security group update notification sent twice

Bug #1254924 reported by Salvatore Orlando
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Medium
Salvatore Orlando

Bug Description

For several plugins the security group update notification on port-update is sent twice.

1) https://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/plugin.py#L634
2) https://github.com/openstack/neutron/blob/master/neutron/db/securitygroups_rpc_base.py#L101

the notification at #1 is sent but not that at #2 if the security group on the port was not updated.
However if the notication at #2 is sent, then the notification at #1 will always be sent too.

Therefore the notification at #2 is probably redundant

This affects at least the following plugins:
- nec
- ryu
- linuxbridge
- openvswitch
- ryu

This causes a lot more traffic on the agent side thus slowing all the operations on the agent, including wiring VIF ports.

tags: added: neutron-parallel sg-fw
Changed in neutron:
milestone: none → icehouse-1
assignee: nobody → Salvatore Orlando (salvatore-orlando)
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.openstack.org/58415

Revision history for this message
yong sheng gong (gongysh) wrote :

https://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/plugin.py#L634
will send port_update message to agent,
but https://github.com/openstack/neutron/blob/master/neutron/db/securitygroups_rpc_base.py#L101
sends security_groups_member_updated or security_groups_provider_updated.

These messages are very differently dealt on agent side. are u sure they are redundant?

Revision history for this message
Salvatore Orlando (salvatore-orlando) wrote :

The handler port_update refreshes also the security group if the port has a security group configured.

Feel free to mark the bug as invalid if you feel we need to send two messages for each update_port operation.

Changed in neutron:
status: New → In Progress
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/58415
Committed: http://github.com/openstack/neutron/commit/09c3051fb2819b647f4d8196e6e0fbc66f0ccc04
Submitter: Jenkins
Branch: master

commit 09c3051fb2819b647f4d8196e6e0fbc66f0ccc04
Author: Salvatore Orlando <email address hidden>
Date: Mon Nov 25 16:25:43 2013 -0800

    Send only one agent notification on port update

    This patch removes the other redundant notification sent in the same
    routine to notify whether a security group changed.

    Closes-Bug: #1254924
    Partial Blueprint neutron-tempest-parallel

    Change-Id: I5bad015decdc197c3fa9b58c680564380d513bc4

Changed in neutron:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in neutron:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in neutron:
milestone: icehouse-1 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.