RHBA-2021:0836 - Bug Fix Advisory

Topic

An update for ovn2.13 is now available in Fast Datapath for Red Hat Enterprise Linux 7.

Description

OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.

Bug Fix(es) and Enhancement(s):

• [RFE] ovn-controller should be able to indicate when changes have been successfully propagated (BZ#1839102)
• [RFE] Add support for BFD from OVN routers to other directly connected L3 devices (BZ#1847570)
• the first packet after mac_binding is destroyed won't be marked (BZ#1857106)
• [OVN SCALE] Combine Logical Flows inside Southbound DB. (BZ#1877002)
• Explicitly specify the SNAT IP for Hairpinned traffic (BZ#1908540)
• ovn-trace fails to parse empty_lb_backends (BZ#1909650)
• [ovn-controller] Crash when moving container parent port to a different logical switch. (BZ#1914304)
• Add IPv6 support to OVN BFD implemetation (BZ#1915739)
• ovn-nbctl lr-route-list does not show the route is type ECMP/BFD (BZ#1915958)
• High number of flows on large Scale OpenShift Environments with number of services/pods (BZ#1917875)
• [OVN] ovn-ctl should have an option to pass --disable-file-column-diff to ovsdb-server (BZ#1917979)
• [OVN] ACL fair log meters for Port_Group ACLs is not complete (BZ#1918004)
• empty-lb-events does not take effect for existing load-balancers (BZ#1918422)
• ovn-northd would crash if add the same logical switch port into two logical switch (BZ#1918582)
• Allow adding bfd uuid/name to the lr-route-add command (BZ#1918997)
• ovn-northd would crash if set name for logical_switch_port the same as name for logical_router_port (BZ#1919055)
• Traffic is broken for ACLs which results in conjunctive OF flows (BZ#1919812)
• [ovn-controller] Backport Port_Binding.up fixes for container ports and upgrade. (BZ#1926165)
• [OVN]ipv4/ipv6 flows are marked ct flags without any acl attached to ports (BZ#1927211)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 7 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7 s390x

Fixes

• BZ - 1839102 - [RFE] ovn-controller should be able to indicate when changes have been successfully propagated
• BZ - 1847570 - [RFE] Add support for BFD from OVN routers to other directly connected L3 devices
• BZ - 1857106 - the first packet after mac_binding is destroyed won't be marked
• BZ - 1877002 - [OVN SCALE] Combine Logical Flows inside Southbound DB.
• BZ - 1908540 - Explicitly specify the SNAT IP for Hairpinned traffic
• BZ - 1909650 - ovn-trace fails to parse empty_lb_backends
• BZ - 1914304 - [ovn-controller] Crash when moving container parent port to a different logical switch.
• BZ - 1915739 - Add IPv6 support to OVN BFD implemetation
• BZ - 1915958 - ovn-nbctl lr-route-list does not show the route is type ECMP/BFD
• BZ - 1917875 - High number of flows on large Scale OpenShift Environments with number of services/pods
• BZ - 1917979 - [OVN] ovn-ctl should have an option to pass --disable-file-column-diff to ovsdb-server
• BZ - 1918004 - [OVN] ACL fair log meters for Port_Group ACLs is not complete
• BZ - 1918422 - empty-lb-events does not take effect for existing load-balancers
• BZ - 1918582 - ovn-northd would crash if add the same logical switch port into two logical switch
• BZ - 1918997 - Allow adding bfd uuid/name to the lr-route-add command
• BZ - 1919055 - ovn-northd would crash if set name for logical_switch_port the same as name for logical_router_port
• BZ - 1919812 - Traffic is broken for ACLs which results in conjunctive OF flows
• BZ - 1926165 - [ovn-controller] Backport Port_Binding.up fixes for container ports and upgrade.
• BZ - 1927211 - [OVN]ipv4/ipv6 flows are marked ct flags without any acl attached to ports

CVEs

(none)

References

(none)