[VPNaaS]: Check restart_check_config enabled

Bug #1828721 reported by Dongcan Ye
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Medium
Dongcan Ye

Bug Description

When neutron-vpn-agent restart, all the pluto process in
router ns will be restarted too, this will impact the vpn traffic.
So in [1] we add a config "restart_check_config" to resolve this problem.

The ipsec.conf.old and ipsec.secrets.old files can only be generated
in config "restart_check_config" enabled, so in restart we should check restart_check_config configuration firstly, then check ipsec.conf and ipsec.secrets changed.

[1] https://bugs.launchpad.net/neutron/+bug/1571455

Tags: vpnaas
Dongcan Ye (hellochosen)
tags: added: vpnaas
Changed in neutron:
assignee: nobody → Dongcan Ye (hellochosen)
Changed in neutron:
status: New → In Progress
Revision history for this message
Lajos Katona (lajos-katona) wrote :

Could you please add some details like used versions?

Changed in neutron:
importance: Undecided → Medium
Dongcan Ye (hellochosen)
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron-vpnaas (master)

Reviewed: https://review.opendev.org/657536
Committed: https://git.openstack.org/cgit/openstack/neutron-vpnaas/commit/?id=8e9572f0712a520bda7c4ef671e14b862e0b0c2d
Submitter: Zuul
Branch: master

commit 8e9572f0712a520bda7c4ef671e14b862e0b0c2d
Author: Dongcan Ye <email address hidden>
Date: Tue May 7 06:49:41 2019 +0000

    Skip check config changed while restart_check_config not enable

    The ipsec.conf.old and ipsec.secrets.old files can only be generated
    if config "restart_check_config" enabled, so in restart we should check
    restart_check_config configuration firstly, then check ipsec.conf and
    ipsec.secrets changed.

    Closes-Bug: #1828721
    Change-Id: Iccaf1aed26f54eeb49ce1cf2cac12a820310968c

Changed in neutron:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/neutron-vpnaas 16.0.0.0b1

This issue was fixed in the openstack/neutron-vpnaas 16.0.0.0b1 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.