OpenStack Networking (Neutron)
Go to file
Swaminathan Vasudevan 30f35e08f9 Packets getting lost during SNAT with too many connections
We have a problem with SNAT with too many connections using the
same source and destination on the network nodes.

In addition we can see in the conntrack table that the who
"instert_failed" increases.

This might be a generic problem with conntrack and linux.
We suspect that we encounter the following "limitation / bug"
in the kernel.

There seems to be a workaround to alleviate this behavior by
setting the -random-fully flag in iptables for port consumption.

This patch fixes the problem by adding the --random-fully to
the SNAT rules.

Change-Id: I246c1f56df889bad9c7e140b56c3614124d80a19
Closes-Bug: #1814002
2019-04-12 10:12:04 -04:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00
devstack Devstack plugin for network-segment-range api 2019-03-10 03:37:51 +00:00
doc remove neutron.common.constants 2019-04-04 14:10:26 -06:00
etc Add rootwrap filters to kill state change monitor 2019-03-13 07:40:15 -07:00
neutron Packets getting lost during SNAT with too many connections 2019-04-12 10:12:04 -04:00
playbooks Replace openstack.org git:// URLs with https:// 2019-03-25 11:31:17 +01:00
rally-jobs Merge "rally-jobs: Add FloatingIP workloads: assoc/dissoc" 2019-03-01 21:24:43 +00:00
releasenotes Merge "Change default local ovs connection timeout" 2019-04-05 04:18:55 +00:00
roles Remove "msg" from tasks in ansible roles 2019-03-20 13:46:17 +01:00
tools Add method to tox to use local neutron-lib with unit tests 2019-03-02 14:56:15 -07:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore [Configuration] Clean up .gitignore references to personal tools 2019-01-31 16:17:38 +01:00
.gitreview Fix .gitreview to not point at a branch 2015-08-17 13:51:51 -06:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Fix pylint R1717 (consider-using-dict-comprehension) refactor messages 2019-03-14 23:19:58 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2017-09-12 14:20:12 -06:00
.zuul.yaml Merge "Revert "Switch all grenade jobs to be non voting and non gating temporary"" 2019-04-11 18:11:56 +00:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
bindep.txt Add libffi-dev to bindep.txt 2017-06-13 19:26:49 +00:00
CONTRIBUTING.rst Update link for contribution 2017-08-31 16:44:51 +02:00
HACKING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
lower-constraints.txt Remove oslosphinx from lower-constraints 2019-04-03 07:18:05 +00:00
README.rst Update mailinglist from dev to discuss 2018-12-12 12:44:12 +08:00
requirements.txt Use dynamic lazy mode for fetching security group rules 2019-03-14 16:23:53 -06:00
setup.cfg Drive binding by placement allocation 2019-03-09 22:03:51 +00:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Bump pylint version to one that supports python3.7 2019-02-21 13:22:26 +00:00
TESTING.rst Replace openstack.org git:// URLs with https:// 2019-03-25 11:31:17 +01:00
tox.ini Add method to tox to use local neutron-lib with unit tests 2019-03-02 14:56:15 -07:00

Team and repository tags

image

Welcome!

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst