<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">I do not have this fix. Seems it’s too recent for the latest RDO-Ocata. I will apply it, it should solve the iptables issue. I have a hunch it’s not the cause of the missing floatingip issue though, but I will try.</div><div class=""><br class=""></div><div class="">Thank you for your help,</div><div class=""><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Jean-Philippe Méthot</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Openstack system administrator</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Administrateur système Openstack</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">PlanetHoster inc.</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;"><br class=""></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">Le 19 sept. 2017 à 09:51, Ajay Kalambur (akalambu) <<a href="mailto:akalambu@cisco.com" class="">akalambu@cisco.com</a>> a écrit :</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif;" class="">
<div class="">
<div class="">
<div class="">Do you have this fix</div>
<div class=""><a href="https://review.openstack.org/#/c/501317/" class="">https://review.openstack.org/#/c/501317/</a></div>
<div class="">
<div id="MAC_OUTLOOK_SIGNATURE" class=""></div>
</div>
</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Ajay</div>
<div class=""><br class="">
</div>
<span id="OLK_SRC_BODY_SECTION" class="">
<div style="font-family: Calibri; font-size: 12pt; text-align: left; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);" class="">
<span style="font-weight:bold" class="">From: </span>JP Japan <<a href="mailto:jp.methot@planethoster.info" class="">jp.methot@planethoster.info</a>><br class="">
<span style="font-weight:bold" class="">Date: </span>Monday, September 18, 2017 at 5:02 PM<br class="">
<span style="font-weight:bold" class="">To: </span>"<a href="mailto:openstack@lists.openstack.org" class="">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org" class="">openstack@lists.openstack.org</a>><br class="">
<span style="font-weight:bold" class="">Subject: </span>Re: [Openstack] Floating IP not being added in namespace anymore<br class="">
</div>
<div class=""><br class="">
</div>
<span style="mso-bookmark:_MailOriginalBody" class="">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Sorry, I ended up sending the previous email a bit too quickly. Here’s some more info about our setup.</div>
<div class=""><br class="">
</div>
<div class="">-It’s running latest Ocata with Openvswitch and network dedicated nodes.</div>
<div class="">-The network nodes are L3HA</div>
<div class="">-There’s no DVR here.</div>
<br class="">
<div class="">
<blockquote type="cite" class="">
<div class="">Le 19 sept. 2017 à 08:51, JP Japan <<a href="mailto:jp.methot@planethoster.info" class="">jp.methot@planethoster.info</a>> a écrit :</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hi,
<div class=""><br class="">
</div>
<div class="">A few days ago, we made two big changes on our production infrastructure: we updated to latest Ocata and we changed the outgoing port on our network node to a lacp port. We made the change by switching the port in br-ex in openvswitch to the new
lacp-backed port. Ever since these two things happened right after the other, we’ve ran into two issues, one which has much worse consequences than the other:</div>
<div class=""><br class="">
</div>
<div class="">1.We can’t add floating ips to instances anymore. The interface says the operation completed successfully, the database gets updated, but the IP address doesn’t exist in the network namespace on the network nodes. Strangely enough, the iptables
rules in the NAT table do exist. The port just doesn’t receive the new address. Adding the floating ip address manually to the virtual interface with "ip netns exec *qrouter namespace id* ip addr add *ip address* dev *virtual interface*" solves this, but is
in no way a permanent solution.</div>
<div class=""><br class="">
</div>
<div class="">2.We’re getting an error message in the L3-agent whenever it starts informing us it was unable to add some rules in iptables because there’s a lock on xtables, while as far as we know, the L3-agent itself is the one holding the lock. Here’s the
error: </div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager # Generated by iptables_manager</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager *nat</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager -I neutron-l3-agent-PREROUTING 7 -d 169.254.169.254/32 -i qr-+ -p tcp -m tcp
--dport 80 -j REDIRECT --to-ports 9697</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager COMMIT</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager # Completed by iptables_manager</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager ; Stdout: ; Stderr: Another app is currently holding the xtables lock. Perhaps
you want to use the -w option?</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="font-kerning: none" class="">2017-09-18 13:00:55.426 18575 ERROR neutron.callbacks.manager</span><span style="line-height: normal; font-family: Helvetica; -webkit-font-kerning: none;" class=""> </span></div>
</div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="line-height: normal; font-family: Helvetica; -webkit-font-kerning: none;" class=""><br class="">
</span></div>
<div style="margin: 0px; line-height: normal; font-family: Monaco;" class=""><span style="line-height: normal; font-family: Helvetica; -webkit-font-kerning: none;" class="">It’s not clear exactly how this is affecting the setup, as metadata is still going through
properly (most likely through the DHCP) but it’s quite worrying.</span></div>
</div>
_______________________________________________<br class="">
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">
Post to : <a href="mailto:openstack@lists.openstack.org" class="">openstack@lists.openstack.org</a><br class="">
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">
</div>
</blockquote>
</div>
<br class="">
<div class="">Jean-Philippe Méthot</div>
<div class="">Openstack system administrator</div>
<div class="">PlanetHoster inc.</div>
</div>
</div>
</span></span>
</div>
</div></blockquote></div><br class=""></div></body></html>