kubeovn / kube-ovn / 24282986272

25%

Build Type

push

github

Committed by web-flow

Commit Message

feat(lb): enable ct_flush for UDP load balancers (#6620)

* feat(lb): enable ct_flush for UDP load balancers

Enable OVN per-LB ct_flush option for UDP load balancers to
automatically flush conntrack entries when backends are removed.
This prevents UDP traffic blackholing during Service rolling updates,
where stale conntrack entries continue forwarding to deleted backends
until timeout (30-120s).

Changes:
- Add SetLoadBalancerCtFlush to OVN NB client interface and implementation
- Enable ct_flush for VPC-level UDP LBs during controller initialization
- Enable ct_flush for UDP DNAT LBs on creation and backfill on upgrade
- Add unit tests for the new SetLoadBalancerCtFlush function

Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>

* fix(lb): extend DNAT ct_flush backfill to cover IPv6-only rules

Expand the early return condition in handleAddOvnDnatRule to also
check V6Ip, ensuring IPv6-only DNAT rules get ct_flush backfilled
on controller restart instead of falling through to the full
processing path.

Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>

---------

Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

27 of 47 new or added lines in 3 files covered. (57.45%)

1 existing line in 1 file now uncovered.

13798 of 56253 relevant lines covered (24.53%)

0.29 hits per line