yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1477097] [NEW] fwaas: firewall in error status after update firewall-rule

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Eran Kuris <ekuris@xxxxxxxxxx>
Date: Wed, 22 Jul 2015 11:26:10 -0000
Reply-to: Bug 1477097 <1477097@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Public bug reported:

[root@puma16 ~(keystone_admin)]# neutron firewall-show c9478714-20e3-4163-97ad-212cdac04434
+--------------------+--------------------------------------+
| Field              | Value                                |
+--------------------+--------------------------------------+
| admin_state_up     | True                                 |
| description        |                                      |
| firewall_policy_id | 48f5dba2-a252-4783-858e-b5ea61f8eb6e |
| id                 | c9478714-20e3-4163-97ad-212cdac04434 |
| name               |                                      |
| router_ids         | 9143a9b9-d5ff-4555-8961-6d6649f95226 |
| status             | ACTIVE                               |
| tenant_id          | ffa0f8d8d51849a4ab67651e4bebcbba     |
+--------------------+--------------------------------------+
[root@puma16 ~(keystone_admin)]#  neutron firewall-rule-update
usage: neutron firewall-rule-update [-h] [--request-format {json,xml}]
                                    [--protocol {tcp,udp,icmp,any}]
                                    FIREWALL_RULE
neutron firewall-rule-update: error: too few arguments
[root@puma16 ~(keystone_admin)]#  neutron firewall-rule-update 28767fca-cdcc-4bff-bcde-025b7d5c2411--action deny
Invalid values_specs deny
[root@puma16 ~(keystone_admin)]#  neutron firewall-rule-update 28767fca-cdcc-4bff-bcde-025b7d5c2411 --action deny
Updated firewall_rule: 28767fca-cdcc-4bff-bcde-025b7d5c2411
[root@puma16 ~(keystone_admin)]# neutron firewall-show c9478714-20e3-4163-97ad-212cdac04434
+--------------------+--------------------------------------+
| Field              | Value                                |
+--------------------+--------------------------------------+
| admin_state_up     | True                                 |
| description        |                                      |
| firewall_policy_id | 48f5dba2-a252-4783-858e-b5ea61f8eb6e |
| id                 | c9478714-20e3-4163-97ad-212cdac04434 |
| name               |                                      |
| router_ids         | 9143a9b9-d5ff-4555-8961-6d6649f95226 |
| status             | ERROR                                |
| tenant_id          | ffa0f8d8d51849a4ab67651e4bebcbba     |
+--------------------+--------------------------------------+

[root@puma16 ~(keystone_admin)]# 
[root@puma16 ~(keystone_admin)]# rpm -qa |grep openstack-packstack
openstack-packstack-puppet-2015.1-0.11.dev1589.g1d6372f.el7ost.noarch
openstack-packstack-2015.1-0.11.dev1589.g1d6372f.el7ost.noarch
[root@puma16 ~(keystone_admin)]# rpm -qa |grep openstack-puppet-modules
openstack-puppet-modules-2015.1.8-8.el7ost.noarch
[root@puma16 ~(keystone_admin)]# rpm -qa |grep neutron
openstack-neutron-2015.1.0-12.el7ost.noarch
openstack-neutron-openvswitch-2015.1.0-12.el7ost.noarch
python-neutron-2015.1.0-12.el7ost.noarch
openstack-neutron-fwaas-2015.1.0-3.el7ost.noarch
python-neutronclient-2.4.0-1.el7ost.noarch
python-neutron-fwaas-2015.1.0-3.el7ost.noarch
openstack-neutron-common-2015.1.0-12.el7ost.noarch
openstack-neutron-ml2-2015.1.0-12.el7ost.noarch


l3-agent log :
2015-07-22 13:42:01.804 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Notify callbacks for router, after_create
2015-07-22 13:42:01.805 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Calling callback neutron.agent.metadata.driver.after_router_added
2015-07-22 13:42:03.025 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Notify callbacks for router, before_update
2015-07-22 13:42:03.593 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Notify callbacks for router, after_update
2015-07-22 13:48:50.478 8908 INFO neutron.callbacks.manager [-] Notify callbacks for router, before_update
2015-07-22 13:48:50.941 8908 INFO neutron.callbacks.manager [-] Notify callbacks for router, after_update


neutron-server.log : 
2015-07-22 14:22:05.834 9105 INFO neutron.wsgi [-] (9105) accepted ('10.35.160.41', 49128)
2015-07-22 14:22:05.918 9105 INFO neutron.wsgi [req-cf14cbb2-4c81-4e4f-93e1-3b8f0c829241 ] 10.35.160.41 - - [22/Jul/2015 14:22:05] "GET /v2.0/fw/firewall_rules.json?fields=id&id=28767fca-cdcc-4bff-bcde-025b7d5c2411 HTTP/1.1" 200 281 0.082675
2015-07-22 14:22:06.002 9116 INFO neutron.wsgi [req-2d500a7a-79d8-4915-8c16-58f681ac0dad ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/ports.json?device_id=22306c02-13e9-44cb-a69a-790f2797e380&device_id=047af1bb-07a8-4720-ac7b-dcf5ff9ca049 HTTP/1.1" 200 1714 0.102604
2015-07-22 14:22:06.008 9105 INFO neutron.wsgi [req-1129feb4-ebb7-48fe-8e5d-99bd4b6aedd7 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "PUT /v2.0/fw/firewall_rules/28767fca-cdcc-4bff-bcde-025b7d5c2411.json HTTP/1.1" 200 632 0.086929
2015-07-22 14:22:06.026 9116 INFO neutron.wsgi [req-180227d6-8160-48dd-ad3d-e48d0e4d4049 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/security-groups.json?id=bc01e2f5-43bf-421d-b0ef-45b359621ef1 HTTP/1.1" 200 2420 0.021654
2015-07-22 14:22:06.672 9105 INFO neutron.wsgi [-] (9105) accepted ('10.35.160.41', 49152)
2015-07-22 14:22:06.753 9105 INFO neutron.wsgi [req-9ad94b5d-5059-4d51-b75d-b9619c8f3664 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/floatingips.json?tenant_id=4ff1237a772f4d9d8a89081c1b088cfa HTTP/1.1" 200 232 0.080874
2015-07-22 14:22:06.779 9105 INFO neutron.wsgi [req-04fc2b61-39d0-4f8a-8ea3-e9dcfb26e52c ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/networks.json?router%3Aexternal=True HTTP/1.1" 200 608 0.022960
2015-07-22 14:22:06.802 9105 INFO neutron.wsgi [req-861ef463-91cd-4f6d-8b4d-94eeea7a2159 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/ports.json?tenant_id=4ff1237a772f4d9d8a89081c1b088cfa HTTP/1.1" 200 226 0.020850
14:22:07] "GET /v2.0/lb/health_monitors.json HTTP/1.1" 404 266 0.083710
2015-07-22 14:22:11.689 9106 INFO neutron.wsgi [-] (9106) accepted ('10.35.160.41', 49177)
2015-07-22 14:22:11.773 9106 INFO neutron.wsgi [req-b2e10b65-cc05-49d4-b23a-eff865be6be1 ] 10.35.160.41 - - [22/Jul/2015 14:22:11] "GET /v2.0/fw/firewalls.json?fields=id&id=c9478714-20e3-4163-97ad-212cdac04434 HTTP/1.1" 200 333 0.083735
2015-07-22 14:22:11.785 9106 INFO neutron.wsgi [req-77f560cd-9672-4c9c-9b15-2c4528cca6b4 ] 10.35.160.41 - - [22/Jul/2015 14:22:11] "GET /v2.0/fw/firewalls/c9478714-20e3-4163-97ad-212cdac04434.json HTTP/1.1" 200 515 0.008494

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1477097

Title:
  fwaas: firewall in error status after update firewall-rule

Status in neutron:
  New

Bug description:
  [root@puma16 ~(keystone_admin)]# neutron firewall-show c9478714-20e3-4163-97ad-212cdac04434
  +--------------------+--------------------------------------+
  | Field              | Value                                |
  +--------------------+--------------------------------------+
  | admin_state_up     | True                                 |
  | description        |                                      |
  | firewall_policy_id | 48f5dba2-a252-4783-858e-b5ea61f8eb6e |
  | id                 | c9478714-20e3-4163-97ad-212cdac04434 |
  | name               |                                      |
  | router_ids         | 9143a9b9-d5ff-4555-8961-6d6649f95226 |
  | status             | ACTIVE                               |
  | tenant_id          | ffa0f8d8d51849a4ab67651e4bebcbba     |
  +--------------------+--------------------------------------+
  [root@puma16 ~(keystone_admin)]#  neutron firewall-rule-update
  usage: neutron firewall-rule-update [-h] [--request-format {json,xml}]
                                      [--protocol {tcp,udp,icmp,any}]
                                      FIREWALL_RULE
  neutron firewall-rule-update: error: too few arguments
  [root@puma16 ~(keystone_admin)]#  neutron firewall-rule-update 28767fca-cdcc-4bff-bcde-025b7d5c2411--action deny
  Invalid values_specs deny
  [root@puma16 ~(keystone_admin)]#  neutron firewall-rule-update 28767fca-cdcc-4bff-bcde-025b7d5c2411 --action deny
  Updated firewall_rule: 28767fca-cdcc-4bff-bcde-025b7d5c2411
  [root@puma16 ~(keystone_admin)]# neutron firewall-show c9478714-20e3-4163-97ad-212cdac04434
  +--------------------+--------------------------------------+
  | Field              | Value                                |
  +--------------------+--------------------------------------+
  | admin_state_up     | True                                 |
  | description        |                                      |
  | firewall_policy_id | 48f5dba2-a252-4783-858e-b5ea61f8eb6e |
  | id                 | c9478714-20e3-4163-97ad-212cdac04434 |
  | name               |                                      |
  | router_ids         | 9143a9b9-d5ff-4555-8961-6d6649f95226 |
  | status             | ERROR                                |
  | tenant_id          | ffa0f8d8d51849a4ab67651e4bebcbba     |
  +--------------------+--------------------------------------+

  [root@puma16 ~(keystone_admin)]# 
  [root@puma16 ~(keystone_admin)]# rpm -qa |grep openstack-packstack
  openstack-packstack-puppet-2015.1-0.11.dev1589.g1d6372f.el7ost.noarch
  openstack-packstack-2015.1-0.11.dev1589.g1d6372f.el7ost.noarch
  [root@puma16 ~(keystone_admin)]# rpm -qa |grep openstack-puppet-modules
  openstack-puppet-modules-2015.1.8-8.el7ost.noarch
  [root@puma16 ~(keystone_admin)]# rpm -qa |grep neutron
  openstack-neutron-2015.1.0-12.el7ost.noarch
  openstack-neutron-openvswitch-2015.1.0-12.el7ost.noarch
  python-neutron-2015.1.0-12.el7ost.noarch
  openstack-neutron-fwaas-2015.1.0-3.el7ost.noarch
  python-neutronclient-2.4.0-1.el7ost.noarch
  python-neutron-fwaas-2015.1.0-3.el7ost.noarch
  openstack-neutron-common-2015.1.0-12.el7ost.noarch
  openstack-neutron-ml2-2015.1.0-12.el7ost.noarch


  
  l3-agent log :
  2015-07-22 13:42:01.804 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Notify callbacks for router, after_create
  2015-07-22 13:42:01.805 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Calling callback neutron.agent.metadata.driver.after_router_added
  2015-07-22 13:42:03.025 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Notify callbacks for router, before_update
  2015-07-22 13:42:03.593 8908 INFO neutron.callbacks.manager [req-e57bf79f-416f-48b6-9a23-ed01bf6b2846 ] Notify callbacks for router, after_update
  2015-07-22 13:48:50.478 8908 INFO neutron.callbacks.manager [-] Notify callbacks for router, before_update
  2015-07-22 13:48:50.941 8908 INFO neutron.callbacks.manager [-] Notify callbacks for router, after_update

  
  neutron-server.log : 
  2015-07-22 14:22:05.834 9105 INFO neutron.wsgi [-] (9105) accepted ('10.35.160.41', 49128)
  2015-07-22 14:22:05.918 9105 INFO neutron.wsgi [req-cf14cbb2-4c81-4e4f-93e1-3b8f0c829241 ] 10.35.160.41 - - [22/Jul/2015 14:22:05] "GET /v2.0/fw/firewall_rules.json?fields=id&id=28767fca-cdcc-4bff-bcde-025b7d5c2411 HTTP/1.1" 200 281 0.082675
  2015-07-22 14:22:06.002 9116 INFO neutron.wsgi [req-2d500a7a-79d8-4915-8c16-58f681ac0dad ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/ports.json?device_id=22306c02-13e9-44cb-a69a-790f2797e380&device_id=047af1bb-07a8-4720-ac7b-dcf5ff9ca049 HTTP/1.1" 200 1714 0.102604
  2015-07-22 14:22:06.008 9105 INFO neutron.wsgi [req-1129feb4-ebb7-48fe-8e5d-99bd4b6aedd7 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "PUT /v2.0/fw/firewall_rules/28767fca-cdcc-4bff-bcde-025b7d5c2411.json HTTP/1.1" 200 632 0.086929
  2015-07-22 14:22:06.026 9116 INFO neutron.wsgi [req-180227d6-8160-48dd-ad3d-e48d0e4d4049 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/security-groups.json?id=bc01e2f5-43bf-421d-b0ef-45b359621ef1 HTTP/1.1" 200 2420 0.021654
  2015-07-22 14:22:06.672 9105 INFO neutron.wsgi [-] (9105) accepted ('10.35.160.41', 49152)
  2015-07-22 14:22:06.753 9105 INFO neutron.wsgi [req-9ad94b5d-5059-4d51-b75d-b9619c8f3664 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/floatingips.json?tenant_id=4ff1237a772f4d9d8a89081c1b088cfa HTTP/1.1" 200 232 0.080874
  2015-07-22 14:22:06.779 9105 INFO neutron.wsgi [req-04fc2b61-39d0-4f8a-8ea3-e9dcfb26e52c ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/networks.json?router%3Aexternal=True HTTP/1.1" 200 608 0.022960
  2015-07-22 14:22:06.802 9105 INFO neutron.wsgi [req-861ef463-91cd-4f6d-8b4d-94eeea7a2159 ] 10.35.160.41 - - [22/Jul/2015 14:22:06] "GET /v2.0/ports.json?tenant_id=4ff1237a772f4d9d8a89081c1b088cfa HTTP/1.1" 200 226 0.020850
  14:22:07] "GET /v2.0/lb/health_monitors.json HTTP/1.1" 404 266 0.083710
  2015-07-22 14:22:11.689 9106 INFO neutron.wsgi [-] (9106) accepted ('10.35.160.41', 49177)
  2015-07-22 14:22:11.773 9106 INFO neutron.wsgi [req-b2e10b65-cc05-49d4-b23a-eff865be6be1 ] 10.35.160.41 - - [22/Jul/2015 14:22:11] "GET /v2.0/fw/firewalls.json?fields=id&id=c9478714-20e3-4163-97ad-212cdac04434 HTTP/1.1" 200 333 0.083735
  2015-07-22 14:22:11.785 9106 INFO neutron.wsgi [req-77f560cd-9672-4c9c-9b15-2c4528cca6b4 ] 10.35.160.41 - - [22/Jul/2015 14:22:11] "GET /v2.0/fw/firewalls/c9478714-20e3-4163-97ad-212cdac04434.json HTTP/1.1" 200 515 0.008494

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1477097/+subscriptions
Follow ups

[Bug 1477097] Re: fwaas: firewall in error status after update firewall-rule
From: Andrey Epifanov, 2015-10-27