vrouter has an entry to drop specific subnet though agent has default route

[Senthilnathan Murugappan]

Naveen is aware of the issue and has a possible fix...

From: Senthilnathan Murugappan
Sent: Wednesday, May 27, 2015 12:06 PM
To: Naveen N; Hari Prasad Killi
Subject: RE: public network gets dropped

Hi Naveen,

Yup that’s the expectation too but for some reason private-net has a entry to drop public net.

Config, Control node: 10.87.24.33, 10.87.24.34, 10.87.24.35

root@csol1-node2:/var/log/contrail# neutron router-show lr2
+-----------------------+-----------------------------------------------------------------------------+
| Field | Value |
+-----------------------+-----------------------------------------------------------------------------+
| admin_state_up | True |
| contrail:fq_name | default-domain |
| | ProjectfA91 |
| | lr2 |
| external_gateway_info | {"network_id": "1df9a6dc-8c55-4b13-b666-f0729bff7f13", "enable_snat": true} |
| id | f5ea63fd-904c-45e7-88fe-4379480dce2d |
| name | lr2 |
| status | ACTIVE |
| tenant_id | 0c43c57ede7f424ebd274c6945eb090b |
+-----------------------+-----------------------------------------------------------------------------+
root@csol1-node2:/var/log/contrail# neutron router-port-list lr2
+--------------------------------------+--------------------------------------+-------------------+--------------------------------------------------------------------------------+
| id | name | mac_address | fixed_ips |
+--------------------------------------+--------------------------------------+-------------------+--------------------------------------------------------------------------------+
| 0b39290b-d0c5-48df-b844-f6b0322b6e7a | 0b39290b-d0c5-48df-b844-f6b0322b6e7a | 02:0b:39:29:0b:d0 | {"subnet_id": "589cfcbe-3c19-4439-a64f-1116e8849c9d", "ip_address": "1.1.1.1"} |
+--------------------------------------+--------------------------------------+-------------------+--------------------------------------------------------------------------------+

From: Naveen N
Sent: Tuesday, May 26, 2015 10:22 PM
To: Senthilnathan Murugappan; Hari Prasad Killi
Subject: Re: public network gets dropped

Hi Senthil,
  In case of netns SNAT AFAIK, private network will just have a default route
pointing to SNAT SI, this route would be deleted once external gateway is deleted.

Can you give use more details about ur setup, webui IP?

Regards
Naveen N
________________________________________
From: Senthilnathan Murugappan
Sent: Wednesday, May 27, 2015 6:23 AM
To: Hari Prasad Killi; Naveen N
Subject: public network gets dropped

Hi Hari, Naveen,

On the snat setup after couple of teardowns observing that there is a specific route in vrouter to drop the public net. Issue goes away upon reload of the vrouter module.
Had a chat with Raja who believes at some point of time agent has populated this route and hasn’t cleared the same.

On Host 10.87.24.44:
Vrf 1 is private-net1 (1.1.1.0/24) and 172.21.1.0/24 is my public gw network and I don’t have any policies connecting them except for snat.
Agent has 0.0.0.0/0 to 100.64.0.5 which is the SI-VN and doesn’t have other routes than local and default.

root@csol1-node9:~# rt --dump 1 | grep 172.21.1.0
172.21.1.0/24 24 - 0
172.21.100.0/24 0 L 23 13

http://10.87.24.44:8085/Snh_Inet4UcRouteReq?x=1

Appreciate if you could take a look.

Thanks,
Senthil

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/10977
Submitter: Naveen N (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/10978
Submitter: Naveen N (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/10979
Submitter: Naveen N (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/10978
Committed: http://github.org/Juniper/contrail-controller/commit/7da0e1185650e8755bc16504b043ccf85423d80f
Submitter: Zuul
Branch: R2.20

commit 7da0e1185650e8755bc16504b043ccf85423d80f
Author: Naveen N <email address hidden>
Date: Thu May 28 15:27:50 2015 +0530

If agent doesnt find a covering route, set replacement nh to be 0.

By default vrouter expanded routes would point to discard NH,
in agent disacrd NH index is 1. Hence upon deletion of route
mtrie bucket were not collapsed because agent used to send
covering nexthop to 1 and vrouter expects it to be 0.
Closes-bug:#1459385

Change-Id: I3b458d7e6e34edcbc05f6ea7a2ade2bbfc18c44c

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/10979
Committed: http://github.org/Juniper/contrail-controller/commit/13c54753693fe0eecf63650368cb04b416feaf48
Submitter: Zuul
Branch: master

commit 13c54753693fe0eecf63650368cb04b416feaf48
Author: Naveen N <email address hidden>
Date: Thu May 28 15:27:50 2015 +0530

If agent doesnt find a covering route, set replacement nh to be 0.

By default vrouter expanded routes would point to discard NH,
in agent disacrd NH index is 1. Hence upon deletion of route
mtrie bucket were not collapsed because agent used to send
covering nexthop to 1 and vrouter expects it to be 0.
Closes-bug:#1459385

Change-Id: I3b458d7e6e34edcbc05f6ea7a2ade2bbfc18c44c
(cherry picked from commit 7da0e1185650e8755bc16504b043ccf85423d80f)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/10977
Committed: http://github.org/Juniper/contrail-controller/commit/5b75e0bc1a784e2c6b76f67553dd63ab4cd916a5
Submitter: Zuul
Branch: R2.0

commit 5b75e0bc1a784e2c6b76f67553dd63ab4cd916a5
Author: Naveen N <email address hidden>
Date: Thu May 28 02:32:18 2015 -0700

Copy flood and wait_for_traffic flag from replacement route

When a subnet route is deleted, replacement route was getting
sent with flood flag set, and the replacement route would
not have flood flag set hence vrouter would not collapse the
bucket. Eventually if a covering route is changes thses subnet
route would not be updated
Closes-bug:#1459385

Change-Id: I74a73013cdc91ecaf270a72e315c0a8758603c17