Bug #3163
ARP cache poisoning does not work with L2 networks
Status: | Closed | Start date: | 08/26/2014 | |
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | Jaime Melis | % Done: | 0% | |
Category: | Drivers - Network | |||
Target version: | Release 4.10 | |||
Resolution: | fixed | Pull request: | ||
Affected Versions: | OpenNebula 4.8 |
Description
Hello,
Trying to instantiate a VM using a L2-only network, I got a failure because of ARP cache poisoning:
oneadmin@one:~$ onevnet show Internal VIRTUAL NETWORK 0 INFORMATION ID : 0 NAME : Internal USER : nebula GROUP : oneadmin CLUSTER : - BRIDGE : nebula VLAN : Yes VLAN ID : 4 USED LEASES : 1 PERMISSIONS OWNER : um- GROUP : um- OTHER : u-- VIRTUAL NETWORK TEMPLATE BRIDGE="nebula" DESCRIPTION="Internal Network" PHYDEV="" VLAN="YES" VLAN_ID="4" ADDRESS RANGE POOL AR TYPE SIZE LEASES MAC IP GLOBAL_PREFIX 0 ETHER 254 1 02:00:53:84:99:72 - - LEASES AR OWNER MAC IP IP6_GLOBAL 0 VM : 0 02:00:53:84:99:72 - -
Tue Aug 26 15:39:03 2014 [Z0][DiM][I]: New VM state is ACTIVE. Tue Aug 26 15:39:03 2014 [Z0][LCM][I]: New VM state is PROLOG. Tue Aug 26 15:39:04 2014 [Z0][LCM][I]: New VM state is BOOT Tue Aug 26 15:39:04 2014 [Z0][VMM][I]: Generating deployment file: /var/lib/one/vms/0/deployment.0 Tue Aug 26 15:39:04 2014 [Z0][VMM][I]: ExitCode: 0 Tue Aug 26 15:39:04 2014 [Z0][VMM][I]: Successfully execute network driver operation: pre. Tue Aug 26 15:39:05 2014 [Z0][VMM][I]: ExitCode: 0 Tue Aug 26 15:39:05 2014 [Z0][VMM][I]: Successfully execute virtualization driver operation: deploy. Tue Aug 26 15:39:05 2014 [Z0][VMM][I]: Command execution fail: /var/tmp/one/vnm/ovswitch/post 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 'one-0' Tue Aug 26 15:39:05 2014 [Z0][VMM][I]: post: Executed "sudo ovs-vsctl set Port vnet0 tag=4". Tue Aug 26 15:39:05 2014 [Z0][VMM][I]: post: Executed "sudo ovs-ofctl add-flow nebula in_port=3,arp,dl_src=02:00:53:84:99:72,priority=45000,actions=drop". Tue Aug 26 15:39:05 2014 [Z0][VMM][E]: post: Command "sudo ovs-ofctl add-flow nebula in_port=3,arp,dl_src=02:00:53:84:99:72,nw_src=,priority=46000,actions=normal" failed. Tue Aug 26 15:39:05 2014 [Z0][VMM][E]: post: ovs-ofctl: priority=46000: invalid IP address Tue Aug 26 15:39:05 2014 [Z0][VMM][E]: ovs-ofctl: priority=46000: invalid IP address Tue Aug 26 15:39:05 2014 [Z0][VMM][E]: Tue Aug 26 15:39:05 2014 [Z0][VMM][I]: ExitCode: 1 Tue Aug 26 15:39:06 2014 [Z0][VMM][I]: error: failed to get domain 'one-0' Tue Aug 26 15:39:06 2014 [Z0][VMM][I]: error: Domain not found: no domain with matching name 'one-0' Tue Aug 26 15:39:06 2014 [Z0][VMM][I]: ExitCode: 0 Tue Aug 26 15:39:06 2014 [Z0][VMM][I]: Successfully execute virtualization driver operation: cancel. Tue Aug 26 15:39:06 2014 [Z0][VMM][I]: Failed to execute network driver operation: post. Tue Aug 26 15:39:06 2014 [Z0][VMM][E]: Error deploying virtual machine: ovs-ofctl: priority=46000: invalid IP address Tue Aug 26 15:39:06 2014 [Z0][DiM][I]: New VM state is FAILED
- edit
/var/lib/one/remotes/vnm/OpenNebulaNetwork.conf
::arp_cache_poisoning: false
- sync hosts
oneadmin@one:~$ onehost sync -f * Adding nebula1 to upgrade * Adding nebula2 to upgrade * Adding nebula3 to upgrade [========================================] 3/3 nebula3 All hosts updated successfully.
And now it works.
Regards.
Associated revisions
Bug #3163: ARP cache poisoning does not work with L2 networks
History
#1 Updated by Ruben S. Montero almost 7 years ago
- Status changed from Pending to New
- Target version set to 67
Thanks for the feedback!
#2 Updated by Ruben S. Montero almost 7 years ago
- Target version changed from 67 to Release 4.10
#3 Updated by Ruben S. Montero over 6 years ago
- Assignee set to Jaime Melis
#4 Updated by Jaime Melis over 6 years ago
- Status changed from New to Closed
- Resolution set to fixed