neutron-metering-agent iptables-restore failed in dvr

Bug #2008206 reported by zhanglin
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
neutron
New
Undecided
Unassigned

Bug Description

Step-by-step reproduction steps:
openstack network meter create meter0
openstack network meter rule create meter0 --ingress --source-ip-prefix 10.0.0.0/8 --project admin

tail -f /var/log/neutron/metering-agent.log

* Actual output:
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent [req-b02054ea-74fa-46c1-ae01-e442be13063b - - - - -] Driver iptables:update_routers runtime error: n
eutron_lib.exceptions.ProcessExecutionError: Exit code: 2; Cmd: ['ip', 'netns', 'exec', 'snat-ee818755-3d13-4af6-a9fa-724294f56bad', 'iptables-restore', '-n']; Stdin: # Generated by ipta
bles_manager
*filter
:FORWARD - [0:0]
:INPUT - [0:0]
:OUTPUT - [0:0]
:neutron-filter-top - [0:0]
:neutron-meter-FORWARD - [0:0]
:neutron-meter-INPUT - [0:0]
:neutron-meter-OUTPUT - [0:0]
:neutron-meter-local - [0:0]
:neutron-meter-r-8456f66f-d1d - [0:0]
-I FORWARD 1 -j neutron-filter-top
-I FORWARD 2 -j neutron-meter-FORWARD
-I INPUT 1 -j neutron-meter-INPUT
-I OUTPUT 1 -j neutron-filter-top
-I OUTPUT 2 -j neutron-meter-OUTPUT
-I neutron-filter-top 1 -j neutron-meter-local
-I neutron-meter-r-8456f66f-d1d 1 -s 10.0.0.0/8 -i rfp-ee818755-3 -j neutron-meter-l-8456f66f-d1d
-I neutron-meter-r-8456f66f-d1d 2 -s 10.0.0.0/8 -o rfp-ee818755-3 -j neutron-meter-l-8456f66f-d1d
COMMIT
# Completed by iptables_manager
# Generated by iptables_manager
*raw
:OUTPUT - [0:0]
:PREROUTING - [0:0]
:neutron-meter-OUTPUT - [0:0]
:neutron-meter-PREROUTING - [0:0]
-I OUTPUT 1 -j neutron-meter-OUTPUT
-I PREROUTING 1 -j neutron-meter-PREROUTING
COMMIT
# Completed by iptables_manager
; Stdout: ; Stderr: iptables-restore v1.8.4 (nf_tables): Chain 'neutron-meter-l-8456f66f-d1d' does not exist
Error occurred at line: 18
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent Traceback (most recent call last):
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/services/metering/agents/metering_agent.py", line 2
47, in _invoke_driver
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent return getattr(self.metering_driver, func_name)(context, meterings)
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/oslo_log/helpers.py", line 67, in wrapper
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent return method(*args, **kwargs)
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/services/metering/drivers/iptables/iptables_driver.
py", line 175, in update_routers
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent self._process_associate_metering_label(router)
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/services/metering/drivers/iptables/iptables_driver.py", line 315, in _process_associate_metering_label
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent self._process_ns_specific_metering_label(router, dev, im)
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/services/metering/drivers/iptables/iptables_driver.py", line 305, in _process_ns_specific_metering_label
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent rules, label_chain, rules_chain, ext_dev, im)
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/services/metering/drivers/iptables/iptables_driver.py", line 59, in __exit__
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent self.im.apply()
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/agent/linux/iptables_manager.py", line 452, in apply
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent return self._apply()
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/agent/linux/iptables_manager.py", line 464, in _apply
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent first = self._apply_synchronized()
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent raise err
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent run_as_root=True, privsep_exec=True, **kwargs)
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent File "/usr/lib/python3.6/site-packages/neutron/agent/linux/utils.py", line 157, in execute
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent returncode=returncode)
2023-02-23 15:16:44.764 2240099 ERROR neutron.services.metering.agents.metering_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 2; Cmd: ['ip', 'netns', 'exec', 'snat-ee818755-3d13-4af6-a9fa-724294f56bad', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager

*Version: yoga

*Environment: neutron is dvr mode

zhanglin (zl163)
information type: Private Security → Public
tags: added: l3-dvr-backlog metering
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.