| 2017-02-22 08:17:06 |
Slobodan Blatnjak |
description |
Customer: STC
Contrail: 3.1.0.0 (Build 25) Mitaka.
FIP associated to VIP port is not reachable.
When FIP is associated to VM port the route is advertised by vrouter-agent.
But when 3rd neutron port is created ("neutron port-create" command) and used as VIP port to which FIP is associated, FIP is not reachable.
AAP (VIP address) is configured on VM port. FIP is updated with floating_ip_fixed_ip_address (VIP address).
Attached is a file (from the customer deployment) that compares the working case (FIP mapped to a regular VMI) with the non-working case (FIP mapped to the VIP-port). From a configuration perspective, and except for obvious differences (VIP-port lacks some attributes that regular VMI has), they are identical. In other words, the configuration obtained with neutron API looks correct.
However the BGP route for the FIP is not generated by the control node in the non-working case.
We suspect the problem lies on the control plane (vRouter agent not sending the route to control node) and not on the configuration. Edouard can reply with further findings.
-----------------------LAB setup details-----------
172.30.157.205 (admin/juniper123 - both Contrail & OS), root/juniper123, Contrail version 3.2.0.0-19.
FIP: 100.0.0.201
VIP: 10.0.0.201 (secondary IP on ciros interface)
-----------------------From lab---------------------
Contrail Ciros (internal network) interface detail (json) when FIP is assigned to VIP/AAP are shown below. Ping does work from external network.
Floating IP Mapped Fixed IP Address Floating IP Pool
100.0.0.201 192.168.1.3 (36e9420d-0b01-430c-b2dd-27378383672d) FIP_NET:FIP_POOL
{
floating_ips: [
{
virtual_network: default-domain:admin:FIP_NET
ip_address: 100.0.0.201
}
]
vm_name: cir1
ip6_active: false
virtual_network: default-domain:admin:ciros1_net
uuid: 36e9420d-0b01-430c-b2dd-27378383672d
-----------------------From lab---------------------
Contrail Ciros (internal network) interface detail (json) when FIP is assigned to VIP/AAP are shown below. Ping to FIP doesn't work from external network, ping to VIP works.
Floating IP Mapped Fixed IP Address Floating IP Pool
100.0.0.201 10.0.0.201 (c7b4f493-e0e8-46ff-be2f-2267eb2560d0) FIP_NET:FIP_POOL
{
UveVirtualMachineAgent: {
vm_name: cir1
cpu_info: { ... }
interface_list: [ ... ]
uuid: e9c3da76-bcaa-4929-b54e-d0d4db4f5a0e
vrouter: sdn4
interface_details: [
{
floating_ips: [ <-------- EMPTY
]
vm_name: cir1 |
Contrail: 3.1.0.0 (Build 25) Mitaka.
FIP associated to VIP port is not reachable.
When FIP is associated to VM port the route is advertised by vrouter-agent.
But when 3rd neutron port is created ("neutron port-create" command) and used as VIP port to which FIP is associated, FIP is not reachable.
AAP (VIP address) is configured on VM port. FIP is updated with floating_ip_fixed_ip_address (VIP address).
Attached is a file (from the customer deployment) that compares the working case (FIP mapped to a regular VMI) with the non-working case (FIP mapped to the VIP-port). From a configuration perspective, and except for obvious differences (VIP-port lacks some attributes that regular VMI has), they are identical. In other words, the configuration obtained with neutron API looks correct.
However the BGP route for the FIP is not generated by the control node in the non-working case.
We suspect the problem lies on the control plane (vRouter agent not sending the route to control node) and not on the configuration. Edouard can reply with further findings.
-----------------------LAB setup details-----------
172.30.157.205 (admin/juniper123 - both Contrail & OS), root/juniper123, Contrail version 3.2.0.0-19.
FIP: 100.0.0.201
VIP: 10.0.0.201 (secondary IP on ciros interface)
-----------------------From lab---------------------
Contrail Ciros (internal network) interface detail (json) when FIP is assigned to VIP/AAP are shown below. Ping does work from external network.
Floating IP Mapped Fixed IP Address Floating IP Pool
100.0.0.201 192.168.1.3 (36e9420d-0b01-430c-b2dd-27378383672d) FIP_NET:FIP_POOL
{
floating_ips: [
{
virtual_network: default-domain:admin:FIP_NET
ip_address: 100.0.0.201
}
]
vm_name: cir1
ip6_active: false
virtual_network: default-domain:admin:ciros1_net
uuid: 36e9420d-0b01-430c-b2dd-27378383672d
-----------------------From lab---------------------
Contrail Ciros (internal network) interface detail (json) when FIP is assigned to VIP/AAP are shown below. Ping to FIP doesn't work from external network, ping to VIP works.
Floating IP Mapped Fixed IP Address Floating IP Pool
100.0.0.201 10.0.0.201 (c7b4f493-e0e8-46ff-be2f-2267eb2560d0) FIP_NET:FIP_POOL
{
UveVirtualMachineAgent: {
vm_name: cir1
cpu_info: { ... }
interface_list: [ ... ]
uuid: e9c3da76-bcaa-4929-b54e-d0d4db4f5a0e
vrouter: sdn4
interface_details: [
{
floating_ips: [ <-------- EMPTY
]
vm_name: cir1 |
|
