- Issued:
- 2017-02-01
- Updated:
- 2017-02-01
RHBA-2017:0232 - Bug Fix Advisory
Synopsis
openstack-neutron bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 9.0 (Mitaka) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:
- OpenStack Networking service
OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)
This update addresses the following issues:
- Previously, a DHCP and L3 agent restart would not issue updates for port MTUs that potentially had new values. Consequently, if the deployment changed MTU configuration options that would have affected tenant network MTUs, those changes were not propagated to router and DHCP ports upon the agent restart. The only way to get new MTUs on those ports was to migrate agent resources to other nodes, which triggered port rewiring.
With this update, a DHCP and L3 agent restart will update MTUs on all ports, if required due to server side configuration changes. As a result, there is now no need to migrate agent resources to other nodes to update port MTUs; it is sufficient to restart the respective agents in-place. (BZ#1400179)
- Prior to this update, the LBaaSv2 HAProxy plugin set up a VIF without specifying its MTU. Consequently, the VIF always received the default MTU of 1500; when attaching the load balancer to a VXLAN-backed project network (which by default has a MTU of 1450) this resulted in packet dropping. With this update, the network MTU is passed into the namespace driver. (BZ#1405443)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 9 runs on Red Hat Enterprise Linux 7.3.
The Red Hat OpenStack Platform 9 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 9, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/single/release-notes
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack 9 x86_64
Fixes
- BZ - 1384108 - Cannot SSH into instance after consecutive test runs
- BZ - 1393437 - During scale test raised error Failed to allocate the network(s), not rescheduling which prevent launch instances
- BZ - 1397519 - LinuxBridge: Pass host into get_devices_details_list
- BZ - 1405443 - Neutron LBAAS agent ignores MTU settings - Error dropped over-mtu packet: 1500 > 1450
CVEs
(none)
References
(none)
Red Hat OpenStack 9
SRPM | |
---|---|
openstack-neutron-8.1.2-15.el7ost.src.rpm | SHA-256: fcdef06aba21e376d18a29ba91660896f827ee24c48bec4e1ca59fec1d5a1646 |
openstack-neutron-lbaas-8.1.0-2.el7ost.src.rpm | SHA-256: 9e5dd9c65a60d1d2abe6103ccef8b51455eba18844b1b4738e9a3bc2fee0bb5f |
x86_64 | |
openstack-neutron-8.1.2-15.el7ost.noarch.rpm | SHA-256: d5bd7a86056287ac88f7d40a5a7a9b7b8dd6da561c9a62b84918398299206cb2 |
openstack-neutron-bgp-dragent-8.1.2-15.el7ost.noarch.rpm | SHA-256: ee8abc2ade9757ebdcd07747eccf07c42d9c36dbee313463d328ad8cf71a02dd |
openstack-neutron-common-8.1.2-15.el7ost.noarch.rpm | SHA-256: 056c005513bfb72b1cfa1ec1a053b91976ab7f82371932875a92bb0630004b57 |
openstack-neutron-lbaas-8.1.0-2.el7ost.noarch.rpm | SHA-256: 1f64ace4f3404126235816bd9f9508728137bdf2e48e4f377c0dd327d4c3aa2c |
openstack-neutron-linuxbridge-8.1.2-15.el7ost.noarch.rpm | SHA-256: 976f45e941ff71b74dcc14de5bd180b9a7709c26f213b12a711a59eccd42d5ca |
openstack-neutron-macvtap-agent-8.1.2-15.el7ost.noarch.rpm | SHA-256: f0e8975d79063009674910275f4ee1db036a806d37edc98e93a5c8fd084c8f1b |
openstack-neutron-metering-agent-8.1.2-15.el7ost.noarch.rpm | SHA-256: d48f0a04399c444ce16504f4962cf623954ab5ccc3553753e755eba2438b8873 |
openstack-neutron-ml2-8.1.2-15.el7ost.noarch.rpm | SHA-256: 7a68507d85dec3e8278dec298792abe206bfa037065c9cf55b6dba2efef075e8 |
openstack-neutron-openvswitch-8.1.2-15.el7ost.noarch.rpm | SHA-256: 8702bd49ffdc0a7138a9df82c30d9a578bc383597c44073f7581214137fa2910 |
openstack-neutron-rpc-server-8.1.2-15.el7ost.noarch.rpm | SHA-256: 3541d7d952fcc150a60d7cacfd99fc8afb8ac93fccb10a618b9fba0775fa33b4 |
openstack-neutron-sriov-nic-agent-8.1.2-15.el7ost.noarch.rpm | SHA-256: 55001b16232a2920a43c05a65b6ba8b5046741ee59d2c719721cabf1091cd1cf |
python-neutron-8.1.2-15.el7ost.noarch.rpm | SHA-256: c4a4800c6fd1870c513c137c78a9207a5d71f7faa792c934f8fe1512e702e69b |
python-neutron-lbaas-8.1.0-2.el7ost.noarch.rpm | SHA-256: acce678ed30797a17ffe6c0923b1ca7bc846f26ac9f6ea9a0993863232c650e8 |
python-neutron-lbaas-tests-8.1.0-2.el7ost.noarch.rpm | SHA-256: c1539839d94309e0c9bf197d882769e111949c08107971089a4486abf6d52899 |
python-neutron-tests-8.1.2-15.el7ost.noarch.rpm | SHA-256: 28e460649b33e23dbe759bda83c77e7740d6225c4cd6690dec7fd05bd17dc331 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.