RHBA-2020:2317 - Bug Fix Advisory

Topic

An update for ovn2.13 is now available in Fast Datapath for Red Hat Enterprise Linux 7.

Description

OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.

Bug Fix(es) and Enhancement(s):

• [RFE][OVN] IPv6 multicast snooping support (MLD) (BZ#1757716)
• ovn-nbctl --daemon --pidfile will create file under path /var/run/openvswitch/,but ovn 2.12 is seperated from ovs now (BZ#1778016)
• health check for load balance doesn't work if ip is not set for logical switch port (BZ#1801058)
• [2.13]fail to ping6 FIP on external namespace after destroy mac_binding of external ipv6 with ovn-sbctl (BZ#1815009)
• [OVN] QoS rules share the same Openflow meter (BZ#1817606)
• [ovn2.13]dns should not be case sensitive (BZ#1819069)
• ovn_controller crashes after setup is up for a day (BZ#1819604)
• HAProxy Router performance is off with OVNKubernetes as SDN on OCP 4.3.9 deployed on AWS (BZ#1819785)
• Add param to configure ovsdb replication probe interval (BZ#1822859)
• RFE: OVN - Support IPv6 Prefix Delegation (BZ#1823226)
• OVN doesn't allow TCP reset or ICMP unreachable packets when caller has no ingress ACL configured (BZ#1823755)
• ovs-vswitchd crashes with segmentation fault due to packet loop in OVN (BZ#1825334)
• ovn won't generate ipv6_prefix when receive prefix delegation packet without status code present (BZ#1826623)
• ipv6_prefix can't be cleared even stop prefix delegation (BZ#1826683)
• ipv6 prefix delegation solicit would still be sent even set logical router port as enabled=false (BZ#1827084)
• ovn should discards any prefixes for which the preferred lifetime is greater than the valid lifetime (BZ#1827090)
• Explosion of logical flows in sb database after scaling to 100 nodes because of pre-hairpin changes (BZ#1827403)
• ovn-northd does not release memory after cleanup (BZ#1827769)
• [Telco] northd: detect and correct DB consistency and referential integrity issues (BZ#1828637)
• payload for icmp6 reply is not as expected when reject acl is added (BZ#1834655)
• Error with large openflow messages (BZ#1838166)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 7 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7 s390x

Fixes

• BZ - 1757716 - [RFE][OVN] IPv6 multicast snooping support (MLD)
• BZ - 1778016 - ovn-nbctl --daemon --pidfile will create file under path /var/run/openvswitch/,but ovn 2.12 is seperated from ovs now
• BZ - 1801058 - health check for load balance doesn't work if ip is not set for logical switch port
• BZ - 1815009 - [2.13]fail to ping6 FIP on external namespace after destroy mac_binding of external ipv6 with ovn-sbctl
• BZ - 1817606 - [OVN] QoS rules share the same Openflow meter
• BZ - 1819069 - [ovn2.13]dns should not be case sensitive
• BZ - 1819604 - ovn_controller crashes after setup is up for a day
• BZ - 1819785 - HAProxy Router performance is off with OVNKubernetes as SDN on OCP 4.3.9 deployed on AWS
• BZ - 1822859 - Add param to configure ovsdb replication probe interval
• BZ - 1823226 - RFE: OVN - Support IPv6 Prefix Delegation
• BZ - 1823755 - OVN doesn't allow TCP reset or ICMP unreachable packets when caller has no ingress ACL configured
• BZ - 1825334 - ovs-vswitchd crashes with segmentation fault due to packet loop in OVN
• BZ - 1826623 - ovn won't generate ipv6_prefix when receive prefix delegation packet without status code present
• BZ - 1826683 - ipv6_prefix can't be cleared even stop prefix delegation
• BZ - 1827084 - ipv6 prefix delegation solicit would still be sent even set logical router port as enabled=false
• BZ - 1827090 - ovn should discards any prefixes for which the preferred lifetime is greater than the valid lifetime
• BZ - 1827403 - Explosion of logical flows in sb database after scaling to 100 nodes because of pre-hairpin changes
• BZ - 1827769 - ovn-northd does not release memory after cleanup
• BZ - 1828637 - [Telco] northd: detect and correct DB consistency and referential integrity issues
• BZ - 1834655 - payload for icmp6 reply is not as expected when reject acl is added
• BZ - 1838166 - Error with large openflow messages

CVEs

(none)

References

(none)