I had a brief look at the ovn-nb-db, as this came up for us as well. On
2025.1, there is a simple nat resource on the router, which could just
be removed for networks in the same address scope. Probably quite
simple:
nat 55f7fe1e-056f-415e-8789-551eb18d68e4
external ip: "10.0.176.4"
logical ip: "10.0.177.0/24"
type: "snat"
But with ovn_router_indirect_snat being introducted, to my understanding
OVN will create a NAT rule for 0.0.0.0/0, which means the same-scoped
networks would need to be blocked.
OVN 24.9 release notes [1] mention support for a `match` string on NAT
resources, perhaps this can be used to exclude specific networks?
[1] https://www.ovn.org/en/releases/24.09/
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1924776
Title:
[ovn] use of address scopes does not automatically disable router snat
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1924776/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
