openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests/unit/agent/l3
History
Swaminathan Vasudevan eded5d2d6a Packets getting lost during SNAT with too many connections 
We have a problem with SNAT with too many connections using the
same source and destination on the network nodes.

In addition we can see in the conntrack table that the who
"instert_failed" increases.

This might be a generic problem with conntrack and linux.
We suspect that we encounter the following "limitation / bug"
in the kernel.

There seems to be a workaround to alleviate this behavior by
setting the -random-fully flag in iptables for port consumption.

This patch fixes the problem by adding the --random-fully to
the SNAT rules.

Conflicts:
    neutron/agent/linux/iptables_manager.py
    neutron/common/constants.py
    neutron/tests/unit/agent/l3/test_agent.py

Change-Id: I246c1f56df889bad9c7e140b56c3614124d80a19
Closes-Bug: #1814002
(cherry picked from commit 30f35e08f9)
 		2019-05-20 17:39:47 -04:00
..
extensions remove neutron.common.rpc 2019-02-06 11:05:55 -07:00
__init__.py Move extra routes processing to router classes 2015-02-05 10:25:45 -05:00
test_agent.py Packets getting lost during SNAT with too many connections 2019-05-20 17:39:47 -04:00
test_dvr_fip_ns.py DVR: Correctly change MTU in fip namespace 2019-04-12 19:17:30 +00:00
test_dvr_local_router.py Packets getting lost during SNAT with too many connections 2019-05-20 17:39:47 -04:00
test_dvr_snat_ns.py Switch ip link command to pyroute2 2018-03-24 22:42:00 +00:00
test_fip_rule_priority_allocator.py Merge "Removed unnecessary setUp calls in tests" 2017-08-29 23:57:56 +00:00
test_ha_router.py filter "updated_at" and "revision_number" in _gateway_ports_equal 2018-11-20 10:11:24 +08:00
test_item_allocator.py DVR: Check for item_allocator key before releasing 2018-04-04 11:47:41 -07:00
test_l3_agent_extension_api.py Add iptables metadata marking rule on router init 2017-12-19 10:07:33 -05:00
test_legacy_router.py Remove deprecated send_arp_for_ha option 2017-04-18 13:38:35 -04:00
test_link_local_allocator.py Preserve DVR FIP rule priority over Agent restarts 2015-08-12 15:52:19 -05:00
test_namespace_manager.py Change ip_lib network namespace code to use pyroute2 2017-10-04 21:09:28 +00:00
test_router_info.py Fix update of ports cache in router_info class 2019-02-07 15:49:59 +01:00