yahoo-eng-team team mailing list archive

[Alan Pevec <1448439@xxxxxxxxxxxxxxxxxx>]

** Also affects: neutron/kilo
   Importance: Undecided
       Status: New

** Changed in: neutron/kilo
   Importance: Undecided => High

** Changed in: neutron/kilo
       Status: New => Fix Released

** Changed in: neutron/kilo
     Assignee: (unassigned) => Akihiro Motoki (amotoki)

** Changed in: neutron/kilo
    Milestone: None => 2015.1.1

** Tags removed: in-stable-kilo kilo-backport-potential

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1448439

Title:
  fwaas iptables driver does not work with plugins without DVR support

Status in neutron:
  Fix Released
Status in neutron kilo series:
  Fix Released

Bug description:
  fwaas iptables does not work with plugins without dvr extension support because fwaas iptables expects router_info.router has "distributed" attribute. The attribute is only populated when dvr extension is supported. As the original intention, iptables firewall implemention should work without dvr support.
  (I see this bug in nec plugin at least.)

  -3614-4f0c-b112-2d06ce4c1511 for tenant 80ea3f02f2414ee89e520944a1da5a58) from (pid=15023) create_firewall /opt/stack/neutron-fwaas/neutron_fwaas/services/firewall/drivers/linux/iptables_fwaas.py:55
  2015-04-25 18:36:30.838 ERROR neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas [req-732eb7ca-2d7c-4bb3-9265-f4633f197b06 demo 80ea3f02f2414ee89e520944a1da5a58] Failed to create firewall:
   35021da7-3614-4f0c-b112-2d06ce4c1511
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas Traceback (most recent call last):
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas   File "/opt/stack/neutron-fwaas/neutron_fwaas/services/firewall/drivers/linux/iptables_fwaas.py", line 58,
   in create_firewall
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas     self._setup_firewall(agent_mode, apply_list, firewall)
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas   File "/opt/stack/neutron-fwaas/neutron_fwaas/services/firewall/drivers/linux/iptables_fwaas.py", line 153
  , in _setup_firewall
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas     agent_mode, router_info)
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas   File "/opt/stack/neutron-fwaas/neutron_fwaas/services/firewall/drivers/linux/iptables_fwaas.py", line 76,
   in _get_ipt_mgrs_with_if_prefix
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas     if not router_info.router['distributed']:
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas KeyError: 'distributed'
  2015-04-25 18:36:30.838 TRACE neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas
  2015-04-25 18:36:30.839 ERROR neutron_fwaas.services.firewall.agents.l3reference.firewall_l3_agent [req-732eb7ca-2d7c-4bb3-9265-f4633f197b06 demo 80ea3f02f2414ee89e520944a1da5a58] Firewall Driver Er
  ror for create_firewall for firewall: 35021da7-3614-4f0c-b112-2d06ce4c1511

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1448439/+subscriptions