Return-Path: X-Original-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 58227E25F for ; Fri, 8 Feb 2013 16:31:15 +0000 (UTC) Received: (qmail 37473 invoked by uid 500); 8 Feb 2013 16:31:14 -0000 Delivered-To: apmail-incubator-cloudstack-dev-archive@incubator.apache.org Received: (qmail 37402 invoked by uid 500); 8 Feb 2013 16:31:14 -0000 Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list cloudstack-dev@incubator.apache.org Received: (qmail 37201 invoked by uid 99); 8 Feb 2013 16:31:14 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 Feb 2013 16:31:14 +0000 Date: Fri, 8 Feb 2013 16:31:14 +0000 (UTC) From: "brandon arms (JIRA)" To: cloudstack-dev@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CLOUDSTACK-1084) vpc static one to one nat failure MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-1084?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13574599#comment-13574599 ] brandon arms commented on CLOUDSTACK-1084: ------------------------------------------ This does work if you modify the public ip address parameters in the DB: one_to_one_nat=1 vm_id: (id of vm you wish to nat) network_id: (network tier id of vm) > vpc static one to one nat failure > --------------------------------- > > Key: CLOUDSTACK-1084 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1084 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the default.) > Components: VMware > Affects Versions: 4.0.0 > Reporter: brandon arms > Priority: Blocker > > static nat rule fails for vpc: > acquire ip address log: > 2013-01-29 14:34:05,584 DEBUG [cloud.network.NetworkManagerImpl] (catalina-exec-13:null) Associate IP address called by the user 6 account 6 > 2013-01-29 14:34:05,585 DEBUG [cloud.network.NetworkManagerImpl] (catalina-exec-13:null) Associate IP address lock acquired > 2013-01-29 14:34:05,589 DEBUG [cloud.network.NetworkManagerImpl] (catalina-exec-13:null) Got 8.25.163.133 to assign for account 6 in zone 3 > 2013-01-29 14:34:05,602 DEBUG [cloud.network.NetworkManagerImpl] (catalina-exec-13:null) Releasing lock account Acct[6-barms] > 2013-01-29 14:34:05,603 DEBUG [cloud.network.NetworkManagerImpl] (catalina-exec-13:null) Associate IP address lock released > 2013-01-29 14:34:05,615 DEBUG [cloud.async.AsyncJobManagerImpl] (catalina-exec-13:null) submit async job-353, details: AsyncJobVO {id:353, userId: 6, accountId: 6, sessionKey: null, instanceType: IpAddress, instanceId: 17, cmd: com.cloud.api.commands.AssociateIPAddrCmd, cmdOriginator: null, cmdInfo: {"id":"17","response":"json","sessionkey":"c5ysvZL+Nxs2EwFefOsNuWL6/NY\u003d","ctxUserId":"6","_":"1359488045538","ctxAccountId":"6","vpcid":"1606e883-6750-42be-b42b-663cb56dba46","ctxStartEventId":"1519"}, cmdVersion: 0, callbackType: 0, callbackAddress: null, status: 0, processStatus: 0, resultCode: 0, result: null, initMsid: 143316583244, completeMsid: null, lastUpdated: null, lastPolled: null, created: null} > 2013-01-29 14:34:05,618 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-12:job-353) Executing com.cloud.api.commands.AssociateIPAddrCmd for job-353 > 2013-01-29 14:34:05,628 DEBUG [network.vpc.VpcManagerImpl] (Job-Executor-12:job-353) Associating ip Ip[8.25.163.133-3] to vpc [VPC [8-Tenant1-VPC] > 2013-01-29 14:34:05,638 DEBUG [network.vpc.VpcManagerImpl] (Job-Executor-12:job-353) Successfully assigned ip Ip[8.25.163.133-3] to vpc [VPC [8-Tenant1-VPC] > 2013-01-29 14:34:05,644 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-12:job-353) Complete async job-353, jobStatus: 1, resultCode: 0, result: com.cloud.api.response.IPAddressResponse@3e8d1fbf > 2013-01-29 14:34:05,649 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-12:job-353) Done executing com.cloud.api.commands.AssociateIPAddrCmd for job-353 > 2013-01-29 14:34:10,653 DEBUG [cloud.async.AsyncJobManagerImpl] (catalina-exec-23:null) Async job-353 completed > enable static nat (failure): > 2013-01-29 14:36:13,741 DEBUG [network.rules.RulesManagerImpl] (catalina-exec-3:null) The ip is not associated with the VPC network id=238, so assigning > 2013-01-29 14:36:13,745 DEBUG [cloud.network.NetworkManagerImpl] (catalina-exec-3:null) Associating ip Ip[8.25.163.133-3] to network Ntwk[238|Guest|12] > 2013-01-29 14:36:13,752 DEBUG [cloud.network.NetworkManagerImpl] (catalina-exec-3:null) Successfully associated ip address 8.25.163.133 to network Ntwk[238|Guest|12] > 2013-01-29 14:36:13,770 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (catalina-exec-3:null) Applying vpc ip association in network Ntwk[238|Guest|12] > 2013-01-29 14:36:13,786 DEBUG [agent.transport.Request] (catalina-exec-3:null) Seq 10-328139827: Sending { Cmd , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 100001, [{"routing.IpAssocVpcCommand":{"ipAddresses":[{"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"}],"accessDetails":{"router.guest.ip":"8.25.163.131","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}] } > 2013-01-29 14:36:13,786 DEBUG [agent.transport.Request] (catalina-exec-3:null) Seq 10-328139827: Executing: { Cmd , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 100001, [{"routing.IpAssocVpcCommand":{"ipAddresses":[{"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"}],"accessDetails":{"router.guest.ip":"8.25.163.131","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}] } > 2013-01-29 14:36:13,786 DEBUG [agent.manager.DirectAgentAttache] (DirectAgent-409:null) Seq 10-328139827: Executing request > 2013-01-29 14:36:13,787 INFO [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) Executing resource IpAssocVpcCommand {"ipAddresses":[{"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"}],"accessDetails":{"router.guest.ip":"8.25.163.131","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0} > 2013-01-29 14:36:13,787 DEBUG [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) Use router's private IP for SSH control. IP : 172.31.200.166 > 2013-01-29 14:36:13,787 INFO [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) Executing resource assignVPCPublicIpAddress. domrName: r-64-VM, routerIp: 172.31.200.166, ip: {"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"} > 2013-01-29 14:36:13,787 INFO [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) findRouterEthDeviceIndex. mac: 06:4b:ce:00:00:1c > 2013-01-29 14:36:15,002 DEBUG [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) Run domr script ip address show eth0 | grep link/ether | sed -e 's/^[ ]*//' | cut -d' ' -f2 > 2013-01-29 14:36:16,235 DEBUG [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) result: true, output: 02:00:21:c2:00:18 > 2013-01-29 14:36:16,253 DEBUG [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) Run domr script ip address show eth1 | grep link/ether | sed -e 's/^[ ]*//' | cut -d' ' -f2 > 2013-01-29 14:36:17,424 DEBUG [vmware.resource.VmwareResource] (DirectAgent-409:172.31.200.140) result: true, output: 06:4b:ce:00:00:1c > 2013-01-29 14:36:18,674 DEBUG [agent.manager.DirectAgentAttache] (DirectAgent-409:null) Seq 10-328139827: Response Received: > 2013-01-29 14:36:18,675 DEBUG [agent.transport.Request] (DirectAgent-409:null) Seq 10-328139827: Processing: { Ans: , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 0, [{"routing.IpAssocAnswer":{"results":["8.25.163.133 - success"],"result":true,"wait":0}}] } > 2013-01-29 14:36:18,675 DEBUG [agent.transport.Request] (catalina-exec-3:null) Seq 10-328139827: Received: { Ans: , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 0, { IpAssocAnswer } } > 2013-01-29 14:36:18,680 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (catalina-exec-3:null) Applying static nat rules in network Ntwk[238|Guest|12] > 2013-01-29 14:36:18,689 DEBUG [agent.transport.Request] (catalina-exec-3:null) Seq 10-328139828: Sending { Cmd , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 100001, [{"routing.SetStaticNatRulesCommand":{"rules":[{"dstIp":"10.1.201.187","id":0,"srcIp":"8.25.163.133","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"vpcId":8,"accessDetails":{"router.guest.ip":"10.1.201.129","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}] } > 2013-01-29 14:36:18,689 DEBUG [agent.transport.Request] (catalina-exec-3:null) Seq 10-328139828: Executing: { Cmd , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 100001, [{"routing.SetStaticNatRulesCommand":{"rules":[{"dstIp":"10.1.201.187","id":0,"srcIp":"8.25.163.133","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"vpcId":8,"accessDetails":{"router.guest.ip":"10.1.201.129","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}] } > 2013-01-29 14:36:18,689 DEBUG [agent.manager.DirectAgentAttache] (DirectAgent-138:null) Seq 10-328139828: Executing request > 2013-01-29 14:36:18,690 INFO [vmware.resource.VmwareResource] (DirectAgent-138:172.31.200.140) Executing resource SetFirewallRuleCommand: {"rules":[{"dstIp":"10.1.201.187","id":0,"srcIp":"8.25.163.133","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"vpcId":8,"accessDetails":{"router.guest.ip":"10.1.201.129","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0} > 2013-01-29 14:36:18,691 DEBUG [vmware.resource.VmwareResource] (DirectAgent-138:172.31.200.140) Use router's private IP for SSH control. IP : 172.31.200.166 > 2013-01-29 14:36:19,997 ERROR [utils.ssh.SshHelper] (DirectAgent-138:172.31.200.140) SSH execution of command /root/firewall.sh -A -l 8.25.163.133 -r 10.1.201.187 -d 0:0 -G has an error status code in return. result output: Bad argument `8.25.163.133' > Try `iptables -h' or 'iptables --help' for more information. > Bad argument `8.25.163.133' > Try `iptables -h' or 'iptables --help' for more information. > iptables v1.4.8: option `--set-mark' requires an argument > Try `iptables -h' or 'iptables --help' for more information. > iptables: No chain/target/match by that name. > Bad argument `8.25.163.133' > Try `iptables -h' or 'iptables --help' for more information. > Bad argument `eth0' > Try `iptables -h' or 'iptables --help' for more information. > Bad argument `8.25.163.133' > Try `iptables -h' or 'iptables --help' for more information. > iptables: No chain/target/match by that name. > iptables: No chain/target/match by that name. > Bad argument `8.25.163.133' > Try `iptables -h' or 'iptables --help' for more information. > 2013-01-29 14:36:20,001 DEBUG [vmware.resource.VmwareResource] (DirectAgent-138:172.31.200.140) Executing script on domain router 172.31.200.166: /root/firewall.sh -A -l 8.25.163.133 -r 10.1.201.187 -d 0:0 -G > 2013-01-29 14:36:20,001 ERROR [vmware.resource.VmwareResource] (DirectAgent-138:172.31.200.140) SetStaticNatRulesCommand failure on setting one rule. args: -A -l 8.25.163.133 -r 10.1.201.187 -d 0:0 -G > 2013-01-29 14:36:20,005 DEBUG [agent.manager.DirectAgentAttache] (DirectAgent-138:null) Seq 10-328139828: Response Received: > 2013-01-29 14:36:20,005 DEBUG [agent.transport.Request] (DirectAgent-138:null) Seq 10-328139828: Processing: { Ans: , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 0, [{"routing.SetStaticNatRulesAnswer":{"results":["Failed"],"result":false,"wait":0}}] } > 2013-01-29 14:36:20,005 DEBUG [agent.transport.Request] (catalina-exec-3:null) Seq 10-328139828: Received: { Ans: , MgmtId: 143316583244, via: 10, Ver: v1, Flags: 0, { SetStaticNatRulesAnswer } } > 2013-01-29 14:36:20,006 WARN [network.rules.RulesManagerImpl] (catalina-exec-3:null) Failed to create static nat rule due to > com.cloud.exception.ResourceUnavailableException: Resource [DataCenter:3] is unreachable: Unable to apply static nat rules on router > at com.cloud.network.router.VirtualNetworkApplianceManagerImpl.applyRules(VirtualNetworkApplianceManagerImpl.java:3135) > at com.cloud.network.router.VirtualNetworkApplianceManagerImpl.applyStaticNats(VirtualNetworkApplianceManagerImpl.java:3183) > at com.cloud.network.element.VirtualRouterElement.applyStaticNats(VirtualRouterElement.java:604) > at com.cloud.network.NetworkManagerImpl.applyStaticNats(NetworkManagerImpl.java:4937) > at com.cloud.network.rules.RulesManagerImpl.applyStaticNatForIp(RulesManagerImpl.java:1283) > at com.cloud.network.rules.RulesManagerImpl.enableStaticNat(RulesManagerImpl.java:472) > at com.cloud.event.ActionEventCallback.intercept(ActionEventCallback.java:36) > at com.cloud.api.commands.EnableStaticNatCmd.execute(EnableStaticNatCmd.java:111) > at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:138) > at com.cloud.api.ApiServer.queueCommand(ApiServer.java:543) > at com.cloud.api.ApiServer.handleRequest(ApiServer.java:422) > at com.cloud.api.ApiServlet.processRequest(ApiServlet.java:304) > at com.cloud.api.ApiServlet.doGet(ApiServlet.java:63) > at javax.servlet.http.HttpServlet.service(HttpServlet.java:617) > at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) > at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) > at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) > at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) > at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) > at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) > at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) > at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:555) > at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) > at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) > at org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.java:889) > at org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:721) > at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:2268) > at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) > at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) > at java.lang.Thread.run(Thread.java:679) > 2013-01-29 14:36:20,009 WARN [network.rules.RulesManagerImpl] (catalina-exec-3:null) Failed to enable static nat rule for ip address 17 on the backend > 2013-01-29 14:36:20,014 DEBUG [network.vpc.VpcManagerImpl] (catalina-exec-3:null) Releasing VPC ip address Ip[8.25.163.133-3] from vpc network id=238 > 2013-01-29 14:36:20,036 DEBUG [network.vpc.VpcManagerImpl] (catalina-exec-3:null) IP address Ip[8.25.163.133-3] is no longer associated with the network inside vpc id=8 > 2013-01-29 14:36:20,036 DEBUG [network.vpc.VpcManagerImpl] (catalina-exec-3:null) Successfully released VPC ip address Ip[8.25.163.133-3] back to VPC pool > 2013-01-29 14:36:20,039 WARN [cloud.api.ApiDispatcher] (catalina-exec-3:null) class com.cloud.api.ServerApiException : Failed to enable static nat -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira