IGMP snooping/query support in Openvswitch

asked 2013-12-11 01:59:42 -0500

tcheung
81 ●5 ●9 ●9

updated 2013-12-13 17:17:06 -0500

Askbot
1 ●1

As I know, Openvswitch is a L2 virtual switch that currently does not support IGMP snooping/query. (This has been confirmed from Openvswitch mailing list.)

We are running 2 VM (VM-A and VM-B) under same VLAN on the same OpenStack compute node (Grizzly version) with Openvswitch (v1.9.0). Both VM-A and VM-B are in same security group. Theoretically, if only VM-A has joined the multicast group, VM-B can also receive this multicast traffic even VM-B has not join the group (since there’s no IGMP snooping/query implementation in Openvswitch)

However in our experiment, VM-B would not receive the multicast traffic joined by VM-A. The effect like Openvswitch has already supported IGMP snooping/query. Is there anything we have missed?

edit retag flag offensive close merge delete

Comments

Security groups maybe?

darragh-oreilly ( 2013-12-11 05:42:27 -0500 )edit

Hi darragh, both VM-A and VM-B are in same security group

tcheung ( 2013-12-13 01:03:52 -0500 )edit

@tcheung - any solution for this? I'm looking for the same answer.

cnkcb ( 2014-08-29 11:12:33 -0500 )edit

add a comment

1

answered 2013-12-13 03:06:40 -0500

darragh-oreilly
2230 ●8 ●23 ●41

I'm not sure that means that all traffic will be passed. You can run tcpdump on the various interfaces that ovs hybrid vif driver creates. Then you should see if the packet is being dropped by the iptables rules from security groups. Or just try disabling them, by using the generic vif driver.

edit flag offensive delete link

add a comment

1

answered 2014-06-05 02:29:23 -0500

Liping Mao
36 ●2 ●1

As I know, neutron-l3-agent does not support IGMP, so you must use external phy Router here. BTW, Are VMA and VMB on the same compute node? If they are on different node?