← Back to team overview

yahoo-eng-team team mailing list archive

  1. yahoo-eng-team team
  2. Mailing list archive
  3. Message #10480

[Bug 1266983] Re: Grizzly 2013.1.4 's NOVA Waste PublicIP

  Thread Previous • Date Previous • • Thread Next 
Was not able to reproduce.

** Changed in: nova
       Status: Incomplete => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1266983

Title:
  Grizzly 2013.1.4 's NOVA Waste PublicIP

Status in OpenStack Compute (Nova):
  Invalid

Bug description:
  192.168.0.0/24 is Manage IP
  172.168.149.0/24 is Public IP
  172.5.5.0/24 is VM Fix IP
    
  1.We boot a VM only link to private network without public network,
  [root@controllernode ~(wuxi_it)]$ nova list
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | ID                                   | Name             | Status | Task State | Power State | Networks                                                           |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | 786b8958-2a77-4a3c-89c9-35fbce1b6391 | CentOS6.4_test   | ACTIVE | None       | Running     | ext_net=172.168.149.158; wuxi_it-net=172.168.5.11, 172.168.149.155 |
  | d5dcea71-8b1c-4e92-aac7-069460e11bb3 | Cirros_3.1_node1 | ACTIVE | None       | Running     | ext_net=172.168.149.161; wuxi_it-net=172.168.5.9                   |
  | acd5c695-85c3-4e89-8730-e0badf487a5a | cirros_test      | ACTIVE | None       | Running     | wuxi_it-net=172.168.5.13                                           |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+

    2.We assign a floating-ip to this VM
  [root@controllernode ~(wuxi_it)]$ nova add-floating-ip cirros_test 172.168.149.157

  [root@controllernode ~(wuxi_it)]$ nova list
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | ID                                   | Name             | Status | Task State | Power State | Networks                                                           |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | 786b8958-2a77-4a3c-89c9-35fbce1b6391 | CentOS6.4_test   | ACTIVE | None       | Running     | ext_net=172.168.149.158; wuxi_it-net=172.168.5.11, 172.168.149.155 |
  | d5dcea71-8b1c-4e92-aac7-069460e11bb3 | Cirros_3.1_node1 | ACTIVE | None       | Running     | ext_net=172.168.149.161; wuxi_it-net=172.168.5.9                   |
  | acd5c695-85c3-4e89-8730-e0badf487a5a | cirros_test      | ACTIVE | None       | Running     | wuxi_it-net=172.168.5.13, 172.168.149.157                          |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+

       We find we can't ping this IP:172.168.149.157

     3.We boot a VM with both private and public network and assign same floating-ip to this VM
  [root@controllernode ~(wuxi_it)]$ nova list
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | ID                                   | Name             | Status | Task State | Power State | Networks                                                           |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | 786b8958-2a77-4a3c-89c9-35fbce1b6391 | CentOS6.4_test   | ACTIVE | None       | Running     | ext_net=172.168.149.158; wuxi_it-net=172.168.5.11, 172.168.149.155 |
  | d5dcea71-8b1c-4e92-aac7-069460e11bb3 | Cirros_3.1_node1 | ACTIVE | None       | Running     | ext_net=172.168.149.161; wuxi_it-net=172.168.5.9                   |
  | 5166613f-90dd-4d1b-b79c-41497215746c | Cirros_3.1_test  | BUILD  | spawning   | NOSTATE     | ext_net=172.168.149.162; wuxi_it-net=172.168.5.15                  |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  [root@controllernode ~(wuxi_it)]$ nova floating-ip-list
  +-----------------+--------------------------------------+--------------+---------+
  | Ip              | Instance Id                          | Fixed Ip     | Pool    |
  +-----------------+--------------------------------------+--------------+---------+
  | 172.168.149.155 | 786b8958-2a77-4a3c-89c9-35fbce1b6391 | 172.168.5.11 | ext_net |
  | 172.168.149.156 | 98d31755-1e92-4217-8247-b2be88978475 | 172.168.5.12 | ext_net |
  | 172.168.149.157 | None                                 | None         | ext_net |
  +-----------------+--------------------------------------+--------------+---------+
  [root@controllernode ~(wuxi_it)]$ nova add-floating-ip  Cirros_3.1_test 172.168.149.157

  [root@controllernode ~(wuxi_it)]$ nova floating-ip-list
  +-----------------+--------------------------------------+--------------+---------+
  | Ip              | Instance Id                          | Fixed Ip     | Pool    |
  +-----------------+--------------------------------------+--------------+---------+
  | 172.168.149.155 | 786b8958-2a77-4a3c-89c9-35fbce1b6391 | 172.168.5.11 | ext_net |
  | 172.168.149.156 | 98d31755-1e92-4217-8247-b2be88978475 | 172.168.5.12 | ext_net |
  | 172.168.149.157 | 5166613f-90dd-4d1b-b79c-41497215746c | 172.168.5.15 | ext_net |
  +-----------------+--------------------------------------+--------------+---------+

  [root@controllernode ~(wuxi_it)]$ nova list
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | ID                                   | Name             | Status | Task State | Power State | Networks                                                           |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+
  | 786b8958-2a77-4a3c-89c9-35fbce1b6391 | CentOS6.4_test   | ACTIVE | None       | Running     | ext_net=172.168.149.158; wuxi_it-net=172.168.5.11, 172.168.149.155 |
  | d5dcea71-8b1c-4e92-aac7-069460e11bb3 | Cirros_3.1_node1 | ACTIVE | None       | Running     | ext_net=172.168.149.161; wuxi_it-net=172.168.5.9                   |
  | 5166613f-90dd-4d1b-b79c-41497215746c | Cirros_3.1_test  | ACTIVE | None       | Running     | ext_net=172.168.149.162; wuxi_it-net=172.168.5.15, 172.168.149.157 |
  +--------------------------------------+------------------+--------+------------+-------------+--------------------------------------------------------------------+

     We find we can ping this public IP now.
    
     For 1st test, check in NetworkNode:
  -A quantum-l3-agent-OUTPUT -d 172.168.149.155/32 -j DNAT --to-destination 172.168.5.11
  -A quantum-l3-agent-OUTPUT -d 172.168.149.156/32 -j DNAT --to-destination 172.168.5.12
  -A quantum-l3-agent-OUTPUT -d 172.168.149.157/32 -j DNAT --to-destination 172.168.5.13
  -A quantum-l3-agent-POSTROUTING ! -i qg-6cd6c622-34 ! -o qg-6cd6c622-34 -m conntrack ! --ctstate DNAT -j ACCEPT
  -A quantum-l3-agent-PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 9697
  -A quantum-l3-agent-PREROUTING -d 172.168.149.155/32 -j DNAT --to-destination 172.168.5.11
  -A quantum-l3-agent-PREROUTING -d 172.168.149.156/32 -j DNAT --to-destination 172.168.5.12
  -A quantum-l3-agent-PREROUTING -d 172.168.149.157/32 -j DNAT --to-destination 172.168.5.13
  -A quantum-l3-agent-float-snat -s 172.168.5.11/32 -j SNAT --to-source 172.168.149.155
  -A quantum-l3-agent-float-snat -s 172.168.5.12/32 -j SNAT --to-source 172.168.149.156
  -A quantum-l3-agent-float-snat -s 172.168.5.13/32 -j SNAT --to-source 172.168.149.157
  -A quantum-l3-agent-snat -j quantum-l3-agent-float-snat
  -A quantum-l3-agent-snat -s 172.168.5.0/24 -j SNAT --to-source 172.168.149.153
  -A quantum-postrouting-bottom -j quantum-l3-agent-snat
  COMMIT
  # Completed on Fri Dec 27 11:42:48 2013
  [root@NetworkNode ~]# ping 172.168.149.157
  PING 172.168.149.157 (172.168.149.157) 56(84) bytes of data.
  ^C
  --- 172.168.149.157 ping statistics ---
  3 packets transmitted, 0 received, 100% packet loss, time 2526ms

  [root@NetworkNode ~]# ping 172.168.149.156

  PING 172.168.149.156 (172.168.149.156) 56(84) bytes of data.
  64 bytes from 172.168.149.156: icmp_seq=1 ttl=127 time=2.27 ms

  ^C
  --- 172.168.149.156 ping statistics ---
  1 packets transmitted, 1 received, 0% packet loss, time 749ms
  rtt min/avg/max/mdev = 2.271/2.271/2.271/0.000 ms
  [root@NetworkNode ~]# ping 172.168.149.157
  PING 172.168.149.157 (172.168.149.157) 56(84) bytes of data.
  ^C
  --- 172.168.149.157 ping statistics ---
  39 packets transmitted, 0 received, 100% packet loss, time 38935ms

  
      For 2nd test, check in NetworkNode:
  -A quantum-l3-agent-OUTPUT -d 172.168.149.155/32 -j DNAT --to-destination 172.168.5.11
  -A quantum-l3-agent-OUTPUT -d 172.168.149.156/32 -j DNAT --to-destination 172.168.5.12
  -A quantum-l3-agent-OUTPUT -d 172.168.149.157/32 -j DNAT --to-destination 172.168.5.15
  -A quantum-l3-agent-POSTROUTING ! -i qg-6cd6c622-34 ! -o qg-6cd6c622-34 -m conntrack ! --ctstate DNAT -j ACCEPT
  -A quantum-l3-agent-PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 9697
  -A quantum-l3-agent-PREROUTING -d 172.168.149.155/32 -j DNAT --to-destination 172.168.5.11
  -A quantum-l3-agent-PREROUTING -d 172.168.149.156/32 -j DNAT --to-destination 172.168.5.12
  -A quantum-l3-agent-PREROUTING -d 172.168.149.157/32 -j DNAT --to-destination 172.168.5.15
  -A quantum-l3-agent-float-snat -s 172.168.5.11/32 -j SNAT --to-source 172.168.149.155
  -A quantum-l3-agent-float-snat -s 172.168.5.12/32 -j SNAT --to-source 172.168.149.156
  -A quantum-l3-agent-float-snat -s 172.168.5.15/32 -j SNAT --to-source 172.168.149.157
  -A quantum-l3-agent-snat -j quantum-l3-agent-float-snat
  -A quantum-l3-agent-snat -s 172.168.5.0/24 -j SNAT --to-source 172.168.149.153
  -A quantum-postrouting-bottom -j quantum-l3-agent-snat
  COMMIT
  # Completed on Fri Dec 27 11:50:43 2013
  [root@NetworkNode ~]# ping 172.168.149.157
  PING 172.168.149.157 (172.168.149.157) 56(84) bytes of data.
  64 bytes from 172.168.149.157: icmp_seq=1 ttl=63 time=1.80 ms
  64 bytes from 172.168.149.157: icmp_seq=2 ttl=63 time=0.636 ms
  ^C
  --- 172.168.149.157 ping statistics ---
  2 packets transmitted, 2 received, 0% packet loss, time 1438ms
  rtt min/avg/max/mdev = 0.636/1.219/1.803/0.584 ms
   
      It seems very waste IP address in IP pool.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1266983/+subscriptions

References

  Thread Previous • Date Previous • • Thread Next