<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Sorry, not using Horizon. Currently just trying to get a reliable OpenStack deployment via Foreman.
<div><br>
</div>
<div>What I am experiencing is neutron-dhcp-agent will occasionally stop assigning addresses to spawning instances and I'll have to restart the service. Nothing is noted in the log.</div>
<div><br>
</div>
<div>- Allan<br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div id="divRpF323533" style="direction: ltr;"><font face="Tahoma" size="2" color="#000000"><b>From:</b> Andrew Lau [andrew@andrewklau.com]<br>
<b>Sent:</b> Friday, March 28, 2014 8:06 PM<br>
<b>To:</b> St. George, Allan L.; rdo-list@redhat.com<br>
<b>Subject:</b> Re: [Rdo-list] Firewall issue/error when spawning instances on compute node<br>
</font><br>
</div>
<div></div>
<div>
<div dir="ltr">
<div class="gmail_default" style="font-family:tahoma,sans-serif">I opened a BZ here <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1082188" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1082188</a></div>
<div class="gmail_default" style="font-family:tahoma,sans-serif"><br>
</div>
<div class="gmail_default" style="font-family:tahoma,sans-serif">Did you also run into this issue too, <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1082187" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1082187</a></div>
<div class="gmail_extra">
<div><br>
</div>
<br>
<div class="gmail_quote">On Sat, Mar 29, 2014 at 2:00 AM, St. George, Allan L. <span dir="ltr">
<<a href="mailto:ALLAN.L.ST.GEORGE@leidos.com" target="_blank">ALLAN.L.ST.GEORGE@leidos.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div>
<div style="direction:ltr; font-size:10pt; font-family:Tahoma">I can confirm that I have the same issue on the hypervisor/nova-compute node that is hosting the instance...
<div><br>
</div>
<div>
<div>Chain neutron-openvswi-sd7933aba-f (1 references)</div>
<div class="">
<div>num target prot opt source destination</div>
</div>
<div>1 RETURN all -- 10.0.0.6 <a href="http://0.0.0.0/0" target="_blank">
0.0.0.0/0</a> MAC FA:16:3E:67:64:A4</div>
<div class="">
<div>2 DROP all -- <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a></div>
<div><br>
</div>
<div><br>
</div>
</div>
<div>How do we get someone to look at the problem for patching? This obviously wasn't identified and was carried over to the new build.</div>
<div><br>
</div>
<div>- Allan</div>
<div><br>
</div>
<div style="font-size:16px; font-family:Times New Roman">
<hr>
<div>
<div class="h5">
<div style="direction:ltr"><br>
</div>
<div></div>
<div>
<div dir="ltr">
<div style="font-family:tahoma,sans-serif">Hi,</div>
<div style="font-family:tahoma,sans-serif"><br>
</div>
<div style="font-family:tahoma,sans-serif">I saw this issue too, I was just about to report it.</div>
<div style="font-family:tahoma,sans-serif"><br>
</div>
<div style="font-family:tahoma,sans-serif">If I understand correctly, this is because of the openvswitch iptables rules which are created (for security groups?) </div>
<div style="font-family:tahoma,sans-serif"><br>
</div>
<div style="font-family:tahoma,sans-serif">`service iptables status`</div>
<div style="font-family:tahoma,sans-serif">...</div>
<div>
<div><font face="tahoma, sans-serif">Chain neutron-openvswi-s0ec3eb58-0 (1 references)</font></div>
<div><font face="tahoma, sans-serif">num target prot opt source destination </font></div>
<div><font face="tahoma, sans-serif">1 RETURN all -- 10.0.0.12 <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> MAC FA:16:3E:2E:B7:E3 </font></div>
<div><font face="tahoma, sans-serif">2 DROP all -- <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> </font></div>
<div style="font-family:tahoma,sans-serif">....</div>
<div style="font-family:tahoma,sans-serif"><br>
</div>
<div style="font-family:tahoma,sans-serif">In your case, the MAC address is different -- <span style="background-color:rgb(249,249,249); color:rgb(51,51,51); font-family:Helvetica,sans-serif; font-size:14px; line-height:20px">FA:16:3E:67:64:A4</span></div>
<div style="font-family:tahoma,sans-serif"><span style="background-color:rgb(249,249,249); color:rgb(51,51,51); font-family:Helvetica,sans-serif; font-size:14px; line-height:20px"><br>
</span></div>
<div style="font-family:tahoma,sans-serif">This issue also appears on icehouse w/ foreman, so it looks like it may be the puppet modules at fault here</div>
</div>
<div class="gmail_extra"><br>
</div>
<div class="gmail_extra">
<div style="font-family:tahoma,sans-serif">Andrew.</div>
<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Mar 28, 2014 at 7:37 AM, St. George, Allan L. <span dir="ltr">
<<a href="mailto:ALLAN.L.ST.GEORGE@leidos.com" target="_blank">ALLAN.L.ST.GEORGE@leidos.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left-width:1px; border-left-color:rgb(204,204,204); border-left-style:solid; padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal">Currently running RDO/Havana deployed via Foreman on a multi-compute node stack (Controller, Neutron, and three Nova-Compute servers)<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">When spawning an instance, it correctly spawns and reports/registers to the Foreman dashboard.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The problem is that the hypervisor/compute-node that is hosting the instance will then begin to report:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<table border="1" cellpadding="0" width="1169" style="border-bottom-width:1pt; border-top-color:rgb(221,221,221); border-right-color:rgb(221,221,221); width:876.75pt; border-right-width:1pt; border-style:solid solid solid none; border-bottom-color:rgb(221,221,221); border-top-width:1pt">
<tbody>
<tr>
<td valign="top" style="border-style:none none none solid; border-left-color:rgb(221,221,221); border-left-width:1pt; background-color:rgb(249,249,249); padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><b><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">Level<u></u><u></u></span></b></p>
</td>
<td valign="top" style="border-style:none none none solid; border-left-color:rgb(221,221,221); border-left-width:1pt; background-color:rgb(249,249,249); padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><b><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">Resource<u></u><u></u></span></b></p>
</td>
<td valign="top" style="border-style:none none none solid; border-left-color:rgb(221,221,221); border-left-width:1pt; background-color:rgb(249,249,249); padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><b><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">message<u></u><u></u></span></b></p>
</td>
</tr>
<tr>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><b><span style="font-size:9pt; font-family:Helvetica,sans-serif; color:white; background-color:rgb(185,74,72)">err</span></b><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)"><u></u><u></u></span></p>
</td>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">Puppet<u></u><u></u></span></p>
</td>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">Could not prefetch firewall provider 'iptables': Invalid address from IPAddr.new: FA:16:3E:67:64:A4<u></u><u></u></span></p>
</td>
</tr>
<tr>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; background-color:rgb(249,249,249); padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><b><span style="font-size:9pt; font-family:Helvetica,sans-serif; color:white; background-color:rgb(185,74,72)">err</span></b><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)"><u></u><u></u></span></p>
</td>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; background-color:rgb(249,249,249); padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">/Firewall[001 nova compute incoming]<u></u><u></u></span></p>
</td>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; background-color:rgb(249,249,249); padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">Could not evaluate: Invalid address from IPAddr.new: FA:16:3E:67:64:A4<u></u><u></u></span></p>
</td>
</tr>
<tr>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><b><span style="font-size:9pt; font-family:Helvetica,sans-serif; color:white; background-color:rgb(185,74,72)">err</span></b><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)"><u></u><u></u></span></p>
</td>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">/Firewall[002 vxlan udp]<u></u><u></u></span></p>
</td>
<td valign="top" style="border-style:solid none none solid; border-top-color:rgb(221,221,221); border-top-width:1pt; border-left-color:rgb(221,221,221); border-left-width:1pt; padding:6pt">
<p class="MsoNormal" style="margin-bottom:15pt; line-height:15pt"><span style="font-size:10.5pt; font-family:Helvetica,sans-serif; color:rgb(51,51,51)">Could not evaluate: Invalid address from IPAddr.new: FA:16:3E:67:64:A4<u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">When the instance is deleted, the error will disappear also.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Any assistance/insight would be appreciated.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thank you.<u></u><u></u></p>
</div>
</div>
<br>
_______________________________________________<br>
Rdo-list mailing list<br>
<a href="mailto:Rdo-list@redhat.com" target="_blank">Rdo-list@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/rdo-list" target="_blank">https://www.redhat.com/mailman/listinfo/rdo-list</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>