tripleo-ipsec: VIP failover doesn't work
Bug #1749705 reported by
Juan Antonio Osorio Robles
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| tripleo |
Fix Released
|
Critical
|
Juan Antonio Osorio Robles | ||
Bug Description
Doing a VIP failover results in most of the nodes loosing access to the VIP. This will be reflected by getting "Operation not permitted" errors. And is because we have a wrong Dead-Peer-Detection policy for the VIP tunnels. Right now, the action on DPD is hold, which blocks all traffic.
| Changed in tripleo: | |
| importance: | Undecided → Critical |
| milestone: | none → queens-rc1 |
| assignee: | nobody → Juan Antonio Osorio Robles (juan-osorio-robles) |
Revision history for this message
| OpenStack Infra (hudson-openstack) wrote Fix proposed to tripleo-ipsec (master) | #1 |
| Changed in tripleo: | |
| status: | New → In Progress |
Revision history for this message
| OpenStack Infra (hudson-openstack) wrote Fix merged to tripleo-ipsec (master) | #2 |
| Changed in tripleo: | |
| status: | In Progress → Fix Released |
Revision history for this message
| OpenStack Infra (hudson-openstack) wrote Fix included in openstack/tripleo-ipsec 8.0.2 | #3 |
To post a comment you must log in.
Fix proposed to branch: master
Review: https:/