yahoo-eng-team team mailing list archive

[Sridhar Ramaswamy <srramasw@xxxxxxxxx>]

Public bug reported:

When Cisco VPNaaS agent could restarts - either due to software-error or
operator action - the agent doesn't reconcile with the configuration
changes that happened while it was down with CSR VM configs. This could
lead to cases where,

a) any VPN config (ipsec-connection, et. al) that gets deleted in DB but doesn't gets deleted in the CSR VM
b) any VPN config that gets updated in DB will cause the agent to reapply the configs as 'new' but it already exists in CSR VM.  While many configuration in CSR software is idempotent the RESTapi used to re-apply will fail with 'resource already exist' status.  This will cause the Cisco VPN agent to report a failure.

** Affects: neutron
     Importance: Undecided
     Assignee: Sridhar Ramaswamy (srramasw)
         Status: New


** Tags: vpnaas

** Changed in: neutron
     Assignee: (unassigned) => Sridhar Ramaswamy (srramasw)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1355360

Title:
  Cisco VPNaaS agent doesn't resync with config DB on restart

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  When Cisco VPNaaS agent could restarts - either due to software-error
  or operator action - the agent doesn't reconcile with the
  configuration changes that happened while it was down with CSR VM
  configs. This could lead to cases where,

  a) any VPN config (ipsec-connection, et. al) that gets deleted in DB but doesn't gets deleted in the CSR VM
  b) any VPN config that gets updated in DB will cause the agent to reapply the configs as 'new' but it already exists in CSR VM.  While many configuration in CSR software is idempotent the RESTapi used to re-apply will fail with 'resource already exist' status.  This will cause the Cisco VPN agent to report a failure.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1355360/+subscriptions