openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests/unit/agent
History
Swaminathan Vasudevan eded5d2d6a Packets getting lost during SNAT with too many connections 
We have a problem with SNAT with too many connections using the
same source and destination on the network nodes.

In addition we can see in the conntrack table that the who
"instert_failed" increases.

This might be a generic problem with conntrack and linux.
We suspect that we encounter the following "limitation / bug"
in the kernel.

There seems to be a workaround to alleviate this behavior by
setting the -random-fully flag in iptables for port consumption.

This patch fixes the problem by adding the --random-fully to
the SNAT rules.

Conflicts:
    neutron/agent/linux/iptables_manager.py
    neutron/common/constants.py
    neutron/tests/unit/agent/l3/test_agent.py

Change-Id: I246c1f56df889bad9c7e140b56c3614124d80a19
Closes-Bug: #1814002
(cherry picked from commit 30f35e08f9)
 		2019-05-20 17:39:47 -04:00
..
common Class to represent Placement state and sync 2019-02-21 14:06:26 +01:00
dhcp Dynamically increase DHCP process queue green pool size 2019-03-21 21:55:04 +00:00
l2 Add QoS minimum egress bandwidth rule into ovs-agent 2019-02-26 11:05:04 +00:00
l3 Packets getting lost during SNAT with too many connections 2019-05-20 17:39:47 -04:00
linux Merge "Try to enable dnsmasq process several times" into stable/stein 2019-04-07 02:52:39 +00:00
metadata Switch isolated metadata proxy to bind to 169.254.169.254 2019-01-30 14:17:43 +00:00
ovsdb Add native OVSDB implementation for bridge monitor 2018-12-03 16:09:06 +00:00
windows remove neutron.common.exceptions 2019-02-01 14:35:00 -07:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
test_agent_extensions_manager.py Refactoring config options for l2 agent ext opts 2016-11-21 19:45:04 +00:00
test_resource_cache.py Merge "Fix race condition with enabling SG on many ports at once" 2018-01-27 10:36:37 +00:00
test_rpc.py remove neutron.common.rpc 2019-02-06 11:05:55 -07:00
test_securitygroups_rpc.py Divide-and-conquer security group beasts 2019-04-02 14:30:25 +00:00