| 2017-06-28 21:43:13 |
Piyush Srivastava |
bug |
|
|
added bug |
| 2017-06-28 21:43:30 |
Piyush Srivastava |
bug |
|
|
added subscriber wpc-contrail |
| 2017-06-28 21:56:31 |
Piyush Srivastava |
description |
Build: 2.21.3-71
It looks like we are hitting some contrail limits on the number of ACL rules that can be applied on a particular network. The network in this case has two policies applied to it. These two policies combined together result in 169 ACL rules which seems to be past the limit that we have identified. We could create 134 rules without any issues but Contrail didn’t accept rules more than that. The problem is that when the rule limit hits, Contrail is not able to process these ACLs and push them down to the vrouters which means that these rules don’t take effect and that’s why we see connectivity issues.
Steps to reproduce:
- Create a contrail virtual network
- Create a policy with 135 rules
- Add this policy to the virtual network
- Boot a VM on this network
- Look at the ACLs installed on the vrouter
- ACLs in the policy not pushed to the vrouter, it has two default ACLs
Repeat this with a lower number, for eg. 120 rules in a policy and you will see the ACLs being installed on the vrouter. |
Build: 2.21.3-71 Icehouse
It looks like we are hitting some contrail limits on the number of ACL rules that can be applied on a particular network. The network in this case has two policies applied to it. These two policies combined together result in 169 ACL rules which seems to be past the limit that we have identified. We could create 134 rules without any issues but Contrail didn’t accept rules more than that. The problem is that when the rule limit hits, Contrail is not able to process these ACLs and push them down to the vrouters which means that these rules don’t take effect and that’s why we see connectivity issues.
Steps to reproduce:
- Create a contrail virtual network
- Create a policy with 135 rules
- Add this policy to the virtual network
- Boot a VM on this network
- Look at the ACLs installed on the vrouter
- ACLs in the policy not pushed to the vrouter, it has two default ACLs
Repeat this with a lower number, for eg. 120 rules in a policy and you will see the ACLs being installed on the vrouter. |
|
| 2017-06-29 19:29:13 |
Vineet Gupta |
tags |
|
wpc |
|
| 2017-06-30 20:35:18 |
Sachin Bansal |
opencontrail: assignee |
|
Ignatious Johnson Christopher (ijohnson-x) |
|
| 2017-07-04 20:44:39 |
Vineet Gupta |
bug task added |
|
juniperopenstack |
|
| 2017-07-04 20:44:50 |
Vineet Gupta |
nominated for series |
|
juniperopenstack/r2.21.x |
|
| 2017-07-04 20:44:50 |
Vineet Gupta |
bug task added |
|
juniperopenstack/r2.21.x |
|
| 2017-07-04 20:44:59 |
Vineet Gupta |
juniperopenstack/r2.21.x: milestone |
|
r2.21.3 |
|
| 2017-07-04 20:45:12 |
Vineet Gupta |
juniperopenstack/r2.21.x: assignee |
|
Ignatious Johnson Christopher (ijohnson-x) |
|
| 2017-07-05 19:17:34 |
Sachin Bansal |
juniperopenstack: assignee |
|
Ignatious Johnson Christopher (ijohnson-x) |
|
| 2017-07-08 00:32:34 |
Sachin Bansal |
juniperopenstack/r2.21.x: assignee |
Ignatious Johnson Christopher (ijohnson-x) |
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-08 02:24:27 |
OpenContrail Admin |
juniperopenstack/r2.21.x: status |
New |
In Progress |
|
| 2017-07-08 02:24:27 |
OpenContrail Admin |
juniperopenstack/r2.21.x: assignee |
Sahil Sabharwal (ssabharwal) |
Ignatious Johnson Christopher (ijohnson-x) |
|
| 2017-07-10 19:00:44 |
Jeba Paulaiyan |
juniperopenstack/r2.21.x: importance |
Undecided |
High |
|
| 2017-07-11 20:48:29 |
OpenContrail Admin |
juniperopenstack/r2.21.x: importance |
High |
Undecided |
|
| 2017-07-14 08:51:36 |
OpenContrail Admin |
juniperopenstack/r2.21.x: status |
In Progress |
Fix Committed |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
nominated for series |
|
juniperopenstack/r3.2 |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
bug task added |
|
juniperopenstack/r3.2 |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
nominated for series |
|
juniperopenstack/r4.0 |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
bug task added |
|
juniperopenstack/r4.0 |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
nominated for series |
|
juniperopenstack/r3.0 |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
bug task added |
|
juniperopenstack/r3.0 |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
nominated for series |
|
juniperopenstack/r3.1 |
|
| 2017-07-20 17:47:28 |
Sachin Bansal |
bug task added |
|
juniperopenstack/r3.1 |
|
| 2017-07-20 17:47:46 |
Sachin Bansal |
juniperopenstack/r3.2: assignee |
|
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 17:54:35 |
Sahil Sabharwal |
juniperopenstack/r2.21.x: assignee |
Ignatious Johnson Christopher (ijohnson-x) |
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 17:56:56 |
Sahil Sabharwal |
juniperopenstack/r3.0: assignee |
|
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 17:57:01 |
Sahil Sabharwal |
juniperopenstack/r3.1: assignee |
|
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 17:57:15 |
Sahil Sabharwal |
juniperopenstack/r4.0: assignee |
|
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 18:18:22 |
OpenContrail Admin |
juniperopenstack/r3.2: status |
New |
In Progress |
|
| 2017-07-20 18:18:22 |
OpenContrail Admin |
juniperopenstack/r3.2: assignee |
Sahil Sabharwal (ssabharwal) |
Ignatious Johnson Christopher (ijohnson-x) |
|
| 2017-07-20 18:18:24 |
OpenContrail Admin |
juniperopenstack/r4.0: status |
New |
In Progress |
|
| 2017-07-20 18:18:24 |
OpenContrail Admin |
juniperopenstack/r4.0: assignee |
Sahil Sabharwal (ssabharwal) |
Ignatious Johnson Christopher (ijohnson-x) |
|
| 2017-07-20 22:22:25 |
Sahil Sabharwal |
juniperopenstack/r3.2: assignee |
Ignatious Johnson Christopher (ijohnson-x) |
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 22:22:30 |
Sahil Sabharwal |
juniperopenstack/r4.0: assignee |
Ignatious Johnson Christopher (ijohnson-x) |
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 22:24:38 |
Sahil Sabharwal |
juniperopenstack: assignee |
Ignatious Johnson Christopher (ijohnson-x) |
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 22:24:41 |
Sahil Sabharwal |
opencontrail: assignee |
Ignatious Johnson Christopher (ijohnson-x) |
Sahil Sabharwal (ssabharwal) |
|
| 2017-07-20 22:27:23 |
OpenContrail Admin |
nominated for series |
|
juniperopenstack/trunk |
|
| 2017-07-20 22:27:23 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/trunk |
|
| 2017-07-20 22:27:23 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/trunk |
|
| 2017-07-20 22:42:35 |
OpenContrail Admin |
juniperopenstack/r3.0: status |
New |
In Progress |
|
| 2017-07-20 22:45:43 |
OpenContrail Admin |
juniperopenstack/r3.1: status |
New |
In Progress |
|
| 2017-07-21 05:05:04 |
OpenContrail Admin |
juniperopenstack/trunk: status |
In Progress |
Fix Committed |
|
| 2017-07-21 05:05:05 |
OpenContrail Admin |
juniperopenstack/trunk: milestone |
|
r4.1.0.0-fcs |
|
| 2017-07-21 07:36:12 |
OpenContrail Admin |
juniperopenstack/r3.2: status |
In Progress |
Fix Committed |
|
| 2017-07-21 07:36:13 |
OpenContrail Admin |
juniperopenstack/r3.2: milestone |
|
r3.2.4.0 |
|
| 2017-07-21 13:52:17 |
OpenContrail Admin |
juniperopenstack/r3.1: status |
In Progress |
Fix Committed |
|
| 2017-07-21 19:59:27 |
OpenContrail Admin |
juniperopenstack/r4.0: status |
In Progress |
Fix Committed |
|
| 2017-07-21 19:59:28 |
OpenContrail Admin |
juniperopenstack/r4.0: milestone |
|
r4.0.1.0 |
|
| 2017-07-22 18:47:30 |
OpenContrail Admin |
juniperopenstack/r3.0: status |
In Progress |
Fix Committed |
|
| 2017-07-22 18:47:32 |
OpenContrail Admin |
juniperopenstack/r3.0: milestone |
|
r3.0.4.0 |
|
| 2017-08-03 21:37:07 |
Sachin Bansal |
opencontrail: status |
New |
Fix Committed |
|
