<html><head>
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
</head><body style="font-family: Lucida Grande; font-size: 11pt;"
text="#000000" bgcolor="#FFFFFF"><div style="font-size:
11pt;font-family: Lucida Grande;"><span style="font-family: Lucida
Grande;">Great work Lorin, just reviewed :-)<br><br></span><br><blockquote
style="border: 0px none;"
cite="mid:E1FD8D88-0FCB-4A2A-9924-F33EB00FF58A@nimbisservices.com"
type="cite"><div style="margin:30px 25px 10px 25px;" class="__pbConvHr"><div
style="display:table;width:100%;border-top:1px solid
#EDEEF0;padding-top:5px"> <div
style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
photoaddress="lorin@nimbisservices.com" photoname="Lorin Hochstein"
src="cid:part1.09010206.01010409@gmail.com" name="postbox-contact.jpg"
width="25px" height="25px"></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
<a moz-do-not-send="true" href="mailto:lorin@nimbisservices.com"
style="color:#737F92
!important;padding-right:6px;font-weight:bold;text-decoration:none
!important;">Lorin Hochstein</a></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;">
<font color="#9FA2A5"><span style="padding-left:6px">14 mai 2012 21:59</span></font></div></div></div><div
style="color:#888888;margin-left:24px;margin-right:24px;"
__pbrmquotes="true" class="__pbConvBody"><br><div><br
class="Apple-interchange-newline"><div><br></div><div>I attempted to
document this issue in the docs: <a moz-do-not-send="true"
href="https://review.openstack.org/7403">https://review.openstack.org/7403</a></div><div><br></div><div>(As
an aside, we're using VLAN mode at Nimbis).</div><div><br></div><div><br></div><div><div><span
style="border-collapse: separate; color: rgb(0, 0, 0); font-family:
Helvetica; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal; orphans: 2;
text-align: -webkit-auto; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing:
0px; -webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;
font-size: medium; " class="Apple-style-span"><span
style="border-collapse: separate; color: rgb(0, 0, 0); font-family:
Helvetica; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal; orphans: 2;
text-align: -webkit-auto; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing:
0px; -webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;
font-size: medium; " class="Apple-style-span"><div style="word-wrap:
break-word; -webkit-nbsp-mode: space; -webkit-line-break:
after-white-space; "><span style="border-collapse: separate; color:
rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal; line-height:
normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;
-webkit-border-horizontal-spacing: 0px;
-webkit-border-vertical-spacing: 0px;
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; font-size: medium; "
class="Apple-style-span"><div style="word-wrap: break-word;
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Take
care,</div><div><br></div><div>Lorin</div><div>--</div><div>Lorin
Hochstein</div><div>Lead Architect - Cloud Services</div><div>Nimbis
Services, Inc.</div><div><a moz-do-not-send="true"
href="https://www.nimbisservices.com/">www.nimbisservices.com</a></div><div><br></div></div></span><br
class="Apple-interchange-newline"></div></span><br
class="Apple-interchange-newline"><br></span></div></div></div><div>_______________________________________________<br>Mailing
list: <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>Post to :
<a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>Unsubscribe :
<a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>More help :
<a class="moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a><br></div></div><div
style="margin:30px 25px 10px 25px;" class="__pbConvHr"><div
style="display:table;width:100%;border-top:1px solid
#EDEEF0;padding-top:5px"> <div
style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
photoaddress="vishvananda@gmail.com" photoname="Vishvananda Ishaya"
src="cid:part2.09020702.05070905@gmail.com" name="postbox-contact.jpg"
width="25px" height="25px"></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
<a moz-do-not-send="true" href="mailto:vishvananda@gmail.com"
style="color:#737F92
!important;padding-right:6px;font-weight:bold;text-decoration:none
!important;">Vishvananda Ishaya</a></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;">
<font color="#9FA2A5"><span style="padding-left:6px">14 mai 2012 19:46</span></font></div></div></div><div
style="color:#888888;margin-left:24px;margin-right:24px;"
__pbrmquotes="true" class="__pbConvBody"><div>TL;DR</div><div><br></div><div>To
fix issues with failed dhcp leases in vlan mode, upgrade to dnsmasq
2.6.1[1]</div><div><br></div><div>THE LONG VERSION</div><div><br></div><div>There
is an issue with the way nova uses dnsmasq in VLAN mode. It starts up a
single copy of dnsmasq for each vlan on the network host (or on every
host in multi_host mode). The problem is in the way that dnsmasq binds
to an ip address and port[2]. Both copies can respond to broadcast
packet, but unicast packets can only be answered by one of the copies.</div><div><br></div><div>In
nova this means that guests from only one project will get responses to
their unicast dhcp renew requests. Unicast projects from guests in
other projects get ignored. What happens next is different depending on
the guest os. Linux generally will send a broadcast packet out after
the unicast fails, and so the only effect is a small (tens of ms) hiccup
while interface is reconfigured. It can be much worse than that,
however. I have seen cases where Windows just gives up and ends up with a
non-configured interface.</div><div><br></div><div>This bug was first
noticed by some users of openstack who rolled their own fix. Basically,
on linux, if you set the SO_BINDTODEVICE socket option, it will allow
different daemons to share the port and respond to unicast packets, as
long as they listen on different interfaces. I managed to communicate
with Simon Kelley, the maintainer of dnsmasq and he has integrated a
fix[3] for the issue in the current version[1] of dnsmaq.</div><div><br></div><div>I
don't know how may users out there are using vlan mode, but you should
be able to deal with this issue by upgrading dnsmasq. It would be great
if the various distributionss could upgrade as well, or at least try to
patch in the fix[3]. If upgrading dnsmasq is out of the question, a
possible workaround is to minimize lease renewals with something like
the following combination of config options.</div><div><br></div><div>#
release leases immediately on terminate</div><div>force_dhcp_release=true</div><div>#
one week lease time</div><div>dhcp_lease_time=604800</div><div># two
week disassociate timeout</div><div>fixed_ip_disassociate_timeout=1209600</div><div><br></div><div>Vish</div><div><br></div><div>[1] <a
moz-do-not-send="true"
href="http://www.thekelleys.org.uk/dnsmasq/dnsmasq-2.61.tar.gz">http://www.thekelleys.org.uk/dnsmasq/dnsmasq-2.61.tar.gz</a></div><div><br></div><div>[2] <a
moz-do-not-send="true"
href="http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2011q3/005233.html">http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2011q3/005233.html</a></div><div><br></div><div>[3] <a
moz-do-not-send="true"
href="http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=9380ba70d67db6b69f817d8e318de5ba1e990b12">http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=9380ba70d67db6b69f817d8e318de5ba1e990b12</a></div><div>_______________________________________________<br>Mailing
list: <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>Post to :
<a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>Unsubscribe :
<a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>More help :
<a class="moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a><br></div></div></blockquote><br><div
class="moz-signature">-- <br><span><span style="font-family: Lucida
Grande;">Nuage & Co - Razique Mahroua <br>
<span style="font-weight: bold;"><a class="moz-txt-link-abbreviated" href="mailto:razique.mahroua@gmail.com">razique.mahroua@gmail.com</a></span></span><span
style="color: rgb(51, 153, 153);"></span><span style="font-family:
monospace;"></span></span><br>
<br>
<div class="moz-signature"><span style="font-family: monospace;">
</span><img src="cid:part3.02030308.08060008@gmail.com" name="image.jpg"
alt=""></div>
<br>
<br>
</div></div></body></html>