[Bug 1967718] Re: Traffic sent to LRP port recirculate until TTL=0

[Brian Murray]

Ubuntu 23.10 (Mantic Minotaur) has reached end of life, so this bug will
not be fixed for that specific release.

** Changed in: ovn (Ubuntu Mantic)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1967718

Title:
  Traffic sent to LRP port recirculate until TTL=0

Status in Ubuntu Cloud Archive:
  New
Status in Ubuntu Cloud Archive antelope series:
  New
Status in Ubuntu Cloud Archive bobcat series:
  New
Status in Ubuntu Cloud Archive caracal series:
  New
Status in Ubuntu Cloud Archive ovn-22.03 series:
  New
Status in Ubuntu Cloud Archive yoga series:
  New
Status in Ubuntu Cloud Archive zed series:
  New
Status in ovn package in Ubuntu:
  Fix Released
Status in ovn source package in Jammy:
  New
Status in ovn source package in Mantic:
  Won't Fix
Status in ovn source package in Noble:
  Fix Released

Bug description:
  When TCP/UDP traffic is sent to the address of an LRP port and at the
  same time is not part of any SNAT/DNAT conversation, it will keep
  recirculating in the OVS data plane until TTL is 0.

  When the packet eventually drops, you might get this message logged:

  [   58.586597] openvswitch: ovs-system: deferred action limit reached,
  drop recirc action

  This behavior is problematic because it wastes resources and could
  also trigger other potential problems in the data plane quite quickly
  [0]. For any internet connected system it is also highly likely to
  occur.

  As mentioned above the LRP address is used for both SNAT return
  traffic and DNAT forwarding, so we would need to allow that traffic to
  pass and at the same time install flows to prevent this from
  happening.

  0: https://mail.openvswitch.org/pipermail/ovs-
  discuss/2022-March/051780.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1967718/+subscriptions