Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ovn nb and sb can't bind lan ip in ssl #2200

Merged
merged 1 commit into from
Dec 30, 2022
Merged

ovn nb and sb can't bind lan ip in ssl #2200

merged 1 commit into from
Dec 30, 2022

Conversation

changluyi
Copy link
Collaborator

@changluyi changluyi commented Dec 30, 2022 •
edited
Loading

What type of this PR

Examples of user facing changes:

  • Features
  • Bug fixes
  • Docs
  • Tests

该pr 不让ovn-central的ovsdb-server进行绑localip的操作。改回绑定[::]

原因是因为在ovncentral多master节点情况下且连接db方式为ssl会出问题：
具体如下：

  1. master节点会去配置db connections字段，这个字段会被配置为master节点的localhost ip
  2. 非master节点也是会监听这个connections字段，但本地又没有master节点的localhost ip所以报错了。以前因为是监听[::]，本地节点存在[::]，所以不存在该问题。

这个我看了配置貌似没有比较好的解决方法，

  1. ovn貌似没提供单独的配置去配置ssl的监听端口（ptcp有），所以必须得通过配置db connections字段来达成。
  2. connections这个字段是全局唯一的。只能配一个或者一组ip下去。我试过修改connections字段包含所有节点的localhostip，看ovn的行为是不是只要能监听到其中一个节点的localhostip:6641就认为正常了，但试了不是这样。他会认为connections下所有ip:port都能监听到才算正常。

=================================

另外多master节点且连接db方式为ptcp的情况下，绑定localhost ip是可以配置的：

https://satishdotpatel.github.io/openstack-ansible-ovn-clustering/

Which issue(s) this PR fixes:

Fixes #(issue-number)

@changluyi changluyi merged commit c0d76fd into master Dec 30, 2022
@changluyi changluyi deleted the ovn_db_cannot_bind_lanip branch December 30, 2022 07:03
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 11, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
2635aa9 
This reverts commit c0d76fd.
@zhangzujian zhangzujian mentioned this pull request Jan 11, 2023
Merged
1 task
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 11, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
9b04148 
This reverts commit c0d76fd.
zhangzujian added a commit that referenced this pull request Jan 11, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (#2200)"
db8bcbc 
This reverts commit c0d76fd.
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 12, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
a073ee5 
This reverts commit c0d76fd.
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 12, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
92c5d49 
This reverts commit c0d76fd.
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 12, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
8811930 
This reverts commit c0d76fd.
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 12, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
56a767d 
This reverts commit c0d76fd.
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 16, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
efcaf34 
This reverts commit c0d76fd.
zhangzujian added a commit to zhangzujian/kube-ovn that referenced this pull request Jan 18, 2023
@zhangzujian
Revert "ovn nb and sb can't bind lan ip in ssl (kubeovn#2200)"
bf38a3f 
This reverts commit c0d76fd.
zhangzujian added a commit that referenced this pull request Jan 19, 2023
@zhangzujian
ovn db: add support for listening on pod ip (#2235)
625a685 
* Revert "ovn nb and sb can't bind lan ip in ssl (#2200)"

This reverts commit c0d76fd.

* ovn db: listen to pod ip

* add e2e

* code optimization
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@changluyi