[neutron][ovn] Stateless Security Group

Ammad Syed syedammad83 at gmail.com
Tue Nov 2 08:25:27 UTC 2021


I have below plugins loaded in neutron.conf

core_plugin = ml2
service_plugins = ovn-router, qos, segments, port_forwarding

and below extension drivers ml2_conf.ini

mechanism_drivers = ovn
extension_drivers = port_security, qos

Ammad

On Tue, Nov 2, 2021 at 1:09 PM Ammad Syed <syedammad83 at gmail.com> wrote:

> Hi Slawek,
>
> I don't see any output with below command.
>
> neutron ext-list | grep stateful-security-group
>
> I have checked logs and found below in neutron-server.log.
>
> # grep stateful-security-group neutron-server.log
>
> 2021-11-02 13:02:20.846 998 DEBUG neutron.api.extensions
> [req-b022ced2-f365-4ab9-9f61-25e915231e02 - - - - -] Ext name="Stateful
> security group" alias="stateful-security-group" description="Indicates if
> the security group is stateful or not" updated="2019-11-26T09:00:00-00:00"
> _check_extension
> /usr/lib/python3/dist-packages/neutron/api/extensions.py:416
> 2021-11-02 13:02:20.846 998 INFO neutron.api.extensions
> [req-b022ced2-f365-4ab9-9f61-25e915231e02 - - - - -] Extension
> stateful-security-group not supported by any of loaded plugins
>
> Do I need to do any change in neutron server configuration?
>
> Ammad
>
> On Tue, Nov 2, 2021 at 1:04 PM Slawek Kaplonski <skaplons at redhat.com>
> wrote:
>
>> Hi,
>>
>> On wtorek, 2 listopada 2021 08:51:04 CET Ammad Syed wrote:
>> > Hi,
>> >
>> > I have upgraded my lab to latest xena release and ovn 21.09 and ovs
>> 2.16. I
>> > am trying to create stateless security group. But its getting failed
>> with
>> > below error message.
>> >
>> > # openstack security group  create --stateless sec02-stateless
>> > Error while executing command: BadRequestException: 400, Unrecognized
>> > attribute(s) 'stateful'
>> >
>> > I see below logs in neutron server logs.
>> >
>> > 2021-11-02 12:47:41.921 1346 DEBUG neutron.wsgi [-] (1346) accepted
>> > ('172.16.40.45', 41272) server
>> > /usr/lib/python3/dist-packages/eventlet/wsgi.py:992
>> > 2021-11-02 12:47:42.166 1346 DEBUG neutron.api.v2.base
>> > [req-b6a37fff-090f-4754-9df7-6e4314ed9481
>> 19844bf62a7b498eb443508ef150e9b8
>> > 98687873a146418eaeeb54a01693669f - default default] Request body:
>> > {'security_group': {'name': 'sec02-stateless', 'stateful': False,
>> > 'description': 'sec02-stateless'}} prepare_request_body
>> > /usr/lib/python3/dist-packages/neutron/api/v2/base.py:729
>> > 2021-11-02 12:47:42.167 1346 WARNING neutron.api.v2.base
>> > [req-b6a37fff-090f-4754-9df7-6e4314ed9481
>> 19844bf62a7b498eb443508ef150e9b8
>> > 98687873a146418eaeeb54a01693669f - default default] An exception
>> happened
>> > while processing the request body. The exception message is
>> [Unrecognized
>> > attribute(s) 'stateful'].: webob.exc.HTTPBadRequest: Unrecognized
>> > attribute(s) 'stateful'
>> > 2021-11-02 12:47:42.167 1346 INFO neutron.api.v2.resource
>> > [req-b6a37fff-090f-4754-9df7-6e4314ed9481
>> 19844bf62a7b498eb443508ef150e9b8
>> > 98687873a146418eaeeb54a01693669f - default default] create failed
>> (client
>> > error): Unrecognized attribute(s) 'stateful'
>> > 2021-11-02 12:47:42.168 1346 INFO neutron.wsgi
>> > [req-b6a37fff-090f-4754-9df7-6e4314ed9481
>> 19844bf62a7b498eb443508ef150e9b8
>> > 98687873a146418eaeeb54a01693669f - default default] 172.16.40.45 "POST
>> > /v2.0/security-groups HTTP/1.1" status: 400  len: 317 time: 0.2455938
>> >
>> > Any advice on how to fix it ?
>> >
>> > Ammad
>>
>> Do You have 'stateful-security-group' API extension enabled? You can
>> check it
>> with command
>>
>>     neutron ext-list
>>
>> If it's not loaded, You can check in the neutron-server logs while it
>> wasn't
>> loaded properly.
>>
>> --
>> Slawek Kaplonski
>> Principal Software Engineer
>> Red Hat
>
>
>
> --
> Regards,
>
>
> Syed Ammad Ali
>


-- 
Regards,


Syed Ammad Ali
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211102/dbff30b1/attachment.htm>


More information about the openstack-discuss mailing list