[Openstack] Neutron routers not getting a VIP in L3 HA mode

Abhishek Chanda abhishek.lists at gmail.com
Thu Apr 30 23:14:41 UTC 2015


Thanks Erik.

But shouldn't the VIP be from the associated tenant network?

I need to configure reaching the VIP from another external host.
Currently, the VIP is being assigned from a link local network, which
is not reachable externally. I took a quick look at the code and this
network looks hard coded. Am I missing something?

Thanks

On Thu, Apr 30, 2015 at 3:53 PM, Erik McCormick
<emccormick at cirrusseven.com> wrote:
> That looks right. They both have a default backup state but your first node
> is master as it has IPs on your subnets and the other does not. You'll
> probably see the state changes in syslog if you grep for vrrp.
>
> On Apr 30, 2015 6:08 PM, "Abhishek Chanda" <abhishek.lists at gmail.com> wrote:
>>
>> Hi all,
>>
>> I am trying to run Neutron Juno with HA enabled for L3 routers. I have
>> two issues:
>> 1. Both routers come up as backup, in their VRRP config
>> 2. The routers do not get a VIP from my private subnet
>>
>> I did these:
>> neutron router-create admin-router
>> neutron router-gateway-set admin-router public-network
>> neutron router-interface-add admin-router private-subnet
>>
>> What am I doing wrong?
>>
>> Here is the config on box 1:
>>
>> columbus-pistachio:/opt/openstack # cat
>>
>> /var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/keepalived.conf
>> vrrp_sync_group VG_1 {
>>     group {
>>         VR_1
>>     }
>>     notify_master
>>
>> "/var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/notify_master.sh"
>>     notify_backup
>>
>> "/var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/notify_backup.sh"
>>     notify_fault
>>
>> "/var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/notify_fault.sh"
>> }
>> vrrp_instance VR_1 {
>>     state BACKUP
>>     interface ha-a00b9164-7f
>>     virtual_router_id 1
>>     priority 50
>>     nopreempt
>>     advert_int 2
>>     track_interface {
>>         ha-a00b9164-7f
>>     }
>>     virtual_ipaddress {
>>         169.254.0.1/24 dev ha-a00b9164-7f
>>     }
>>     virtual_ipaddress_excluded {
>>         192.168.1.1/24 dev qr-350c1c1d-94
>>         192.168.3.2/24 dev qg-3ecc662c-19
>>         fe80::f816:3eff:fe1b:cac2/64 dev qr-350c1c1d-94 scope link
>>         fe80::f816:3eff:feb0:28c0/64 dev qg-3ecc662c-19 scope link
>>     }
>>     virtual_routes {
>>         0.0.0.0/0 via 192.168.3.1 dev qg-3ecc662c-19
>>     }
>> }
>>
>> columbus-pistachio:/opt/openstack # ip netns exec
>> qrouter-1125512b-ae96-43f9-a69d-c781ba7217d3 ip a
>> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
>> group default
>>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>>     inet 127.0.0.1/8 scope host lo
>>        valid_lft forever preferred_lft forever
>>     inet6 ::1/128 scope host
>>        valid_lft forever preferred_lft forever
>> 827: ha-a00b9164-7f: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
>> state UNKNOWN group default
>>     link/ether fa:16:3e:24:c8:8f brd ff:ff:ff:ff:ff:ff
>>     inet 169.254.192.1/18 brd 169.254.255.255 scope global ha-a00b9164-7f
>>        valid_lft forever preferred_lft forever
>>     inet 169.254.0.1/24 scope global ha-a00b9164-7f
>>        valid_lft forever preferred_lft forever
>>     inet6 fe80::f816:3eff:fe24:c88f/64 scope link
>>        valid_lft forever preferred_lft forever
>> 828: qg-3ecc662c-19: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
>> state UNKNOWN group default
>>     link/ether fa:16:3e:b0:28:c0 brd ff:ff:ff:ff:ff:ff
>>     inet 192.168.3.2/24 scope global qg-3ecc662c-19
>>        valid_lft forever preferred_lft forever
>>     inet6 fe80::f816:3eff:feb0:28c0/64 scope link nodad
>>        valid_lft forever preferred_lft forever
>> 829: qr-350c1c1d-94: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
>> state UNKNOWN group default
>>     link/ether fa:16:3e:1b:ca:c2 brd ff:ff:ff:ff:ff:ff
>>     inet 192.168.1.1/24 scope global qr-350c1c1d-94
>>        valid_lft forever preferred_lft forever
>>     inet6 fe80::f816:3eff:fe1b:cac2/64 scope link nodad
>>        valid_lft forever preferred_lft forever
>>
>> And on two:
>>
>> memphis-pistachio:/opt/openstack # cat
>>
>> /var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/keepalived.conf
>> vrrp_sync_group VG_1 {
>>     group {
>>         VR_1
>>     }
>>     notify_master
>>
>> "/var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/notify_master.sh"
>>     notify_backup
>>
>> "/var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/notify_backup.sh"
>>     notify_fault
>>
>> "/var/lib/neutron/ha_confs/1125512b-ae96-43f9-a69d-c781ba7217d3/notify_fault.sh"
>> }
>> vrrp_instance VR_1 {
>>     state BACKUP
>>     interface ha-cc3c51fa-27
>>     virtual_router_id 1
>>     priority 50
>>     nopreempt
>>     advert_int 2
>>     track_interface {
>>         ha-cc3c51fa-27
>>     }
>>     virtual_ipaddress {
>>         169.254.0.1/24 dev ha-cc3c51fa-27
>>     }
>>     virtual_ipaddress_excluded {
>>         192.168.1.1/24 dev qr-350c1c1d-94
>>         192.168.3.2/24 dev qg-3ecc662c-19
>>         fe80::f816:3eff:fe1b:cac2/64 dev qr-350c1c1d-94 scope link
>>         fe80::f816:3eff:feb0:28c0/64 dev qg-3ecc662c-19 scope link
>>     }
>>     virtual_routes {
>>         0.0.0.0/0 via 192.168.3.1 dev qg-3ecc662c-19
>>     }
>> }
>>
>> memphis-pistachio:/opt/openstack # ip netns exec
>> qrouter-1125512b-ae96-43f9-a69d-c781ba7217d3 ip a
>> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
>> group default
>>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>>     inet 127.0.0.1/8 scope host lo
>>        valid_lft forever preferred_lft forever
>>     inet6 ::1/128 scope host
>>        valid_lft forever preferred_lft forever
>> 443: ha-cc3c51fa-27: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
>> state UNKNOWN group default
>>     link/ether fa:16:3e:c1:43:c7 brd ff:ff:ff:ff:ff:ff
>>     inet 169.254.192.2/18 brd 169.254.255.255 scope global ha-cc3c51fa-27
>>        valid_lft forever preferred_lft forever
>>     inet6 fe80::f816:3eff:fec1:43c7/64 scope link
>>        valid_lft forever preferred_lft forever
>> 444: qg-3ecc662c-19: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
>> state UNKNOWN group default
>>     link/ether fa:16:3e:b0:28:c0 brd ff:ff:ff:ff:ff:ff
>> 445: qr-350c1c1d-94: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
>> state UNKNOWN group default
>>     link/ether fa:16:3e:1b:ca:c2 brd ff:ff:ff:ff:ff:ff
>>
>> Thanks
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack




More information about the Openstack mailing list