 (BZ#1637893)
• Fixed: Cannot boot instance on OVN HA deployment Triaged (BZ#1639963)
• Fixed: "ovn-nbctl - LBs - daemon" test always fails on mock / brew (BZ#1641672)
• ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion (BZ#1643065)
• Fixed: updelay and downdelay settings ignored for OVS bonds (BZ#1646923)
• Fixed: OVS restart causes problems to router and DHCP ports (BZ#1657946)
• Fixed: cannot shut down bond members and ports with OVS DPDK (BZ#1658312)
• Fixed: Open vSwitch ovs-vswitchd startup time increased significantly in minor versions larger than -63 (BZ#1658320)

In addition, this update adds the following enhancements:

• This update adds the ct_lb action in the ovn-trace utility. As a result, it is now possible to test and debug load balancing rules in OVN with the ovn-trace command. (BZ#1635344)
• This update places the first packet of the connection in a queue in the OVN logical router. As a result, the first packet of the connection is properly forwarded to the destination device after the next hop MAC address is successfully resolved. (BZ#1637466)
• This update adds the possibility to specify an OUI for MAC addresses dynamically allocated by OVN. As a result, users can specify an OUI for each OVN deployment to avoid MAC address collisions. (BZ#1647750)
• This update introduces a deterministic relationship between IP and MAC addresses dynamically allocated by OVN. As a result, the POD is always reachable even if it gets a new IP address from OVN. (BZ#1648272)

Users of openvswitch2.10 are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 7 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7 ppc64le

Fixes

• BZ - 1616129 - [ovn]ipv6 scope global tentative dadfailed on child interface
• BZ - 1635344 - ovn-trace: ct_lb action not implemented
• BZ - 1637466 - ping loss of first packet with OVN l3 logical router.
• BZ - 1637893 - Backport "VF Tx error issue" fix to OvS 2.10
• BZ - 1639963 - [OVN-OSP14] Cannot boot instance on OVN HA deployment
• BZ - 1641672 - "ovn-nbctl - LBs - daemon" test always fails on mock / brew
• BZ - 1643065 - [OVS 2.10] ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion.
• BZ - 1646923 - Errata needed for OVS bonds, updelay/downdelay settings ignored
• BZ - 1647750 - OVN: configurable dynamic mac range
• BZ - 1648272 - OVN support for deterministic MAC addresses
• BZ - 1658320 - Open vSwitch ovs-vswitchd startup time increased significantly in minor versions larger than -63

CVEs

(none)

References

(none)