<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} p
{margin-top:0;
margin-bottom:0}--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hi all, <br>
<br>
We are in the process of configuring the octavia lbaasv2 service. <br>
On our mitaka environment we are using neutron dvr with openvswitch. We have multiple controllers (3 to be exact).<br>
We're following https://github.com/openstack/octavia/blob/stable/mitaka/devstack/plugin.sh as a guide.<br>
<br>
After creating a load balancer, the amphora instance is booted. It receives ips in the lb-net and the private network.
<br>
<br>
The octavia-worker log show:<br>
DEBUG octavia.amphorae.drivers.haproxy.rest_api_driver [-] request url plug/vip/192.168.1.126 request /octavia/octavia/amphorae/drivers/haproxy/rest_api_driver.py:218<br>
DEBUG octavia.amphorae.drivers.haproxy.rest_api_driver [-] request url https://192.168.246.11:9443/0.5/plug/vip/192.168.1.126 request /octavia/octavia/amphorae/drivers/haproxy/rest_api_driver.py:221<br>
WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.<br>
WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.<br>
etc...<br>
<br>
I can ping the amphora instance on the lb-net; not on the private net as it has not received the request to activate the second interface. I can ssh into the amphora instance from the lb-net namespace.<br>
The amphora agent is running inside the amphora instance and listening on port 9443, the correct sec group is attached to the amphora instance so that should not be an issue.<br>
<br>
Also we can see in dmesg :<br>
[216682.378571] BLOCKED OUTPUT : IN= OUT=eth0 SRC=1.2.3.4 DST=192.168.246.11 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=19651 DF PROTO=TCP SPT=34464 DPT=9443 WINDOW=29200 RES=0x00 SYN URGP=0
<br>
<br>
We can see the worker trying to contact the amphora instance<br>
octavia-w 31502 octavia 13u IPv4 27647551 0t0 TCP 1.2.3.4:35304->192.168.246.11:9443 (SYN_SENT)<br>
<br>
Do the octavia processes try to contact the amphora instance directly at it's lb-net ip? Not through a namespace?
<br>
For this to work, do we need to configure the health manager ports as described here: https://github.com/openstack/octavia/blob/stable/mitaka/devstack/plugin.sh#L123<br>
Or setup some iptables rules or routes?<br>
<br>
Kind regards<br>
Joris S'heeren<br>
<br>
--<br>
</p>
</body>
</html>