<div dir="ltr">There was a bug for this already.<div><a href="https://bugs.launchpad.net/bugs/1413111">https://bugs.launchpad.net/bugs/1413111</a><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jan 22, 2015 at 9:07 AM, Brian Haley <span dir="ltr"><<a href="mailto:brian.haley@hp.com" target="_blank">brian.haley@hp.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 01/22/2015 10:17 AM, Carl Baldwin wrote:<br>
> I think this warrants a bug report. Could you file one with what you<br>
> know so far?<br>
<br>
</span>Carl,<br>
<br>
Seems as though a recent change introduced a bug. This is on a devstack<br>
I just created today, at l3/vpn-agent startup:<br>
<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent Traceback (most recent call last):<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent File "/opt/stack/neutron/neutron/common/utils.py", line 342, in call<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent return func(*args, **kwargs)<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent File "/opt/stack/neutron/neutron/agent/l3/agent.py", line 584, in process_router<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent self._process_external(ri)<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent File "/opt/stack/neutron/neutron/agent/l3/agent.py", line 576, in _process_external<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent self._update_fip_statuses(ri, existing_floating_ips, fip_statuses)<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent UnboundLocalError: local variable 'existing_floating_ips' referenced before assignment<br>
2015-01-22 11:55:07.961 4203 TRACE neutron.agent.l3.agent<br>
Traceback (most recent call last):<br>
File "/usr/local/lib/python2.7/dist-packages/eventlet/greenpool.py", line 82, in _spawn_n_impl<br>
func(*args, **kwargs)<br>
File "/opt/stack/neutron/neutron/agent/l3/agent.py", line 1093, in _process_router_update<br>
self._process_router_if_compatible(router)<br>
File "/opt/stack/neutron/neutron/agent/l3/agent.py", line 1047, in _process_router_if_compatible<br>
self._process_added_router(router)<br>
File "/opt/stack/neutron/neutron/agent/l3/agent.py", line 1056, in _process_added_router<br>
self.process_router(ri)<br>
File "/opt/stack/neutron/neutron/common/utils.py", line 345, in call<br>
self.logger(e)<br>
File "/usr/local/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 82, in __exit__<br>
six.reraise(self.type_, self.value, self.tb)<br>
File "/opt/stack/neutron/neutron/common/utils.py", line 342, in call<br>
return func(*args, **kwargs)<br>
File "/opt/stack/neutron/neutron/agent/l3/agent.py", line 584, in process_router<br>
self._process_external(ri)<br>
File "/opt/stack/neutron/neutron/agent/l3/agent.py", line 576, in _process_external<br>
self._update_fip_statuses(ri, existing_floating_ips, fip_statuses)<br>
UnboundLocalError: local variable 'existing_floating_ips' referenced before assignment<br>
<br>
Since that's happening while we're holding the iptables lock I'm assuming<br>
no rules are being applied.<br>
<br>
I'm looking into it now, will file a bug if there isn't already one.<br>
<span class="HOEnZb"><font color="#888888"><br>
-Brian<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
> On Wed, Jan 21, 2015 at 2:24 PM, Brian Haley <<a href="mailto:brian.haley@hp.com">brian.haley@hp.com</a>> wrote:<br>
>> On 01/21/2015 02:29 PM, Xavier León wrote:<br>
>>> On Tue, Jan 20, 2015 at 10:32 PM, Brian Haley <<a href="mailto:brian.haley@hp.com">brian.haley@hp.com</a>> wrote:<br>
>>>> On 01/20/2015 09:20 AM, Xavier León wrote:<br>
>>>>> Hi all,<br>
>>>>><br>
>>>>> we've been doing some tests with openstack kilo and found<br>
>>>>> out a problem: iptables routes are not being injected to the<br>
>>>>> router namespace.<br>
>>>>><br>
>>>>> Scenario:<br>
>>>>> - a private network NOT connected to the outside world.<br>
>>>>> - a router with only one interface connected to the private network.<br>
>>>>> - a vm instance connected to the private network as well.<br>
>> <snip><br>
>>>> Are you sure the l3-agent is running? You should have seen wrapped rules from<br>
>>>> it in most of these tables, for example:<br>
>>>><br>
>>>> # Generated by iptables-save v1.4.21 on Tue Jan 20 16:29:19 2015<br>
>>>> *filter<br>
>>>> :INPUT ACCEPT [34:10882]<br>
>>>> :FORWARD ACCEPT [0:0]<br>
>>>> :OUTPUT ACCEPT [1:84]<br>
>>>> :neutron-filter-top - [0:0]<br>
>>>> :neutron-l3-agent-FORWARD - [0:0]<br>
>>>> :neutron-l3-agent-INPUT - [0:0]<br>
>>>> :neutron-l3-agent-OUTPUT - [0:0]<br>
>>>> :neutron-l3-agent-local - [0:0]<br>
>>>> [...]<br>
>>><br>
>>> Yes, the l3-agent is up and running. I see these rules when executing<br>
>>> the same test in juno but not in kilo. FYI, it's a all-in-one devstack<br>
>>> deployment.<br>
>>><br>
>>>><br>
>>>> I would check the log files for any errors.<br>
>>><br>
>>> There are no errors in the logs.<br>
>>><br>
>>> After digging a bit more, we have seen that setting the config value<br>
>>> of enable_isolated_metadata to True (default: False) in dhcp_agent.ini<br>
>>> solves the problem in our scenario.<br>
>>> However, this change in configuration was not necessary before (our<br>
>>> tests passed in juno for that matter with that setting to False). So<br>
>>> we were wondering if there has been a change in how the metadata<br>
>>> service is accessed in such scenarios, a new issue because of the l3<br>
>>> agent refactoring or any other problem in our setup we haven't<br>
>>> narrowed yet.<br>
>><br>
>> There have been some changes recently in the code, perhaps:<br>
>><br>
>> <a href="https://review.openstack.org/#/c/135467/" target="_blank">https://review.openstack.org/#/c/135467/</a><br>
>><br>
>> Or just look at some of the other recent changes in the repository?<br>
>><br>
>> -Brian<br>
<br>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div>Kevin Benton</div></div>
</div>