RHBA-2024:1975 - Bug Fix Advisory

Topic

An update for ovn23.09 is now available in Fast Datapath for Red Hat Enterprise Linux 9

Description

OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.

Bug Fix(es) and Enhancement(s).

• CLONE - Session Affinity + ETP=Local does not work for services of type NodePorts and LoadBalancers (JIRA:FDP-343)
• CLONE - OVN SNAT external_port_range doesn't randomize ports (JIRA:FDP-353)
• CLONE - Auto last hop behavior not working with ipv6 (ecmp-symmetric-reply) (JIRA:FDP-371)
• CLONE - unSNAT ICMP needs frag not working with OVN-Kubernetes (JIRA:FDP-372)
• CLONE - something wrong with addr for ICMP "needs fragmentation" message when SNAT is configured (JIRA:FDP-373)
• CLONE - it would take longer to show lsp in ovn-sbctl (JIRA:FDP-382)
• CLONE - OVN DNS responder broken with EDNS/AR (additional records) (JIRA:FDP-390)
• ovn-controller hangs with a lot of meters (JIRA:FDP-399)
• ovn-northd creates unused meters for ACLs with logging disabled (JIRA:FDP-401)
• CLONE [ovn23.09 fast-datapath-rhel-9] - OVN routers should unSNAT before attempting to load balance (JIRA:FDP-453)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 9 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 9 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 9 s390x
• Red Hat Enterprise Linux Fast Datapath (for RHEL for ARM 64) 9 aarch64

Fixes

• FDP-343 - CLONE - Session Affinity + ETP=Local does not work for services of type NodePorts and LoadBalancers
• FDP-353 - CLONE - OVN SNAT external_port_range doesn't randomize ports
• FDP-371 - CLONE - Auto last hop behavior not working with ipv6 (ecmp-symmetric-reply)
• FDP-372 - CLONE - unSNAT ICMP needs frag not working with OVN-Kubernetes
• FDP-373 - CLONE - something wrong with addr for ICMP "needs fragmentation" message when SNAT is configured
• FDP-382 - CLONE - it would take longer to show lsp in ovn-sbctl
• FDP-390 - CLONE - OVN DNS responder broken with EDNS/AR (additional records)
• FDP-399 - ovn-controller hangs with a lot of meters
• FDP-401 - ovn-northd creates unused meters for ACLs with logging disabled
• FDP-453 - CLONE [ovn23.09 fast-datapath-rhel-9] - OVN routers should unSNAT before attempting to load balance

CVEs

(none)

References

(none)