<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, Apr 25, 2017 at 9:34 AM, Marcin Mirecki <span dir="ltr"><<a href="mailto:mmirecki@redhat.com" target="_blank">mmirecki@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>It looks like ndb is listening (netstat shows this), but not receiving anything (log is empty).<br></div><div>This looks like a connectivity issue.<br></div><div>Can the provider host ping the ovn host?<br></div></div></blockquote><div><br></div><div>Yes. The provider host is the oVirt self hosted engine VM<br> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div></div><div>Is firewalld/iptables disabled on both hosts?<br></div></div></blockquote><div><br></div><div>Firewall is disabled on all 3 oVirt hosts. While on engine VM side the firewalld service is active but with needed ports enabled.<br><br> <br>[g.cecchi@ovmgr1 ~]$ sudo firewall-cmd --get-default-zone<br>public<br><br>[g.cecchi@ovmgr1 ~]$ sudo firewall-cmd --get-active-zones<br>public<br> interfaces: ens192<br><br>[g.cecchi@ovmgr1 ~]$ sudo firewall-cmd --list-all<br>public (active)<br> target: default<br> icmp-block-inversion: no<br> interfaces: ens192<br> sources: <br> services: dhcpv6-client ovirt-fence-kdump-listener ovirt-http ovirt-https ovirt-imageio-proxy ovirt-postgres ovirt-provider-ovn ovirt-vmconsole-proxy ovirt-websocket-proxy ssh<br> ports: <br> protocols: <br> masquerade: no<br> forward-ports: <br> sourceports: <br> icmp-blocks: <br> rich rules: <br> rule family="ipv4" port port="6641" protocol="tcp" accept<br> rule family="ipv4" port port="6642" protocol="tcp" accept<br>[g.cecchi@ovmgr1 ~]$ <br><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><br></div><div>Let's make sure that OVN is working fine.<br></div><div>I attach a short python script that checks the connection from the localhost.<br></div><div>Please check if it can connect to ovn from localhost (just execute this on the host with ovn: "python tcp_connection_test.py" ).<br></div><div>It should connect and print out all the OVN networks.<br></div><div>Does this work?<br></div><a style="color:rgb(0,136,206);font-size:10px;margin:0px;text-decoration:none;font-family:"overpass",sans-serif" href="https://www.redhat.com" target="_blank"><span></span></a></div><div class="gmail_extra"><span class="gmail-"><div class="gmail-m_377854907745784433gmail_signature"><div dir="ltr"><div><table border="0"><tbody><tr><td width="100px"></td>
</tr></tbody></table>
</div></div></div>
</span></div>
</blockquote></div><br>It seems so. If I run on my ovm provider host:<br><br>[g.cecchi@ovmgr1 ~]$ python /tmp/tcp_connection_test.py <br>connecting 1<br>connecting 2<br>CONNECTED!<br>ROW: uuid:04501f6b-3977-4ba1-9ead-7096768d796d name:ovn172<br>ROW: uuid:6110649a-db2b-4de7-8fbc-601095cfe510 name:ovn192<br>[g.cecchi@ovmgr1 ~]$ <br><br></div><div class="gmail_extra">Perhaps I was not clear at the beginning.... I try to reformulate.<br></div><div class="gmail_extra">I noticed that ovn didn't work after upgrade from 4.1.0 to 4.1.1.<br></div><div class="gmail_extra">Then in oVirt OVN documentation I found about the "set" commands to give in case of openvswitch 2.7<br></div><div class="gmail_extra">And in fact after giving the commands I was able to start VM with OVN vnics and they was able to communicate through openvswitch.<br><br></div><div class="gmail_extra">The problem was the persistence of the set command. It seems that after restarting engine VM (that is my provider host), the setting is not maintained....<br><br></div><div class="gmail_extra">Gianluca<br></div></div>