RHBA-2024:0391 - Bug Fix Advisory

Topic

An update for ovn23.06 is now available in Fast Datapath for Red Hat Enterprise Linux 9.

Description

OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and
security groups.

Bug Fix(es) and Enhancement(s):

• "SNAT in separate zone from DNAT" test fails due to OVN issues (BZ#2203013)
• mirror doesn't work when remote is ipv6 (BZ#2203017)
• ACL subnet exclusion is not optimally traslated to ovs flows (BZ#2203018)
• Set qos_min_rate to port with representator to support min QoS hw-offload (BZ#2208426)
• [RFE] Support for hierarchical ACLs, implement skip ACLs to jump to next hierarchy (BZ#2208427)
• Unable to set qos_max_rate higher than 4 Gbps (BZ#2208429)
• Localnet port traffic is not load balanced on the localnet switch. (BZ#2208730)
• ovn-controller forgets to install flows upon OFPBFC_TIMEOUT (BZ#2211292)
• [OVN] Wrong log message "|WARN|handle service check: Unsupported protocol - [11]" for udp load_balancer healthe check (BZ#2216321)
• ovn-northd: Address set sync from NB DB to SB DB is not working when address has a prefix (BZ#2216323)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 9 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 9 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 9 s390x
• Red Hat Enterprise Linux Fast Datapath (for RHEL for ARM 64) 9 aarch64

Fixes

• BZ - 2203013 - "SNAT in separate zone from DNAT" test fails due to OVN issues
• BZ - 2203017 - mirror doesn't work when remote is ipv6
• BZ - 2203018 - ACL subnet exclusion is not optimally traslated to ovs flows
• BZ - 2208426 - Set qos_min_rate to port with representator to support min QoS hw-offload
• BZ - 2208427 - [RFE] Support for hierarchical ACLs, implement skip ACLs to jump to next hierarchy
• BZ - 2208429 - Unable to set qos_max_rate higher than 4 Gbps
• BZ - 2208730 - Localnet port traffic is not load balanced on the localnet switch.
• BZ - 2211292 - ovn-controller forgets to install flows upon OFPBFC_TIMEOUT
• BZ - 2216321 - [OVN] Wrong log message "|WARN|handle service check: Unsupported protocol - [11]" for udp load_balancer healthe check
• BZ - 2216323 - ovn-northd: Address set sync from NB DB to SB DB is not working when address has a prefix

CVEs

(none)

References

(none)