openstack/neutron — Week of 2026-09-05

BGP and EVPN on OVN. The bulk of this week's ~4,700-line churn extended the OVN backend's dynamic routing story. A leak_routes port attribute landed end-to-end — DB layer, OVN resource configuration keyed off the attribute, an admin-only default policy for updates, and reference documentation (full series here). Alongside it, ovn-db-sync gained EVPN synchronization support, and a VXLAN routing loop on clouds with /32 IP assignments was fixed. Smaller BGP items disabled route learning from the main BGP LRP and moved the tempest job to Ubuntu Resolute with nested-virt.

PVLAN and ML2. ovn-db-sync also picked up PVLAN support (~800 lines), with a follow-up deferring the pg_drop init subscription until the OVN driver actually loads. On the ML2 side, mechanism drivers are now notified in reverse order during port delete — mirroring the create/bind ordering — with a new unit test covering hierarchical bind delete order across drivers.

Port lifecycle and policy fixes. delete_port is now restricted for compute, baremetal and manila-owned ports, closing a long-standing footgun. DHCP HAProxy processes are cleaned from the namespace on port_delete (backported across three stable branches). FIP + QoS association now verifies the QoS policy is visible to the requesting user, and a policies operation-path bug was corrected.

Docs and CI. A new document defines data-center networks and how they interact with Neutron, SR-IOV docs were updated to use the trusted port attribute, and a flaky test_create_router_port wait timeout was tightened.