Problems With OVN

LXD
,
1

Hello,

I’m having a problem where one of my OVN networks can not reach the outside world.

It can:

  1. Reach other instances within the network on different hosts.
  2. It can reach it’s own gateway

It can’t reach anything past the gateway.

lxc network info external-services --target=labhost-02 --project external-services
Name: external-services
MAC address: 00:16:3e:8b:a9:bf
MTU: 1442
State: up
Type: broadcast

IP addresses:
  inet	192.168.51.1/24 (link)
  inet6	fd42:c416:702d:be56::1/64 (link)

Network usage:
  Bytes received: 0B
  Bytes sent: 0B
  Packets received: 0
  Packets sent: 0

OVN:
  Chassis: LABHOST-02.thelabs.online

IP Routes

ip route
default via 192.168.51.1 dev eth0 proto dhcp src 192.168.51.2 metric 100
10.0.0.0/24 dev wg0 proto kernel scope link src 10.0.0.1
192.168.20.2 via 192.168.51.1 dev eth0 proto dhcp src 192.168.51.2 metric 100
192.168.20.3 via 192.168.51.1 dev eth0 proto dhcp src 192.168.51.2 metric 100
192.168.51.0/24 dev eth0 proto kernel scope link src 192.168.51.2 metric 100
192.168.51.1 dev eth0 proto dhcp scope link src 192.168.51.2 metric 100

The Network

config:
  bridge.mtu: "1442"
  dns.zone.forward: lxd.external-services.thelabs.online
  dns.zone.reverse.ipv4: 51.168.192.in-addr.arpa
  ipv4.address: 192.168.51.1/24
  ipv4.nat: "false"
  ipv6.address: fd42:c416:702d:be56::1/64
  ipv6.nat: "true"
  network: UPLINK
  volatile.network.ipv4.address: 192.168.20.31
  volatile.network.ipv6.address: 2600:8802:b00:1602:216:3eff:fe8b:a9bf
description: ""
name: external-services
type: ovn
used_by:
- /1.0/instances/fair-pangolin?project=external-services
- /1.0/instances/vpn-server?project=external-services
managed: true
status: Created
locations:
- labhost-01
- labhost-02
- labhost-03

What are some common troubleshooting tips for trying to troubleshoot ovn and lxd?

Thank you

2

On the host LABHOST-02.thelabs.online can you ping 192.168.20.31?

3

Please can you show lxc network show UPLINK?

Also I notice you have ipv4.nat: "false" in your OVN network? This means that the egress packets will be hitting the uplink network without being SNATted to the volatile.network.ipv4.address: 192.168.20.31 address.

How have you planned/configured for the uplink network to return packets from the 192.168.51.0/24 address back to the OVN router (via 192.168.20.31)?

4

Hey @tomp I ended up losing my ovn-cluster and needing to re-create my networks and the problem hasn’t arisen.

Thanks for the follow up

1 Like