[Bug 2085018] Re: Commit "net/mlx5e: Don't offload internal port if filter device is out device" breaks OpenStack/OVN distributed gateway use case

This bug was fixed in the package linux-hwe-6.8 - 6.8.0-51.52~22.04.1

---------------
linux-hwe-6.8 (6.8.0-51.52~22.04.1) jammy; urgency=medium

* jammy/linux-hwe-6.8: 6.8.0-51.52~22.04.1 -proposed tracker (LP:
#2090367)

* Commit "net/mlx5e: Don't offload internal port if filter device is out
device" breaks OpenStack/OVN distributed gateway use case (LP: #2085018)
- SAUCE: net/mlx5e: Remove workaround to avoid syndrome for internal port

[ Ubuntu: 6.8.0-51.52 ]

* noble/linux: 6.8.0-51.52 -proposed tracker (LP: #2090369)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] update variants
* MGLRU: kswapd uses 100% CPU when MGLRU is enabled and under memory pressure
(LP: #2087886)
- mm/mglru: only clear kswapd_failures if reclaimable
* CVE-2024-50264
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
* CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
* CVE-2024-49967
- ext4: no need to continue when the number of entries is 1

-- Stefan Bader <stefan.bader@canonical.com> Mon, 09 Dec 2024 11:10:20
+0100

** Changed in: linux-hwe-6.8 (Ubuntu Jammy)
Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-49967

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-50264

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-53057

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2085018

Title:
Commit "net/mlx5e: Don't offload internal port if filter device is out
device" breaks OpenStack/OVN distributed gateway use case

Status in linux package in Ubuntu:
Invalid
Status in linux-hwe-6.11 package in Ubuntu:
Invalid
Status in linux-hwe-6.8 package in Ubuntu:
Invalid
Status in linux-hwe-6.8 source package in Jammy:
Fix Released
Status in linux source package in Noble:
In Progress
Status in linux-hwe-6.11 source package in Noble:
Fix Committed
Status in linux-hwe-6.8 source package in Noble:
Invalid
Status in linux source package in Oracular:
In Progress

Bug description:
Consider a topology with two chassis, A and B:
* A acts as a distributed gateway connected to provider network on tagged VLAN and has GENEVE tunnel configured towards chassis B.
* B hosts the target instance.
* From a third machine connected to the provider network we can observe:
  * Only first ICMP ECHO reply from target instance is forwarded.
  * Attempt to establish TCP connection fails.

If we revert commit [0] the symptoms disappear.

The issue is also present in the most recent mainline version
available, so there does not appear to exist a fix for the issue.

0: 06b4eac9c4be ("net/mlx5e: Don't offload internal port if filter
device is out device")

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2085018/+subscriptions