RHBA-2024:0388 - Bug Fix Advisory

Topic

An update for ovn23.06 is now available in Fast Datapath for Red Hat Enterprise Linux 8.

Description

OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and
security groups.

Bug Fix(es) and Enhancement(s):

• Set qos_min_rate to port with representator to support min QoS hw-offload (BZ#2129742)
• [RFE] Support for hierarchical ACLs, implement skip ACLs to jump to next hierarchy (BZ#2134138)
• "SNAT in separate zone from DNAT" test fails due to OVN issues (BZ#2161281)
• Localnet port traffic is not load balanced on the localnet switch. (BZ#2164652)
• ACL subnet exclusion is not optimally traslated to ovs flows (BZ#2177197)
• "SNAT in separate zone from DNAT" test fails due to OVN issues (BZ#2203012)
• mirror doesn't work when remote is ipv6 (BZ#2203016)
• Unable to set qos_max_rate higher than 4 Gbps (BZ#2208428)
• ovn-controller forgets to install flows upon OFPBFC_TIMEOUT (BZ#2211291)
• [OVN] Wrong log message "|WARN|handle service check: Unsupported protocol - [11]" for udp load_balancer healthe check (BZ#2216320)
• ovn-northd: Address set sync from NB DB to SB DB is not working when address has a prefix (BZ#2216322)
• [ovn-controller] nb_cfg value over a certain value causes erroneous update to SB DB (BZ#2223475)
• Investigate failure WARN in "load-balancer template IPv4/IPv6" system tests (BZ#2226632)
• ovn-controller replace CT zone UUID names with LR/LS names (BZ#2227122)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 8 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 8 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 8 s390x
• Red Hat Enterprise Linux Fast Datapath (for RHEL for ARM 64) 8 aarch64

Fixes

• BZ - 2129742 - Set qos_min_rate to port with representator to support min QoS hw-offload
• BZ - 2134138 - [RFE] Support for hierarchical ACLs, implement skip ACLs to jump to next hierarchy
• BZ - 2161281 - "SNAT in separate zone from DNAT" test fails due to OVN issues
• BZ - 2164652 - Localnet port traffic is not load balanced on the localnet switch.
• BZ - 2177197 - ACL subnet exclusion is not optimally traslated to ovs flows
• BZ - 2203012 - "SNAT in separate zone from DNAT" test fails due to OVN issues
• BZ - 2203016 - mirror doesn't work when remote is ipv6
• BZ - 2208428 - Unable to set qos_max_rate higher than 4 Gbps
• BZ - 2211291 - ovn-controller forgets to install flows upon OFPBFC_TIMEOUT
• BZ - 2216320 - [OVN] Wrong log message "|WARN|handle service check: Unsupported protocol - [11]" for udp load_balancer healthe check
• BZ - 2216322 - ovn-northd: Address set sync from NB DB to SB DB is not working when address has a prefix
• BZ - 2223475 - [ovn-controller] nb_cfg value over a certain value causes erroneous update to SB DB
• BZ - 2226632 - Investigate failure WARN in "load-balancer template IPv4/IPv6" system tests
• BZ - 2227122 - ovn-controller replace CT zone UUID names with LR/LS names

CVEs

(none)

References

(none)