Open Stack

A flat network for LB management should work as well. However, the LB 
management network has nothing to do with your VMs (except the 
amphorae), and it's unclear to me what ports you are adding to them and 
the Neutron router. There is no router for a flat network.

You seem to imply that your machines (controllers, computes) are 
virtual. My experience with Kolla is also in a virtual environment. I 
had to abandon VLAN or flat LB management networks because I was not 
competent enough to solve the networking problems outside of Kolla and 
went for the tenant network solution that I shared.

Bernd

On 2021/08/10 9:31 PM, Chris Lyons wrote:
>
> Thank you!  I am trying the path of adding a separate physical 
> (although its really virtual..) network that will be exclusively for 
> lb-mgmt….that would work also, correct?  I added a port to my virtual 
> router and the added a corresponding port to each openstack vm.  It 
> sounds like only control and compute nodes need it but I was going to 
> add it to everything to start and then eliminate one by one once it 
> worked.
>
> Would that approach also work?
>
> *From: *Bernd Bausch <berndbausch at gmail.com>
> *Date: *Tuesday, August 10, 2021 at 2:39 AM
> *To: *Chris Lyons <chris at lyonsgroup.family>, 
> openstack-discuss at lists.openstack.org 
> <openstack-discuss at lists.openstack.org>
> *Subject: *Re: Octavia
>
> The stacktrace shows that Octavia can't reach an Amphora. I suppose 
> you get this log when trying to create a loadbalancer? If so, most 
> likely the Amphora management network is not set up correctly.
>
> The difficulty is that Octavia workers, which are /processes /running 
> on the controllers, need to have access to the same management network 
> as the Amphora /instances/. If you implement the management network as 
> a normal tenant network, some non-trivial manual Openvswitch 
> configuration is required. See 
> https://docs.openstack.org/octavia/latest/install/install-ubuntu.html#install-and-configure-components 
> <https://docs.openstack.org/octavia/latest/install/install-ubuntu.html#install-and-configure-components> 
> for instructions. In production settings, usually a VLAN is used, 
> which is easy to access from controller processes.
>
> I succeeded running Octavia on a Kolla cluster with three-way 
> controllers, with a tenant network (VXLAN-based) for amphora 
> management. My notes are attached (they are tailored to my 
> configuration, of course).
>
> Bernd.
>
> On 2021/08/09 10:57 AM, Chris Lyons wrote:
>
> Well…it gets. A lot further….  I see this error now…. Im looking 
> around to see if it’s a security group missing or if there is some 
> other setting I missed.  Im not seeing any scripts to prep the 
> env…usually there is something like that if it’s a security 
> group…anyone know?
>
> ...
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker Traceback (most recent 
> call last):
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker   File 
> "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", 
> line 53, in _execute_task
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker     result = 
> task.execute(**arguments)
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker   File 
> "/usr/lib/python3.6/site-packages/octavia/controller/worker/v1/tasks/amphora_driver_tasks.py", 
> line 424, in execute
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker     amp_info = 
> self.amphora_driver.get_info(amphora)
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker   File 
> "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", 
> line 373, in get_info
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker     amphora, 
> raise_retry_exception=raise_retry_exception)
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker   File 
> "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", 
> line 106, in _populate_amphora_api_version
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker 
> raise_retry_exception=raise_retry_exception)['api_version']
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker   File 
> "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", 
> line 744, in get_api_version
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker 
> raise_retry_exception=raise_retry_exception)
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker   File 
> "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", 
> line 738, in request
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker     raise 
> driver_except.TimeOutException()
>
> 2021-08-08 21:22:35.965 27 ERROR 
> octavia.controller.worker.v1.controller_worker 
> octavia.amphorae.driver_exceptions.exceptions.TimeOutException: 
> contacting the amphora timed out
>
> ...
>
>
>
>
> /This email has been scanned by Inbound Shield™./
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210811/d6617503/attachment.html>