Neutron is requesting too many tokens
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Compute (nova) |
In Progress
|
Medium
|
Drew Thorstensen |
Bug Description
ACTUAL BEHAVIOR: I have a 14 compute nodes environment with a separate compute controller. With system being idle, i see quantum modules (OVS plugin used here) are requesting to many tokens (approx 2/sec). In a day, it piles up to 150,000 tokens. This behavior adds chattiness and slower performance on the entire OpenStack module's keystone authentication/
select user_id, count(*) from token group by user_id
"2efad4b253f64b
"a1fa17a31a4246
EXPECTED BEHAVIOR: Though the expiration of the tokens are set for 24 hrs, the quantum is requesting new tokens now n then. Either a missing configuration or code issue that must be causing this.
here is how api-paste.ini looks like under /etc/quantum
[filter:authtoken]
paste.filter_
auth_host = 192.168.123.12
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = quantum
admin_password = service_pass
HOW-TO-REPRODUCE:
Install openstack using https:/
Keep the system idle. Note that the count of token being issue is proportional to no. of compute nodes you have.
--attached conf files
--keystone and quantum logs (from compute, controller+network node)
Changed in neutron: | |
status: | New → Confirmed |
assignee: | nobody → yong sheng gong (gongysh) |
importance: | Undecided → Medium |
affects: | neutron → nova-project |
tags: | added: havana-rc-potential |
tags: |
added: havana-backport-potential removed: havana-rc-potential |
I agree. I think this issue should be solved in the python- quantumclient to cache tokens similar to how the novaclient does. In the meantime this patch might help you.
https:/ /github. com/openstack/ nova/commit/ dd9c27f99922100 1bae9faa0357164 5824d2a681