From issues-return-93456-archive-asf-public=cust-asf.ponee.io@cloudstack.apache.org Tue Nov 13 19:39:05 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 43047180676 for ; Tue, 13 Nov 2018 19:39:05 +0100 (CET) Received: (qmail 13823 invoked by uid 500); 13 Nov 2018 18:39:04 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 13812 invoked by uid 500); 13 Nov 2018 18:39:04 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 13807 invoked by uid 99); 13 Nov 2018 18:39:04 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Nov 2018 18:39:04 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id DB401D271B for ; Tue, 13 Nov 2018 18:39:03 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -109.501 X-Spam-Level: X-Spam-Status: No, score=-109.501 tagged_above=-999 required=6.31 tests=[ENV_AND_HDR_SPF_MATCH=-0.5, KAM_ASCII_DIVIDERS=0.8, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id zpzrW2OIsh3g for ; Tue, 13 Nov 2018 18:39:02 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTP id 73E2C623DC for ; Tue, 13 Nov 2018 18:39:01 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id A75D3E02E3 for ; Tue, 13 Nov 2018 18:39:00 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 5D1F025262 for ; Tue, 13 Nov 2018 18:39:00 +0000 (UTC) Date: Tue, 13 Nov 2018 18:39:00 +0000 (UTC) From: "Barys Dubauski (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CLOUDSTACK-10400) VPC Router Corruption when working with large number of networks containing instances with public IP addresses MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-10400?page=3Dcom.atl= assian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId= =3D16685587#comment-16685587 ]=20 Barys Dubauski commented on CLOUDSTACK-10400: --------------------------------------------- Thank you, Rohit:=C2=A0https://github.com/apache/cloudstack/issues/3025 > VPC Router Corruption when working with large number of networks containi= ng instances with public IP addresses=20 > -------------------------------------------------------------------------= -------------------------------------- > > Key: CLOUDSTACK-10400 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-104= 00 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the defa= ult.)=20 > Components: API > Affects Versions: 4.11.1.0 > Reporter: Barys Dubauski > Priority: Critical > Attachments: testCloudStack.jar > > > We are using CloudStack 4.11.1 running with KVM hosts.=C2=A0 To simulate = our usecase, we created a small program that calls CloudStack API to > 1) create VPC network with 20 guest networks, each containing one virtual= machine with a public IP address allocated. =C2=A0 > 2) delete the machines and networks one by one.=C2=A0 > =C2=A0 > However,=C2=A0 we frequently get a timeout error, sometimes during VM del= etion, and sometimes during guest network deletion or even during static NA= T disable step. =C2=A0Once the timeout occurs, it seems that the VPC networ= k / Virtual router is in an *unstable/corrupted* state.=C2=A0 We need to re= start the Virtual Router with a clean option (sometimes have to try restart= several times as it fails to deploy router VM as well).=C2=A0 After that, = we can continue delete the network remaining environment.=C2=A0 Here is the= high level steps that we did: > # Create VPC Network > # For each of the 20 "environments" > ## Create Guest Network > ## Add a VM to the network > ## Acquire Public IP > ## Associate the Public IP with VM > # For each of the 20 environment > ## Disassociate the Public IP > ## Delete VM > ## Delete Guest network > # Delete VPC > =C2=A0 > The hanging / timeout problems could be in any time during environment de= letion.=C2=A0 The first few deletion could go through successfully, and the= n fail at some point.=C2=A0 The failure could be in any stage.=C2=A0 i.e. D= isassociate public IP, delete VM or delete guest network.=C2=A0 We looked a= t cloud.log, agent log and management server log but couldn=E2=80=99t get a= ny obvious errors.=C2=A0 It seems that management server sends the request = to do the deletion, but the VR does not respond and the system/network beco= mes stuck in an invalid state.=C2=A0Network often gets stuck in =E2=80=9CSh= utdown=E2=80=9D state as a result. > =C2=A0 > Here are some errors in the management server log: > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > 2018-11-01 01:15:29,263 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job= -Executor-119:ctx-c14b2ab4 job-29965) (logid:dbe80d4f) Complete async job-2= 9965, jobStatus: FAILED, resultCode: 530, result: org.apache.cloudstack.api= .response.ExceptionResponse/null/\{"uuidList":[],"errorcode":530,"errortext= ":"Failed to delete network"} > 2018-11-01 01:15:29,245 DEBUG [c.c.a.t.Request] (API-Job-Executor-119:ctx= -c14b2ab4 job-29965 ctx-eb2dda94) (logid:dbe80d4f) Seq 4-667095694804259240= : Received:=C2=A0 > { Ans: , MgmtId:=C2=A0[7474664765770|tel:7474664765770], via: 4([cehv02.c= ore.jazz.net|http://cehv02.core.jazz.net/]), Ver: v1, Flags: 110, \\{ Group= Answer } > } > 2018-11-01 01:15:29,245 WARN=C2=A0 [c.c.n.r.VpcVirtualNetworkApplianceMa= nagerImpl] (API-Job-Executor-119:ctx-c14b2ab4 job-29965 ctx-eb2dda94) (logi= d:dbe80d4f)=C2=A0*Unable to destroy guest network on router VM*[DomainRoute= r|r-3388-VM] > 2018-11-01 01:15:29,247 WARN=C2=A0 [c.c.n.r.VpcVirtualNetworkApplianceMa= nagerImpl] (API-Job-Executor-119:ctx-c14b2ab4 job-29965 ctx-eb2dda94) (logi= d:dbe80d4f)=C2=A0*Failed to destroy guest network config Ntwk*[1122|Guest|1= 2] on router VM[DomainRouter|r-3388-VM] > 2018-11-01 01:15:29,247 WARN=C2=A0 [c.c.n.e.VpcVirtualRouterElement] (AP= I-Job-Executor-119:ctx-c14b2ab4 job-29965 ctx-eb2dda94) (logid:dbe80d4f)=C2= =A0*Failed to unplug nic in network Ntwk*[1122|Guest|12] for virtual router= VM[DomainRouter|r-3388-VM] > 2018-11-01 01:15:29,247 WARN=C2=A0 [o.a.c.e.o.NetworkOrchestrator] (API-= Job-Executor-119:ctx-c14b2ab4 job-29965 ctx-eb2dda94) (logid:dbe80d4f)=C2= =A0*Unable to complete shutdown of the network elements due to element: Vpc= VirtualRouter* > 2018-11-01 01:15:29,255 DEBUG [o.a.c.e.o.NetworkOrchestrator] (API-Job-E= xecutor-119:ctx-c14b2ab4 job-29965 ctx-eb2dda94) (logid:dbe80d4f) Lock is r= eleased for network Ntwk[1122|Guest|12] as a part of network shutdown > 2018-11-01 01:15:29,256 DEBUG [o.a.c.e.o.NetworkOrchestrator] (API-Job-E= xecutor-119:ctx-c14b2ab4 job-29965 ctx-eb2dda94) (logid:dbe80d4f)=C2=A0*Net= work is not not in the correct state to be destroyed: Shutdown* > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =C2=A0 > I'm attaching the simple java program which performs all of the above des= cribed steps and which allowed us to consistently run into the bug. > =C2=A0 > To use the application: > =C2=A0 > java -jar testCloudStack.jar > =C2=A0 > Note, that the test application works successfully with CloudStack server= 4.9.2 but consistently reproduces the bug with CloudStack server 4.11.1 -- This message was sent by Atlassian JIRA (v7.6.3#76005)