[openstack-dev] [neutron][SFC]
Henry Fourie
louis.fourie at huawei.com
Thu Jun 9 16:59:47 UTC 2016
Alioune,
The logical-source-port refers to a Neutron port of the VM that
originates the traffic that is to be processed by the port-chain.
- Louis
From: Alioune [mailto:balioune3 at gmail.com]
Sent: Thursday, June 09, 2016 6:50 AM
To: Mohan Kumar
Cc: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [neutron][SFC]
Thanks Mohan,
After setting service_plugins and adding sfc tables to neutrondb, I can create port-pair, port-pair-group but classifier creation still claim a logical-source-port parameter.
neutron flow-classifier-create --ethertype IPv4 --source-ip-prefix 55.55.55.2/32<http://55.55.55.2/32> --destination-ip-prefix 55.55.55.9/32<http://55.55.55.9/32> --protocol tcp --source-port 22:22 --destination-port 1:65000 FC1
ERROR:
neutron flow-classifier-create: error: argument --logical-source-port is required
Try 'neutron help flow-classifier-create' for more information.
Please someone can explain what does --logical-source-port correspond to ?
Does the classifier require port-create like SF ?
Regards,
On 9 June 2016 at 09:21, Mohan Kumar <nmohankumar1011 at gmail.com<mailto:nmohankumar1011 at gmail.com>> wrote:
Alioune,
networking-sfc resources not installed / not reachable , If installation is okay, Possibly you may missed service_plugins entry in neutron.conf ( in case of manual networking-sfc installation)
it should be ,
service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin,networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin,networking_sfc.services.sfc.plugin.SfcPlugin
and restart q-svc services in screen -x
Thanks.,
Mohankumar.N
On Thu, Jun 9, 2016 at 12:58 AM, Alioune <balioune3 at gmail.com<mailto:balioune3 at gmail.com>> wrote:
I've switched from devstack to a normal deployment of openstack/mitaka and neutron-l2 agent is working fine with sfc. I can boot instances, create ports.
However I can not create neither flow-classifier nor port-pair ...
neutron flow-classifier-create --ethertype IPv4 --source-ip-prefix 22.1.20.1/32<http://22.1.20.1/32> --destination-ip-prefix 172.4.5.6/32<http://172.4.5.6/32> --protocol tcp --source-port 23:23 --destination-port 100:100 FC1
returns: neutron flow-classifier-create: error: argument --logical-source-port is required
Try 'neutron help flow-classifier-create' for more information.
neutron port-pair-create --ingress=p1 --egress=p2 PP1
404 Not Found
The resource could not be found.
Neutron server returns request_ids: ['req-1bfd0983-4a61-4b32-90b3-252004d90e65']
neutron --version
4.1.1
p1,p2,p3,p4 have already been created, I can ping instances attached to these ports.
Since I've not installed networking-sfc, are there additional config to set in neutron config files ?
Or is it due to neutron-client version ?
Regards
On 8 June 2016 at 20:31, Mohan Kumar <nmohankumar1011 at gmail.com<mailto:nmohankumar1011 at gmail.com>> wrote:
neutron agent not able to fetch details from ovsdb . Could you check below options 1.restart ovsdb-server and execute ovs_vsctl list-br 2. execute ovs- vsctl list-br manually and try to check error.
3. Could be ovs cleanup issue , please check the output of sudo service openvswitch restart and /etc/init.d/openvswich** restart , both should be same
Thanks.,
Mohankumar.N
On Jun 7, 2016 6:04 PM, "Alioune" <balioune3 at gmail.com<mailto:balioune3 at gmail.com>> wrote:
Hi Mohan/Cathy
I've installed now ovs 2.4.0 and followed https://wiki.openstack.org/wiki/Neutron/ServiceInsertionAndChaining but I got this error :
Regards,
+ neutron-ovs-cleanup
2016-06-07 11:25:36.465 22147 INFO neutron.common.config [-] Logging enabled!
2016-06-07 11:25:36.468 22147 INFO neutron.common.config [-] /usr/local/bin/neutron-ovs-cleanup version 7.1.1.dev4
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl [-] Unable to execute ['ovs-vsctl', '--timeout=10', '--oneline', '--format=json', '--', 'list-br'].
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl Traceback (most recent call last):
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl File "/opt/stack/neutron/neutron/agent/ovsdb/impl_vsctl.py", line 63, in run_vsctl
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl log_fail_as_error=False).rstrip()
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl File "/opt/stack/neutron/neutron/agent/linux/utils.py", line 159, in execute
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl raise RuntimeError(m)
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl RuntimeError:
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl Command: ['sudo', 'ovs-vsctl', '--timeout=10', '--oneline', '--format=json', '--', 'list-br']
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl Exit code: 1
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl
2016-06-07 11:25:36.505 22147 ERROR neutron.agent.ovsdb.impl_vsctl
2016-06-07 11:25:36.512 22147 CRITICAL neutron [-] RuntimeError:
Command: ['sudo', 'ovs-vsctl', '--timeout=10', '--oneline', '--format=json', '--', 'list-br']
Exit code: 1
2016-06-07 11:25:36.512 22147 ERROR neutron Traceback (most recent call last):
2016-06-07 11:25:36.512 22147 ERROR neutron File "/usr/local/bin/neutron-ovs-cleanup", line 10, in <module>
2016-06-07 11:25:36.512 22147 ERROR neutron sys.exit(main())
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/cmd/ovs_cleanup.py", line 89, in main
2016-06-07 11:25:36.512 22147 ERROR neutron ovs_bridges = set(ovs.get_bridges())
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/agent/common/ovs_lib.py", line 132, in get_bridges
2016-06-07 11:25:36.512 22147 ERROR neutron return self.ovsdb.list_br().execute(check_error=True)
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/agent/ovsdb/impl_vsctl.py", line 83, in execute
2016-06-07 11:25:36.512 22147 ERROR neutron txn.add(self)
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/agent/ovsdb/api.py", line 70, in __exit__
2016-06-07 11:25:36.512 22147 ERROR neutron self.result = self.commit()
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/agent/ovsdb/impl_vsctl.py", line 50, in commit
2016-06-07 11:25:36.512 22147 ERROR neutron res = self.run_vsctl(args)
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/agent/ovsdb/impl_vsctl.py", line 70, in run_vsctl
2016-06-07 11:25:36.512 22147 ERROR neutron ctxt.reraise = False
2016-06-07 11:25:36.512 22147 ERROR neutron File "/usr/local/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 204, in __exit__
2016-06-07 11:25:36.512 22147 ERROR neutron six.reraise(self.type_, self.value, self.tb)
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/agent/ovsdb/impl_vsctl.py", line 63, in run_vsctl
2016-06-07 11:25:36.512 22147 ERROR neutron log_fail_as_error=False).rstrip()
2016-06-07 11:25:36.512 22147 ERROR neutron File "/opt/stack/neutron/neutron/agent/linux/utils.py", line 159, in execute
2016-06-07 11:25:36.512 22147 ERROR neutron raise RuntimeError(m)
2016-06-07 11:25:36.512 22147 ERROR neutron RuntimeError:
2016-06-07 11:25:36.512 22147 ERROR neutron Command: ['sudo', 'ovs-vsctl', '--timeout=10', '--oneline', '--format=json', '--', 'list-br']
2016-06-07 11:25:36.512 22147 ERROR neutron Exit code: 1
2016-06-07 11:25:36.512 22147 ERROR neutron
2016-06-07 11:25:36.512 22147 ERROR neutron
+ exit_trap
+ local r=1
++ jobs -p
+ jobs=
+ [[ -n '' ]]
+ kill_spinner
+ '[' '!' -z '' ']'
+ [[ 1 -ne 0 ]]
+ echo 'Error on exit'
Error on exit
+ generate-subunit 1465296797 1939 fail
+ [[ -z /opt/stack/logs ]]
+ /home/alioune/devstack/tools/worlddump.py -d /opt/stack/logs
World dumping... see /opt/stack/logs/worlddump-2016-06-07-112537.txt for details
+ exit 1
On 7 June 2016 at 12:08, Mohan Kumar <nmohankumar1011 at gmail.com<mailto:nmohankumar1011 at gmail.com>> wrote:
Hi shihanzhang / Alioune ,
your kernel (check with uname -r ) should support OVS version , below table compare kernel versions and corresponding Open vSwitch release support
| Open vSwitch | Linux kernel
|:------------:|:-------------:
| 1.4.x | 2.6.18 to 3.2
| 1.5.x | 2.6.18 to 3.2
| 1.6.x | 2.6.18 to 3.2
| 1.7.x | 2.6.18 to 3.3
| 1.8.x | 2.6.18 to 3.4
| 1.9.x | 2.6.18 to 3.8
| 1.10.x | 2.6.18 to 3.8
| 1.11.x | 2.6.18 to 3.8
| 2.0.x | 2.6.32 to 3.10
| 2.1.x | 2.6.32 to 3.11
| 2.3.x | 2.6.32 to 3.14
| 2.4.x | 2.6.32 to 4.0
| 2.5.x | 2.6.32 to 4.3
http://openvswitch.org/support/dist-docs/FAQ.md.txt (
### Q: What Linux kernel versions does each Open vSwitch release work with?)
I installed SFC with OVS 2.4.0 and 2.5.0 and not seen any issue
Please check SFC wiki for installation guidelines : https://wiki.openstack.org/wiki/Neutron/ServiceInsertionAndChaining
Thanks.,
Mohankumar.N
On Tue, Jun 7, 2016 at 1:46 PM, shihanzhang <ayshihanzhang at 126.com<mailto:ayshihanzhang at 126.com>> wrote:
Hi Alioune and Cathy,
For devstack on ubuntu14.04, the default ovs version is 2.0.2, so there was the error as Alioune said.
Do we need to install speical ovs version in networking-sfc devstack plugin.sh?
在 2016-06-07 07:48:26,"Cathy Zhang" <Cathy.H.Zhang at huawei.com<mailto:Cathy.H.Zhang at huawei.com>> 写道:
Hi Alioune,
Which OVS version are you using?
Try openvswitch version 2.4.0 and restart the openvswitch-server before installing the devstack.
Cathy
From: Alioune [mailto:balioune3 at gmail.com<mailto:balioune3 at gmail.com>]
Sent: Friday, June 03, 2016 9:07 AM
To: openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>
Cc: Cathy Zhang
Subject: [openstack-dev][neutron][SFC]
Probleme with OpenStack SFC
Hi all,
I've installed Openstack SFC with devstack and all module are corretly running except the neutron L2-agent
After a "screen -rd", it seems that there is a conflict between l2-agent and SFC (see trace bellow).
I solved the issue with "sudo ovs-vsctl set bridge br protocols=OpenFlow10,OpenFlow11,OpenFlow12,OpenFlow13" on all openvswitch bridge (br-int, br-ex, br-tun and br-mgmt0).
I would like to know:
- If someone knows why this error arrises ?
- is there another way to solve it ?
Regards,
2016-06-03 12:51:56.323 WARNING neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None] OVS is dead. OVSNeutronAgent will keep running and checking OVS status periodically.
2016-06-03 12:51:56.330 DEBUG neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None] Agent rpc_loop - iteration:4722 completed. Processed ports statistics: {'regular': {'updated': 0, 'added': 0, 'removed': 0}}. Elapsed:0.086 from (pid=12775) loop_count_and_wait /opt/stack/neutron/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py:1680
2016-06-03 12:51:58.256 DEBUG neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None] Agent rpc_loop - iteration:4723 started from (pid=12775) rpc_loop /opt/stack/neutron/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py:1732
2016-06-03 12:51:58.258 DEBUG neutron.agent.linux.utils [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None] Running command (rootwrap daemon): ['ovs-ofctl', '-O openflow13', 'dump-flows', 'br-int', 'table=23'] from (pid=12775) execute_rootwrap_daemon /opt/stack/neutron/neutron/agent/linux/utils.py:101
2016-06-03 12:51:58.311 ERROR neutron.agent.linux.utils [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None]
Command: ['ovs-ofctl', '-O openflow13', 'dump-flows', 'br-int', 'table=23']
Exit code: 1
Stdin:
Stdout:
Stderr: 2016-06-03T12:51:58Z|00001|vconn|WARN|unix:/var/run/openvswitch/br-int.mgmt: version negotiation failed (we support version 0x04, peer supports version 0x01)
ovs-ofctl: br-int: failed to connect to socket (Broken pipe)
2016-06-03 12:51:58.323 ERROR networking_sfc.services.sfc.common.ovs_ext_lib [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None]
Command: ['ovs-ofctl', '-O openflow13', 'dump-flows', 'br-int', 'table=23']
Exit code: 1
Stdin:
Stdout:
Stderr: 2016-06-03T12:51:58Z|00001|vconn|WARN|unix:/var/run/openvswitch/br-int.mgmt: version negotiation failed (we support version 0x04, peer supports version 0x01)
ovs-ofctl: br-int: failed to connect to socket (Broken pipe)
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib Traceback (most recent call last):
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib File "/opt/stack/networking-sfc/networking_sfc/services/sfc/common/ovs_ext_lib.py", line 125, in run_ofctl
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib process_input=process_input)
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib File "/opt/stack/neutron/neutron/agent/linux/utils.py", line 159, in execute
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib raise RuntimeError(m)
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib RuntimeError:
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib Command: ['ovs-ofctl', '-O openflow13', 'dump-flows', 'br-int', 'table=23']
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib Exit code: 1
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib Stdin:
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib Stdout:
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib Stderr: 2016-06-03T12:51:58Z|00001|vconn|WARN|unix:/var/run/openvswitch/br-int.mgmt: version negotiation failed (we support version 0x04, peer supports version 0x01)
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib ovs-ofctl: br-int: failed to connect to socket (Broken pipe)
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib
2016-06-03 12:51:58.323 TRACE networking_sfc.services.sfc.common.ovs_ext_lib
2016-06-03 12:51:58.335 ERROR networking_sfc.services.sfc.common.ovs_ext_lib [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None] Unable to execute ['ovs-ofctl', '-O openflow13', 'dump-flows', 'br-int', 'table=23'].
2016-06-03 12:51:58.337 WARNING neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None] OVS is dead. OVSNeutronAgent will keep running and checking OVS status periodically.
2016-06-03 12:51:58.341 DEBUG neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [req-1258bbbc-7211-4cfd-ab7c-8b856604f768 None None] Agent rpc_loop - iteration:4723 completed. Processed ports statistics: {'regular': {'updated': 0, 'added': 0, 'removed': 0}}. Elapsed:0.085 from (pid=12775) loop_count_and_wait /opt/stack/neutron/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py:1680
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160609/d65a3014/attachment.html>
More information about the OpenStack-dev
mailing list