Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id E4A62200AF6 for ; Fri, 27 May 2016 12:05:14 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id E399B16099F; Fri, 27 May 2016 10:05:14 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 1B2E7160A38 for ; Fri, 27 May 2016 12:05:13 +0200 (CEST) Received: (qmail 63990 invoked by uid 500); 27 May 2016 10:05:13 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 63779 invoked by uid 500); 27 May 2016 10:05:13 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 63719 invoked by uid 99); 27 May 2016 10:05:13 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 27 May 2016 10:05:13 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id EAFC92C1F64 for ; Fri, 27 May 2016 10:05:12 +0000 (UTC) Date: Fri, 27 May 2016 10:05:12 +0000 (UTC) From: "Murali Reddy (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Created] (CLOUDSTACK-9393) Wrong information returned for CheckS2SVpnConnectionsCommand when more than one S2S VPN connection exists between a VPC VR, to other VPC VR's MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Fri, 27 May 2016 10:05:15 -0000 Murali Reddy created CLOUDSTACK-9393: ---------------------------------------- Summary: Wrong information returned for CheckS2SVpnConnectionsCommand when more than one S2S VPN connection exists between a VPC VR, to other VPC VR's Key: CLOUDSTACK-9393 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9393 Project: CloudStack Issue Type: Bug Security Level: Public (Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.5.2 Reporter: Murali Reddy Its is observed that when there is more that one VPC VR connections originating or terminating from a VPC VR, status of CheckS2SVpnConnectionsCommand is not correct. For e.g, if there are 3 VPC A,B,C exists, with following s2s connections A->B B->A A->C C->A I this case , VPC VR at site A, has two connections. In which case following error message are noticed. ======================================================== 2016-05-17 00:00:24,402 DEBUG [c.c.a.t.Request] (DirectAgent-411:ctx-8676f24f) Seq 231-106960491150353746: Processing: { Ans: , MgmtId: 345050463794, via: 231, Ver: v1, Flags: 110, [{"com. cloud.agent.api.CheckS2SVpnConnectionsAnswer":{"ipToConnected":{},"ipToDetail":{},"details":"whack: Pluto is not running (no \"/var/run/pluto/pluto.ctl\")\n130.185.66.25:11:ISAKMP SA NOT found but checking IPsec;IPsec SA not found;Site-to-site VPN have not connected&whack: Pluto is not running (no \"/var/run/pluto/pluto.ctl\")\n80.69.130.108:11:ISAKMP SA NOT found but checking IPsec; IPsec SA not found;Site-to-site VPN have not connected&whack: Pluto is not running (no \"/var/run/pluto/pluto.ctl\")\n80.69.130.104:11:ISAKMP SA NOT found but checking IPsec;IPsec SA not found; Site-to-site VPN have not connected&","result":true,"wait":0}}] } 572 2016-05-17 00:00:24,402 DEBUG [c.c.a.t.Request] (RouterStatusMonitor-1:ctx-d689a0dd) Seq 231-106960491150353746: Received: { Ans: , MgmtId: 345050463794, via: 231, Ver: v1, Flags: 110, { CheckS2SVpnConnectionsAnswer } } 573 2016-05-17 00:00:24,402 DEBUG [c.c.a.m.AgentManagerImpl] (RouterStatusMonitor-1:ctx-d689a0dd) Details from executing class com.cloud.agent.api.CheckS2SVpnConnectionsCommand: whack: Pluto is not running (no "/var/run/pluto/pluto.ctl") ======================================================== Also on noticing state change, management server is expected to update the state in the DB. It is observed that state never gets updated in the DB and management server keeps raising alert and debug messages on every CheckRouterTask. As seen in the below snip there is state change detected in CheckRouterTask, but never gets updated in the DB. ======================================================== 2016-05-17 17:02:54,803 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-a25222f7) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:03:24,271 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-548194b9) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:03:24,639 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-548194b9) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:03:54,174 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-fab8498a) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:03:54,527 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-fab8498a) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:04:24,026 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-38c04ff4) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:04:24,419 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-38c04ff4) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:04:54,060 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-67809600) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:04:54,419 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-67809600) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:05:23,981 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-7c3107b2) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:05:24,357 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-7c3107b2) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:05:54,422 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-17a7b2aa) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:05:54,792 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-17a7b2aa) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:06:24,134 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-ade040c6) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:06:24,510 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-ade040c6) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected 2016-05-17 17:06:53,996 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-20095156) Site-to-site Vpn Connection to VPN-80.69.130.108 on router b-8081-VM(id: 8081) just switch from Connected to Disconnected 2016-05-17 17:06:54,427 INFO [c.c.n.r.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:ctx-20095156) Site-to-site Vpn Connection to VPN-80.69.130.108 on router r-8083-VM(id: 8083) just switch from Disconnected to Connected ======================================================== -- This message was sent by Atlassian JIRA (v6.3.4#6332)