owned this note
owned this note
Published
Linked with GitHub
# NFTABLES testing results
###### tags: `DF`
---
# Pending Patches
- [X] https://review.opendev.org/c/openstack/tripleo-ansible/+/856487
- [X] https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096
- [X] https://review.opendev.org/c/openstack/tripleo-quickstart/+/857128
- [ ] [Switch default firewall engine](https://review.opendev.org/c/openstack/tripleo-heat-templates/+/852808)
- [ ] [Remove final DROP rule](https://review.opendev.org/c/openstack/tripleo-ansible/+/853282) (needed in order to avoid potential issues)
- [ ] [Allow all state for selected ironic services](https://review.opendev.org/c/openstack/tripleo-heat-templates/+/851962) (cleaner log, not a blocker)
* Testproject: https://review.rdoproject.org/r/c/testproject/+/31954
---
# Test results
### Vanila Standalone - Green
periodic-tripleo-ci-centos-9-standalone-master https://review.rdoproject.org/zuul/build/3b8f4d0ffcaf41198edf28f4d3da3f86 : SUCCESS in 1h 23m 58s
Confirm its using nftables: https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-standalone-master/3b8f4d0/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some drops observed for **port 67 and 19885**:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-standalone-master/3b8f4d0/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 18 16:34:02 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:56:fb:5f MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 18 16:34:34 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:11:24:d8 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.73 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=7328 DF PROTO=TCP SPT=61239 DPT=19885 SEQ=3043520861 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A22546DFD0000000001030307)
~~~
### Sc01 - Green
periodic-tripleo-ci-centos-9-scenario001-standalone-master https://review.rdoproject.org/zuul/build/aea756b86c39451fa715d02020748e5f : SUCCESS in 1h 47m 43s
Confirm its using nftables: https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario001-standalone-master/aea756b/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some drops observed for **port 8472, 67 and 19885**:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario001-standalone-master/aea756b/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 18 16:03:44 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:98:bd:5c MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 18 16:53:46 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:91:56:fe MACDST=01:00:5e:00:00:01 MACPROTO=0800 SRC=38.102.83.101 DST=224.0.0.1 LEN=146 TOS=0x00 PREC=0x00 TTL=1 ID=37581 PROTO=UDP SPT=43804 DPT=8472 LEN=126
Aug 18 16:55:45 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:b8:e0:1d MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.180 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=1704 DF PROTO=TCP SPT=21585 DPT=19885 SEQ=1212536287 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A2267D3770000000001030307)
~~~
### Sc02 - Green
periodic-tripleo-ci-centos-9-scenario002-standalone-master https://review.rdoproject.org/zuul/build/a46f888351674276b15ab06863ee3792 : SUCCESS in 1h 35m 56s
Confirm its using tables:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario002-standalone-master/a46f888/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some dropped observed for **port 67 and 19885**:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario002-standalone-master/a46f888/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 18 16:34:02 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:56:fb:5f MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 18 16:44:48 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:c2:34:4b MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.5 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=12193 DF PROTO=TCP SPT=23847 DPT=19885 SEQ=2219892957 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A225DCF7C0000000001030307)
~~~
### Sc03 - Green
periodic-tripleo-ci-centos-9-scenario003-standalone-master https://review.rdoproject.org/zuul/build/67264ef9044c46fcb4d509c665b20f1a : FAILURE in 41m 30s
Failed during deployment:
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario003-standalone-master/490d522/logs/undercloud/home/zuul/standalone_deploy.log.txt.gz
~~~
2022-08-22 01:12:48.296352 | fa163ebc-f723-0e94-efea-00000000099b | FATAL | Validate all of the generated content before loading | standalone | error={"changed": true, "cmd": "cat /etc/nftables/tripleo-chains.nft /etc/nftables/tripleo-flushes.nft /etc/nftables/tripleo-rules.nft /etc/nftables/tripleo-update-jumps.nft /etc/nftables/tripleo-jumps.nft | nft -c -f -", "delta": "0:00:00.017442", "end": "2022-08-22 01:12:48.271855", "msg": "non-zero return code", "rc": 1, "start": "2022-08-22 01:12:48.254413", "stderr": "/dev/stdin:35:46-58: Error: mapping outside of map context\nadd rule inet filter TRIPLEO_INPUT tcp dport { 16000:16000 } ct state new counter accept comment \"100 designate_mdns proxies\"\n ^^^^^^^^^^^^^", "stderr_lines": ["/dev/stdin:35:46-58: Error: mapping outside of map context", "add rule inet filter TRIPLEO_INPUT tcp dport { 16000:16000 } ct state new counter accept comment \"100 designate_mdns proxies\"", " ^^^^^^^^^^^^^"], "stdout": "", "stdout_lines": []}
~~~
Cedric have proposed a possible fix: Simplify dport writing, transform port list syntaxe https://review.opendev.org/c/openstack/tripleo-ansible/+/853934
Passed with depends on above
* periodic-tripleo-ci-centos-9-scenario003-standalone-master https://review.rdoproject.org/zuul/build/66dc4992bcef45b38c7a4490d727027e : SUCCESS in 57m 11s
confirm its using nftables
https://logserver.rdoproject.org/54/31954/73/check/periodic-tripleo-ci-centos-9-scenario003-standalone-master/66dc499/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some packet drop observed for **port 67 and 19885**:
https://logserver.rdoproject.org/54/31954/73/check/periodic-tripleo-ci-centos-9-scenario003-standalone-master/66dc499/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 22 14:12:29 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:a8:a1:4c MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 22 14:12:53 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:b1:19:71 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.32 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=17726 DF PROTO=TCP SPT=26562 DPT=19885 SEQ=3238289563 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A366C25A50000000001030307)
~~~
### Sc04 - Green
periodic-tripleo-ci-centos-9-scenario004-standalone-master https://review.rdoproject.org/zuul/build/fe5123672f8745d7a91c43217ff56c09 : SUCCESS in 1h 31m 43s
Confirm its using nftables:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario004-standalone-master/fe51236/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some packet drop observed for **port 67 and 19885**:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario004-standalone-master/fe51236/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 18 16:34:02 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:56:fb:5f MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 18 16:43:04 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:9d:fa:b6 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.65 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=38336 DF PROTO=TCP SPT=14020 DPT=19885 SEQ=1988603167 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A225C38DF0000000001030307)
~~~
### Sc07 - Green
periodic-tripleo-ci-centos-9-scenario007-standalone-master https://review.rdoproject.org/zuul/build/50f7e6e095934ed79b276a0a81ad8c73 : SUCCESS in 1h 10m 56s
Confirm its using nftables:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario007-standalone-master/50f7e6e/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some packet drop observed for port **19885**:
~~~
Aug 18 16:23:01 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:d8:ea:96 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.208 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=55278 DF PROTO=TCP SPT=50461 DPT=19885 SEQ=1522481146 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A2249E0140000000001030307)
~~~
### Sc010 - Green
periodic-tripleo-ci-centos-9-scenario010-kvm-standalone-master https://review.rdoproject.org/zuul/build/60231882abb640639303ff63f3ee41b7 : SUCCESS in 1h 21m 34s
Confirm its using nftables:-
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario010-kvm-standalone-master/9dd6123/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some packet drop observed for **port 67 and 19885**:
* https://logserver.rdoproject.org/54/31954/74/check/periodic-tripleo-ci-centos-9-scenario010-kvm-standalone-master/6023188/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 23 08:13:42 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:d8:87:9c MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
.
.
Aug 23 08:14:57 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:cf:2c:8b MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=39392 DF PROTO=TCP SPT=1705 DPT=19885 SEQ=2943568697 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A3A4AD2D90000000001030307)
~~~
### sc010-ovn-provider - Green
periodic-tripleo-ci-centos-9-scenario010-ovn-provider-standalone-master https://review.rdoproject.org/zuul/build/529f993e93cc4386a77b60702f2e9be3 : SUCCESS in 1h 08m 21s
Confirm its using nftables:
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario010-ovn-provider-standalone-master/529f993/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some packet drop observed for **port 67 and 19885**:
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario010-ovn-provider-standalone-master/529f993/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 22 05:43:55 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:44:59:0d MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 22 05:47:34 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:fa:39:48 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.15 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=35766 DF PROTO=TCP SPT=45185 DPT=19885 SEQ=675221485 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A349D845B0000000001030307)
~~~
### Sc012 - Green
periodic-tripleo-ci-centos-9-scenario012-standalone-master https://review.rdoproject.org/zuul/build/5bc224bdb12a4dbaac72fd882d04417b : SUCCESS in 1h 11m 36s (non-voting)
Confirm its using nftables:
https://logserver.rdoproject.org/54/31954/68/check/periodic-tripleo-ci-centos-9-scenario012-standalone-master/5bc224b/logs/undercloud/var/log/extra/nftables.txt.gz
Some drop packet observed for **port 19885**.
~~~
Aug 18 16:21:25 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:33:b3:15 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.246 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=43853 DF PROTO=TCP SPT=31435 DPT=19885 SEQ=1336197741 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A224869200000000001030307)
~~~
### Standalone full-tempest-api - Green
periodic-tripleo-ci-centos-9-standalone-full-tempest-api-master https://review.rdoproject.org/zuul/build/c54479e34b17459eb93885c19ff98ea1 : SUCCESS in 1h 46m 13s
Confirm its using nftables
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-standalone-full-tempest-api-master/c54479e/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some drop packet observed for **ports: 22, 67, 19885**
~~~
Aug 22 05:31:05 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:6a:ae:1d MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 22 05:34:35 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:61:25:a2:5a:71 MACDST=fa:16:3e:28:1b:53 MACPROTO=0800 SRC=116.205.230.173 DST=38.102.83.69 LEN=40 TOS=0x08 PREC=0x20 TTL=34 ID=20776 PROTO=TCP SPT=47566 DPT=22 SEQ=3458109466 ACK=1760837478 WINDOW=0 RES=0x00 ACK RST URGP=0 UID=0 GID=0
Aug 22 06:24:00 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:28:1b:53 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.69 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=37867 DF PROTO=TCP SPT=29699 DPT=19885 SEQ=2628743988 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A34BEE0DF0000000001030307)
~~~
### Standalone-on-multinode-ipa - Green
periodic-tripleo-ci-centos-9-standalone-on-multinode-ipa-master https://review.rdoproject.org/zuul/build/92705189ec3949338bee98a3b38de2c2 : SUCCESS in 1h 25m 14s
Confirm its using nftables
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-standalone-on-multinode-ipa-master/9270518/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some drop packet observed for **port 67 and 19885**
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-standalone-on-multinode-ipa-master/9270518/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 22 06:02:26 standalone-0.ooo.test kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:80:8d:f8 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 22 06:03:03 standalone-0.ooo.test kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:81:f8:51 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.66 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=21008 DF PROTO=TCP SPT=4550 DPT=19885 SEQ=3876906057 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A34ABB6590000000001030307)
~~~
### Standalone full-tempest-scenario - Green
periodic-tripleo-ci-centos-9-standalone-full-tempest-scenario-master https://review.rdoproject.org/zuul/build/bdaea06550a84625ae96c5f4a61ab013 : SUCCESS in 1h 52m 09s
Confirm its using nftables
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-standalone-full-tempest-scenario-master/bdaea06/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some drop packet observed for **port 67 and 19885**
~~~
Aug 22 06:30:17 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:9c:d0:27 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=333 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=313
Aug 22 06:30:21 standalone.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:31:1e:dc MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.27 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=53183 DF PROTO=TCP SPT=13982 DPT=19885 SEQ=2091147502 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A34C4AF510000000001030307)
~~~
### undercloud-containers-master - Green
periodic-tripleo-ci-centos-9-undercloud-containers-master https://review.rdoproject.org/zuul/build/769340c07d624c34b20305ebdcafd6ab : SUCCESS in 47m 35s
Confirm its using nftables
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-undercloud-containers-master/769340c/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some drop packet observed - None :)
### scenario007-multinode-oooq-container-master - Yellow
Consistent failure:-
* periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master https://review.rdoproject.org/zuul/build/863a967ba9494a6397cf7ef18e631082 : FAILURE in 1h 12m 01s
* https://logserver.rdoproject.org/54/31954/75/check/periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master/9f988f8/logs/undercloud/home/zuul/overcloud_deploy.log.txt.gz
~~~
2022-08-24 10:42:49 | node-0002961630 still blocked
2022-08-24 10:42:49 | host: node-0002961630, task: TASK: tripleo_podman : Ensure we get the ansible interfaces facts
2022-08-24 10:42:49 | node-0002961630 still blocked
.
.
2022-08-24 10:55:17 | 2022-08-24 10:55:17.780037 | fa163e0e-0db1-cb8c-580c-000000000a0f | UNREACHABLE | ensure podman and deps are installed | node-0002961630
~~~
Confirm its using nftables
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-scenario007-multinode-oooq-container-master/863a967/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Some drop packet observed for **port 22 / 4789**
~~~
Aug 22 01:56:30 node-0002951643.novalocal kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:b6:e6:15 MACDST=fa:16:3e:ef:22:9c MACPROTO=0800 SRC=38.102.83.8 DST=38.102.83.178 LEN=60 TOS=0x08 PREC=0x40 TTL=64 ID=55233 DF PROTO=TCP SPT=35436 DPT=22 SEQ=3996975210 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A238D19EA0000000001030307)
Aug 22 01:50:54 node-0002951643.novalocal kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:b6:e6:15 MACDST=fa:16:3e:ef:22:9c MACPROTO=0800 SRC=38.102.83.8 DST=38.102.83.178 LEN=78 TOS=0x00 PREC=0x00 TTL=64 ID=60508 DF PROTO=UDP SPT=43150 DPT=4789 LEN=58
~~~
Passed when we add 4789 in OC rules: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/855987/3/ci/environments/scenario007-multinode-containers.yaml
two patches up:
https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096 and https://review.opendev.org/c/openstack/tripleo-quickstart/+/857128
### Undercloud Upgrade job - Green
periodic-tripleo-ci-centos-9-undercloud-upgrade-master https://review.rdoproject.org/zuul/build/9eecd7d039094d94a35df15d090702a7 : SUCCESS in 1h 13m 56s (non-voting)
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-undercloud-upgrade-master/9eecd7d/logs/undercloud/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Dropeed packets for **port 19885:**
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-undercloud-upgrade-master/9eecd7d/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 22 05:54:43 undercloud.localdomain kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:77:13:69 MACDST=fa:16:3e:3f:27:b9 MACPROTO=0800 SRC=38.102.83.114 DST=38.102.83.6 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=58080 DF PROTO=TCP SPT=13158 DPT=19885 SEQ=314371318 ACK=0 WINDOW=28200 RES=0x00 SYN URGP=0 OPT (020405820402080A34A40E160000000001030307)
~~~
### containers-multinode - Green
Confirm its using nftables:-
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-containers-multinode-master/051f3e2/logs/subnode-1/var/log/extra/nftables.txt.gz
~~~
chain TRIPLEO_INPUT
~~~
Dropeed packets for **port 67/22:**
https://logserver.rdoproject.org/54/31954/69/check/periodic-tripleo-ci-centos-9-containers-multinode-master/051f3e2/logs/subnode-1/var/log/extra/dropped-packets.txt.gz
~~~
Aug 22 06:04:10 node-0002951645.novalocal kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:f8:52:51 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=321 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=301
Aug 22 06:08:55 node-0002951645.novalocal kernel: DROPPING: IN=eth0 OUT= MACSRC=fa:16:3e:fa:cd:07 MACDST=fa:16:3e:45:50:1d MACPROTO=0800 SRC=38.102.83.45 DST=38.102.83.39 LEN=60 TOS=0x08 PREC=0x40 TTL=64 ID=20978 DF PROTO=TCP SPT=43066 DPT=22 SEQ=2229197426 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080AF73504DD0000000001030307)
~~~
### OVB fs001 - Green
Some drops on undercloud for **DPT=8088, 6385** and from **SPT=9999**
https://logserver.rdoproject.org/54/31954/77/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset001-master/f75a0d6/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 17:01:30 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:9a:6b:80 MACDST=fa:16:3e:ea:0e:5d MACPROTO=0800 SRC=192.168.24.13 DST=192.168.24.1 LEN=64 TOS=0x00 PREC=0x00 TTL=64 ID=1287 PROTO=TCP SPT=48117 DPT=8088 SEQ=855231347 ACK=0 WINDOW=65532 RES=0x00 SYN URGP=0 OPT (0101080A000017A00000000001010402010303090204051E)
Aug 30 17:05:32 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:07:cd:b3 MACDST=fa:16:3e:ea:0e:5d MACPROTO=0800 SRC=192.168.24.22 DST=192.168.24.3 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=5530 DF PROTO=TCP SPT=49522 DPT=6385 SEQ=1610171612 ACK=93732814 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080A97651BB24749DA7A)
Aug 30 17:08:34 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:20:cb:2a MACDST=fa:16:3e:ea:0e:5d MACPROTO=0800 SRC=192.168.24.23 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=59978 SEQ=2995811719 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
~~~
Some drops on Controller for **SPT=68 DPT=67**
https://logserver.rdoproject.org/54/31954/77/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset001-master/f75a0d6/logs/overcloud-controller-0/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 18:37:02 overcloud-controller-0 kernel: DROPPING: IN=enp7s0 OUT= MACSRC=fa:16:3e:a3:b9:1c MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=329 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=309
~~~
No drops on compute
https://logserver.rdoproject.org/54/31954/77/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset001-master/f75a0d6/logs/overcloud-novacompute-0/var/log/extra/dropped-packets.txt.gz
### OVB fs002 - Green
Some drops on undercloud for **DPT=8088, 6385**
https://logserver.rdoproject.org/54/31954/76/check/periodic-tripleo-ci-centos-9-ovb-1ctlr_1comp-featureset002-master/4fc155b/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 11:43:01 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:29:7a:2f MACDST=fa:16:3e:e2:c1:ce MACPROTO=0800 SRC=192.168.24.30 DST=192.168.24.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=25172 DF PROTO=TCP SPT=52572 DPT=8088 SEQ=1539576817 ACK=0 WINDOW=65500 RES=0x00 SYN URGP=0 OPT (0204051E0402080A8705EBE00000000001030307)
Aug 30 11:44:14 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:c3:2d:77 MACDST=fa:16:3e:e2:c1:ce MACPROTO=0800 SRC=192.168.24.11 DST=192.168.24.3 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=25828 DF PROTO=TCP SPT=52004 DPT=6385 SEQ=1680274558 ACK=969024186 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080AC1744D0C579D3268)
~~~
Some drops on Controller for **SPT=68 DPT=67 and DPT=9999**
https://logserver.rdoproject.org/54/31954/76/check/periodic-tripleo-ci-centos-9-ovb-1ctlr_1comp-featureset002-master/4fc155b/logs/overcloud-controller-0/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 12:20:55 overcloud-controller-0 kernel: DROPPING: IN=enp7s0 OUT= MACSRC=fa:16:3e:3c:42:d9 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=329 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=309
Aug 30 12:22:47 overcloud-controller-0 kernel: DROPPING: IN=enp3s0 OUT= MACSRC=fa:16:3e:e2:c1:ce MACDST=fa:16:3e:c3:2d:77 MACPROTO=0800 SRC=192.168.24.1 DST=192.168.24.11 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=30905 DF PROTO=TCP SPT=34916 DPT=9999 SEQ=3454915026 ACK=838289974 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080A757EBFAB107072BA)
Aug 30 12:22:47 overcloud-controller-0 kernel: DROPPING: IN=enp3s0 OUT= MACSRC=f
~~~
Some drops on Compute for **DPT=9999**
https://logserver.rdoproject.org/54/31954/76/check/periodic-tripleo-ci-centos-9-ovb-1ctlr_1comp-featureset002-master/4fc155b/logs/overcloud-novacompute-0/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 12:23:40 overcloud-novacompute-0 kernel: DROPPING: IN=enp3s0 OUT= MACSRC=fa:16:3e:e2:c1:ce MACDST=fa:16:3e:29:7a:2f MACPROTO=0800 SRC=192.168.24.1 DST=192.168.24.30 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=25215 DF PROTO=TCP SPT=58586 DPT=9999 SEQ=1575820441 ACK=2110666533 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080A3EAE3FAE870769A0)
~~~
### OVB fs020 - Green
Some drops on undercloud for **DPT=8088, 6385**
https://logserver.rdoproject.org/54/31954/76/check/periodic-tripleo-ci-centos-9-ovb-1ctlr_2comp-featureset020-master/72d00f1/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 11:42:55 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:32:93:0c MACDST=fa:16:3e:5d:ca:6f MACPROTO=0800 SRC=192.168.24.15 DST=192.168.24.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=4579 DF PROTO=TCP SPT=55174 DPT=8088 SEQ=1153617493 ACK=0 WINDOW=65500 RES=0x00 SYN URGP=0 OPT (0204051E0402080AE302F2000000000001030307)
Aug 30 11:44:12 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:cd:bb:e9 MACDST=fa:16:3e:5d:ca:6f MACPROTO=0800 SRC=192.168.24.12 DST=192.168.24.3 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=18089 DF PROTO=TCP SPT=55132 DPT=6385 SEQ=170775669 ACK=953508607 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080AC2EE72220BF7D739)
~~~
Some drops on Controller for **SPT=68 DPT=67**
https://logserver.rdoproject.org/54/31954/76/check/periodic-tripleo-ci-centos-9-ovb-1ctlr_2comp-featureset020-master/72d00f1/logs/overcloud-controller-0/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 13:40:08 overcloud-controller-0 kernel: DROPPING: IN=enp7s0 OUT= MACSRC=fa:16:3e:52:8e:85 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=329 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=309
~~~
Some drops on Compute for **SPT=68 DPT=67**
https://logserver.rdoproject.org/54/31954/76/check/periodic-tripleo-ci-centos-9-ovb-1ctlr_2comp-featureset020-master/72d00f1/logs/overcloud-novacompute-0/var/log/extra/dropped-packets.txt.gz
~~~
Aug 30 13:32:11 overcloud-novacompute-0 kernel: DROPPING: IN=enp7s0 OUT= MACSRC=fa:16:3e:1e:13:69 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=329 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=30
~~~
### OVB fs035 - Green
With depends-on: https://review.opendev.org/c/openstack/tripleo-ansible/+/856487
Some drops on Undercloud for **dest port DPT=6385, and some other drops for multiple dest port from source: 9999**
https://logserver.rdoproject.org/54/31954/86/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset035-master/18f2109/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Sep 08 14:06:04 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.3 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=15050 DF PROTO=TCP SPT=40552 DPT=6385 SEQ=3721438724 ACK=1317653088 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080ADB8CDE7FDDBF88ED)
ercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:83:c6:49 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.10 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55586 SEQ=3364560697 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=35998 SEQ=2324244158 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55318 SEQ=1610471816 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:c7:70:c3 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.18 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=60422 SEQ=1413727265 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55318 SEQ=1610471816 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=35998 SEQ=2324244158 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:c7:70:c3 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.18 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=60422 SEQ=1413727265 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:83:c6:49 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.10 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55586 SEQ=3364560697 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:83:c6:49 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.10 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55586 SEQ=3364560697 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=35998 SEQ=2324244158 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55318 SEQ=1610471816 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:43 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:c7:70:c3 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.18 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=60422 SEQ=1413727265 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:46 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:50 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:56 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:11:56 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:83:c6:49 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.10 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55586 SEQ=3364560697 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:10 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:10 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:83:c6:49 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.10 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55586 SEQ=3364560697 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:10 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:c7:70:c3 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.18 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=60422 SEQ=1413727265 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:10 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=35998 SEQ=2324244158 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:36 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:83:c6:49 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.10 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55586 SEQ=3364560697 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:36 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:c7:70:c3 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.18 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=60422 SEQ=1413727265 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:36 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55318 SEQ=1610471816 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:36 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:94:ba:a8 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.6 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=35998 SEQ=2324244158 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 08 14:12:36 undercloud.localdomain kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:84:de:98 MACDST=fa:16:3e:d3:8e:e0 MACPROTO=0800 SRC=192.168.24.20 DST=192.168.24.1 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=9999 DPT=55556 SEQ=3345376647 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
~~~
Some drops on Controller for **SPT=68 DPT=67**
https://logserver.rdoproject.org/54/31954/86/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset035-master/18f2109/logs/overcloud-controller-0/var/log/extra/dropped-packets.txt.gz
~~~
Sep 08 15:37:02 overcloud-controller-2 kernel: DROPPING: IN=enp7s0 OUT= MACSRC=fa:16:3e:85:9e:a9 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=329 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=309
~~~
Compute have some drops **SPT=9292 DPT=57622 **
https://logserver.rdoproject.org/54/31954/86/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset035-master/18f2109/logs/overcloud-novacompute-0/var/log/extra/dropped-packets.txt.gz
~~~
Sep 08 15:09:42 overcloud-novacompute-0 kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:df:c1:f7 MACDST=fa:16:3e:b8:9e:6c MACPROTO=86dd SRC=fd00:fd00:fd00:2000:0000:0000:0000:00f4 DST=fd00:fd00:fd00:2000:0000:0000:0000:0051 LEN=2628 TC=0 HOPLIMIT=64 FLOWLBL=513666 PROTO=TCP SPT=9292 DPT=57622 SEQ=1199708175 ACK=4039988824 WINDOW=19413 RES=0x00 ACK URGP=0 OPT (0101080A7760ECF9DDA0B1E1)
~~~
### OVB fs039 - currently under test
controller have some drops **SPT=68 DPT=67 ,SPT=52888 DPT=8775, SPT=53822 DPT=8778, SPT=53120 DPT=5000, SPT=59262 DPT=8000, SPT=49758 DPT=8080**:-
https://logserver.rdoproject.org/54/31954/86/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset035-master/18f2109/logs/overcloud-novacompute-0/var/log/extra/dropped-packets.txt.gz
~~~
Sep 09 05:39:25 overcloud-controller-1.ooo.test kernel: DROPPING: IN=enp7s0 OUT= MACSRC=fa:16:3e:ea:b4:86 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=329 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=309
Sep 09 05:39:25 overcloud-controller-1.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:4b:20:e5 MACDST=fa:16:3e:31:c1:76 MACPROTO=0800 SRC=172.17.0.76 DST=172.17.0.39 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=52888 DPT=8775 SEQ=2175213562 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 09 05:40:01 overcloud-controller-1.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:4b:20:e5 MACDST=fa:16:3e:31:c1:76 MACPROTO=0800 SRC=172.17.0.76 DST=172.17.0.39 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=53822 DPT=8778 SEQ=3097281701 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 09 05:43:53 overcloud-controller-1.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:9e:38:8e MACDST=fa:16:3e:31:c1:76 MACPROTO=0800 SRC=172.17.0.218 DST=172.17.0.39 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=53120 DPT=5000 SEQ=2689095208 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 09 05:44:46 overcloud-controller-1.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:9e:38:8e MACDST=fa:16:3e:31:c1:76 MACPROTO=0800 SRC=172.17.0.218 DST=172.17.0.39 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=59262 DPT=8000 SEQ=2750862472 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 09 05:48:08 overcloud-controller-1.ooo.test kernel: DROPPING: IN=enp6s0 OUT= MACSRC=fa:16:3e:bf:9e:0f MACDST=fa:16:3e:14:b2:74 MACPROTO=0800 SRC=172.18.0.78 DST=172.18.0.202 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=49758 DPT=8080 SEQ=2703133880 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
~~~
Compute no drop
https://logserver.rdoproject.org/54/31954/87/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset039-master/f14d78e/logs/overcloud-novacompute-0/var/log/extra/dropped-packets.txt.gz
### OVB fs064 - currently under test
undercloud have some drops for port **SPT=41942 DPT=6385**
https://logserver.rdoproject.org/54/31954/87/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-master/28a5f9b/logs/undercloud/var/log/extra/dropped-packets.txt.gz
~~~
Sep 09 04:48:11 undercloud.ooo.test kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:d9:fb:be MACDST=fa:16:3e:b8:f2:2d MACPROTO=0800 SRC=192.168.24.19 DST=192.168.24.3 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=57128 DF PROTO=TCP SPT=41942 DPT=6385 SEQ=1218680167 ACK=3908246616 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080A704C20B025B94719)
Sep 09 04:48:11 undercloud.ooo.test kernel: DROPPING: IN=br-ctlplane OUT= MACSRC=fa:16:3e:d9:fb:be MACDST=fa:16:3e:b8:f2:2d MACPROTO=0800 SRC=192.168.24.19 DST=192.168.24.3 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=57129 DF PROTO=TCP SPT=41942 DPT=6385 SEQ=1218680167 ACK=3908246616 WINDOW=502 RES=0x00 ACK FIN URGP=0 OPT (0101080A704C218625B94719)
~~~
controller have some drops for port **SPT=68 DPT=67, SPT=60250 DPT=5000,SPT=41930 DPT=9696, SPT=57298 DPT=9292, SPT=55660 DPT=8080,SPT=47470 DPT=8775, SPT=33934 DPT=8776**:
~~~
Sep 09 05:38:49 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp7s0 OUT= MACSRC=fa:16:3e:0f:97:f3 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=330 TOS=0x00 PREC=0xC0 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=310
Sep 09 05:38:50 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:e7:91:fe MACDST=fa:16:3e:ce:92:34 MACPROTO=0800 SRC=172.17.0.72 DST=172.17.0.126 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=60250 DPT=5000 SEQ=4143972839 ACK=0 WINDOW=0 RES=0x00 RST URGP=0 UID=48 GID=48
Sep 09 05:39:04 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:e7:91:fe MACDST=fa:16:3e:ce:92:34 MACPROTO=0800 SRC=172.17.0.72 DST=172.17.0.126 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=50554 DPT=8004 SEQ=58055049 ACK=0 WINDOW=0 RES=0x00 RST URGP=0 UID=48 GID=48
Sep 09 05:39:54 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:7c:83:27 MACDST=fa:16:3e:ce:92:34 MACPROTO=0800 SRC=172.17.0.244 DST=172.17.0.126 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=41930 DPT=9696 SEQ=2667850517 ACK=0 WINDOW=0 RES=0x00 RST URGP=0 UID=48 GID=48
Sep 09 05:42:19 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp6s0 OUT= MACSRC=fa:16:3e:9b:78:c4 MACDST=fa:16:3e:08:b6:d7 MACPROTO=0800 SRC=172.18.0.123 DST=172.18.0.122 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=36955 DF PROTO=TCP SPT=55388 DPT=8080 SEQ=3271638756 ACK=896588401 WINDOW=24541 RES=0x00 ACK RST URGP=0 OPT (0101080A660896AD55816A5E)
Sep 09 05:43:32 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:7c:83:27 MACDST=fa:16:3e:ce:92:34 MACPROTO=0800 SRC=172.17.0.244 DST=172.17.0.126 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=49924 DPT=9292 SEQ=2596034735 ACK=0 WINDOW=0 RES=0x00 RST URGP=0 UID=48 GID=48
Sep 09 05:45:00 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:7c:83:27 MACDST=fa:16:3e:ce:92:34 MACPROTO=0800 SRC=172.17.0.244 DST=172.17.0.126 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=57298 DPT=9292 SEQ=3947620650 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 09 05:45:56 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:7c:83:27 MACDST=fa:16:3e:ce:92:34 MACPROTO=0800 SRC=172.17.0.244 DST=172.17.0.126 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=36632 DPT=9696 SEQ=128991507 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
Sep 09 05:46:41 overcloud1-controller-0.ooo.test kernel: DROPPING: IN=enp5s0 OUT= MACSRC=fa:16:3e:7c:83:27 MACDST=fa:16:3e:ce:92:34 MACPROTO=0800 SRC=172.17.0.244 DST=172.17.0.126 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=47470 DPT=8775 SEQ=1892167498 ACK=0 WINDOW=0 RES=0x00 RST URGP=0
~~~
compute no drops:-
https://logserver.rdoproject.org/54/31954/87/check/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-master/28a5f9b/logs/overcloud1-novacompute-0/var/log/extra/dropped-packets.txt.gz