Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Date: Fri, 17 Nov 2017 14:04:00 +0000 (UTC)
From: "ASF GitHub Bot (JIRA)" <jira@apache.org>
To: cloudstack-issues@incubator.apache.org
Message-ID: <JIRA.13115324.1509530670000.266675.1510927440364@Atlassian.JIRA>
In-Reply-To: <JIRA.13115324.1509530670000@Atlassian.JIRA>
References: <JIRA.13115324.1509530670000@Atlassian.JIRA> <JIRA.13115324.1509530670106@jira-lw-us.apache.org>
Subject: [jira] [Commented] (CLOUDSTACK-10127)  4.9 / 4.10 KVM + openvswitch
 + vpc + static nat / secondary ip on eth2?
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Fri, 17 Nov 2017 14:04:07 -0000


    [ https://issues.apache.org/jira/browse/CLOUDSTACK-10127?page=3Dcom.atl=
assian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=
=3D16257001#comment-16257001 ]=20

ASF GitHub Bot commented on CLOUDSTACK-10127:
---------------------------------------------

svenvogel commented on issue #2304: CLOUDSTACK-10127: KVM + Ovs: Incorrect =
devId on static nat
URL: https://github.com/apache/cloudstack/pull/2304#issuecomment-343768330
=20
=20
   Hi @fmaximus,  Hi @rhtyd=20
  =20
   we checked it again, it was our mistake.
  =20
   +1

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
=20
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


>  4.9 / 4.10 KVM + openvswitch + vpc + static nat / secondary ip on eth2?
> ------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-10127
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-101=
27
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the defa=
ult.)=20
>          Components: VPC
>    Affects Versions: 4.7.0, 4.8.0, 4.9.0, 4.10.0.0
>         Environment: CentOS 7.4.1708 + KVM + OpenvSwitch 2.3-2.8
>            Reporter: Sven Vogel
>            Assignee: Frank Maximus
>            Priority: Critical
>
> We have the following Problem.=20
>   1. KVM
>    2. Bridges
>    bond with two interfaces and trunk (0,129,180,100-1500) to cloudbr0
>    Cloudbr0 (0 - guest network)
>    Fakebridge pub129 (public network)
>    Fakebridge sto180 (secondary storage network)
>    Fakebridge  mgmt0 (management)
>    If I have a vpc all things work until I add a secondary ip and add a s=
tatic nat.
>    The following will happen, first address will be on the the correct in=
terface 146.0.122.134/26 but static nat will be on the false network.
> Its on the eth2=E2=80=A6
> {{   root@r-29-VM:~# ip a
>    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
>        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>        inet 127.0.0.1/8 scope host lo
>    2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast s=
tate UP qlen 1000
>        link/ether 0e:00:a9:fe:03:81 brd ff:ff:ff:ff:ff:ff
>        inet 169.254.3.129/16 brd 169.254.255.255 scope global eth0
>    3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast s=
tate UP qlen 1000
>        link/ether 1e:00:2c:00:00:68 brd ff:ff:ff:ff:ff:ff
>        inet 146.0.122.134/26 brd 146.0.122.191 scope global eth1
>    4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast s=
tate UP qlen 1000
>        link/ether 02:00:57:07:00:0c brd ff:ff:ff:ff:ff:ff
>        inet 192.168.1.254/24 brd 192.168.1.255 scope global eth2
>        inet 146.0.122.135/26 brd 146.0.122.191 scope global eth2}}
> Normally I think the secondary ip should be on signed to eth1 not eth2!
> It sets my ip on the guest network vlan range on my cloudbr0 but it shoul=
d be pub129. vnet6 has 1353 guest tag and not the public tag.
> [root@kvm01 ~]# ovs-vsctl list-br
> cloud0
> cloudbr0
> mgmt0
> pub129
> sto180
> [root@kvm01 ~]# virsh domiflist r-29-VM
> Interface  Type       Source     Model       MAC
> -------------------------------------------------------
> vnet4      bridge     cloud0     virtio      0e:00:a9:fe:03:81
> vnet5      bridge     pub129     virtio      1e:00:2c:00:00:68
> vnet6      bridge     cloudbr0   virtio      02:00:57:07:00:0c
>    Bridge "cloud0"
>        Port "vnet4"
>            Interface "vnet4"
>        Port "vnet5"
>            tag: 129
>            Interface "vnet5"
>        Port "vnet6"
>            tag: 1353
>            Interface "vnet6"
> root@r-29-VM:~# cat /etc/cloudstack/ips.json {
>   "eth0": [
>     {
>       "add": true,
>       "broadcast": "169.254.255.255",
>       "cidr": "169.254.3.129/16",
>       "device": "eth0",
>       "gateway": "None",
>       "netmask": "255.255.0.0",
>       "network": "169.254.0.0/16",
>       "nic_dev_id": "0",
>       "nw_type": "control",
>       "one_to_one_nat": false,
>       "public_ip": "169.254.3.129",
>       "size": "16",
>       "source_nat": false
>     }
>   ],
>   "eth1": [
>     {
>       "add": true,
>       "broadcast": "146.0.122.191",
>       "cidr": "146.0.122.134/26",
>       "device": "eth1",
>       "first_i_p": true,
>       "gateway": "146.0.122.130",
>       "netmask": "255.255.255.192",
>       "network": "146.0.122.128/26",
>       "new_nic": false,
>       "nic_dev_id": 1,
>       "nw_type": "public",
>       "one_to_one_nat": false,
>       "public_ip": "146.0.122.134",
>       "size": "26",
>       "source_nat": true,
>       "vif_mac_address": "1e:00:2c:00:00:68"
>     }
>   ],
>   "eth2": [
>     {
>       "add": true,
>       "broadcast": "146.0.122.191",
>       "cidr": "146.0.122.135/26",
>       "device": "eth2",
>       "first_i_p": true,
>       "gateway": "146.0.122.130",
>       "netmask": "255.255.255.192",
>       "network": "146.0.122.128/26",
>       "new_nic": false,
>       "nic_dev_id": 2,
>       "nw_type": "public",
>       "one_to_one_nat": true,
>       "public_ip": "146.0.122.135",
>       "size": "26",
>       "source_nat": true,
>       "vif_mac_address": "1e:00:2c:00:00:68"
>     },
>     {
>       "add": false,
>       "broadcast": "146.0.122.191",
>       "cidr": "146.0.122.136/26",
>       "device": "eth2",
>       "first_i_p": true,
>       "gateway": "146.0.122.130",
>       "netmask": "255.255.255.192",
>       "network": "146.0.122.128/26",
>       "new_nic": false,
>       "nic_dev_id": 2,
>       "nw_type": "public",
>       "one_to_one_nat": true,
>       "public_ip": "146.0.122.136",
>       "size": "26",
>       "source_nat": true,
>       "vif_mac_address": "1e:00:2c:00:00:68"
>     },
>     {
>       "add": true,
>       "broadcast": "192.168.1.255",
>       "cidr": "192.168.1.254/24",
>       "device": "eth2",
>       "gateway": "192.168.1.254",
>       "netmask": "255.255.255.0",
>       "network": "192.168.1.0/24",
>       "nic_dev_id": "2",
>       "nw_type": "guest",
>       "one_to_one_nat": false,
>       "public_ip": "192.168.1.254",
>       "size": "24",
>       "source_nat": false
>     }
>   ],
>   "id": "ips"
> }
> Frank Maximus from Nuage analysed the problem.
> {quote}
> That seems to be a bug in the lookup of the device number, in case of ope=
nvswitch.
> The config clearly sets device to eth2, while it should be eth1.
> More specifically:
> in LibvirtComputingResource.prepareNetworkElementCommand()
> The broadcastUriToNicNum map is filled depending on the VR nics.
> In openvswitch the guest bridge is used as is, so it overwrites the mappi=
ng of public.
> This was not an issue until 4.6 as then VR was using the macaddress to do=
 lookup, while now it is using the device number.
> Kind Regards,
> Frank{quote}
> I hope anyone can fix that fastly.


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)