Snat not working Build 38 Ubuntu havana

[Kumar Harsh]

Build 38 Ubuntu havana

Setup Details :

env.roledefs = {
    'all': [host1, host2, host3, host4, host5],
    'cfgm': [host1, host2, host3],
    'openstack': [host2],
    'control': [host2, host3],
    'compute': [host4, host5],
    'collector': [host1],
    'webui': [host1],
    'database': [host1, host2],
    'build': [host_build],
}

env.hostnames = {
    'all': ['nodec6', 'nodec7', 'nodec8', 'nodec9', 'nodec10']
}

Steps followed :

1) Create an external virtual network :

root@nodec6:~# neutron net-show bd644b47-dbfa-4bdc-8e58-22b5bc9d92b4
+-------------------------+---------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------------+---------------------------------------------------------------------------------------------------------------------+
| admin_state_up | True |
| contrail:fq_name | default-domain |
| | TestRouters-22083063 |
| | ext_vn-38830613 |
| contrail:instance_count | 0 |
| contrail:subnet_ipam | {"subnet_cidr": "10.204.220.176/29", "ipam_fq_name": ["default-domain", "default-project", "default-network-ipam"]} |
| id | bd644b47-dbfa-4bdc-8e58-22b5bc9d92b4 |
| name | ext_vn-38830613 |
| router:external | True |
| shared | False |
| status | ACTIVE |
| subnets | e5f3fb32-dad7-40f8-b0b8-a409573a03c6 |
| tenant_id | d403bd19013e42e2bb3ab790e4b7b0a9 |
+-------------------------+---------------------------------------------------------------------------------------------------------------------+

2) Create a private virtual network :

root@nodec6:~# neutron net-show 036b7881-4613-4363-b941-d260f12b774f
+-------------------------+--------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------------+--------------------------------------------------------------------------------------------------------------------+
| admin_state_up | True |
| contrail:fq_name | default-domain |
| | TestRouters-22083063 |
| | vn_private-33640881 |
| contrail:instance_count | 0 |
| contrail:subnet_ipam | {"subnet_cidr": "112.133.136.0/24", "ipam_fq_name": ["default-domain", "default-project", "default-network-ipam"]} |
| id | 036b7881-4613-4363-b941-d260f12b774f |
| name | vn_private-33640881 |
| router:external | False |
| shared | False |
| status | ACTIVE |
| subnets | eed56613-4dcd-49dc-8c0b-2765eb92c4a7 |
| tenant_id | d403bd19013e42e2bb3ab790e4b7b0a9 |
| vpc:route_table | [u'default-domain', u'TestRouters-22083063', u'rt_15ecac84-d024-45b5-a628-846a8ab5550e'] |
+-------------------------+--------------------------------------------------------------------------------------------------------------------+

3) Add a router with external gateway set to "ext_vn-38830613 " and add "vn_private-33640881" subnet to the router

root@nodec6:~# neutron router-show 15ecac84-d024-45b5-a628-846a8ab5550e
+-----------------------+--------------------------------------------------------+
| Field | Value |
+-----------------------+--------------------------------------------------------+
| admin_state_up | True |
| contrail:fq_name | default-domain |
| | TestRouters-22083063 |
| | router1-96272146 |
| external_gateway_info | {"network_id": "bd644b47-dbfa-4bdc-8e58-22b5bc9d92b4"} |
| id | 15ecac84-d024-45b5-a628-846a8ab5550e |
| name | router1-96272146 |
| status | ACTIVE |
| tenant_id | d403bd19013e42e2bb3ab790e4b7b0a9 |
+-----------------------+--------------------------------------------------------+

4) Launch a vm in "vn_private-33640881" try to ping 8.8.8.8
Ping Fails

5)root@nodec6:~# neutron net-list
+--------------------------------------+------------------------------------------------------+--------------------------------------------------------+
| id | name | subnets |
+--------------------------------------+------------------------------------------------------+--------------------------------------------------------+
| 7b07f054-bf30-462a-b687-c7d1e807c6b4 | ip-fabric | |
| 89924693-6753-415d-99fc-d06f9afca0a6 | default-virtual-network | |
| f98956b8-35fd-43b3-87dd-e8690d583dc1 | __link_local__ | |
| bd644b47-dbfa-4bdc-8e58-22b5bc9d92b4 | ext_vn-38830613 | e5f3fb32-dad7-40f8-b0b8-a409573a03c6 10.204.220.176/29 |
| 33b3e89e-eea2-485f-95d3-6ddc2c27f0ad | snat-si-left_si_15ecac84-d024-45b5-a628-846a8ab5550e | 9c95b7f9-941c-40c2-a0aa-91b93a4e5830 100.64.0.0/29 |
| 036b7881-4613-4363-b941-d260f12b774f | vn_private-33640881 | eed56613-4dcd-49dc-8c0b-2765eb92c4a7 112.133.136.0/24 |
+--------------------------------------+------------------------------------------------------+--------------------------------------------------------+

6)No snat service instance gets launched on compute nodes :

root@nodec9:~# ip netns list
root@nodec9:~#

root@nodec10:~# ip netns list
root@nodec10:~#
root@nodec10:~#

7)root@nodec6:~# neutron router-list
+--------------------------------------+------------------+--------------------------------------------------------+
| id | name | external_gateway_info |
+--------------------------------------+------------------+--------------------------------------------------------+
| 15ecac84-d024-45b5-a628-846a8ab5550e | router1-96272146 | {"network_id": "bd644b47-dbfa-4bdc-8e58-22b5bc9d92b4"} |
+--------------------------------------+------------------+--------------------------------------------------------+

8)Snat service instance is not getting launched with correct interfaces :
             type:service-instance
                        name:default-domain:TestRouters-22083063:si_15ecac84-d024-45b5-a628-846a8ab5550e

                        service-instance-properties
                                auto-policy:true

                                interface-list
                                        virtual-network:default-domain:TestRouters-22083063:snat-si-left_si_15ecac84-d024-45b5-a628-846a8ab5550e

                                interface-list
                                scale-out
                                        max-instances:1

                                        auto-scale:true

                                ha-mode:active-standby

                        id-perms
                                permissions
                                        owner:cloud-admin

                                        owner-access:7

                                        group:cloud-admin-group

                                        group-access:7

                                        other-access:7

                                uuid
                                        uuid-mslong:155157995430954427

                                        uuid-lslong:12437083571044435083
                                        Uuid : 02273b5f-f1b9-45bb-ac99-659d05f3448b

                                enable:true

                                created:2014-09-24T06:56:48

                                last-modified:2014-09-24T08:30:18

                        display-name:si_15ecac84-d024-45b5-a628-846a8ab5550e

[Rudra Rugge (rrugge)]

R1.10:
https://github.com/Juniper/contrail-controller/commit/2cde09024391c863684778e6facdb975af16e700

Mainline:
https://github.com/Juniper/contrail-controller/commit/507c3b7b541c453a382e6f6a30244eec621cbc13

[Kumar Harsh (hkumar)]

Verified with build 41 ubuntu havana