← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1579080] [NEW] VPNaaS crash during VPN Connection creation

 

Public bug reported:

I've a Liberty Openstack environment with a L3HA (VRRP)on Centos 7; the
library used for VPN is Libreswan 3.15.

During VPNaaS creation between two tenant of the same Opnetstack, the
creation process report an error in vpn_agent.log file:

  File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 504, in _process_router_update
     self._process_router_if_compatible(router)
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 443, in _process_router_if_compatible
     self._process_updated_router(router)
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 457, in _process_updated_router
     ri.process(self)
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 379, in process
     super(HaRouter, self).process(agent)
   File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 359, in call
     self.logger(e)
   File "/usr/lib/python2.7/site-packages/oslo_utils/excutils.py", line 195, in __exit__
     six.reraise(self.type_, self.value, self.tb)
   File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 356, in call
     return func(*args, **kwargs)
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 691, in process
     self._process_internal_ports(agent.pd)
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 395, in _process_internal_ports
     self.internal_network_added(p)
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 277, in internal_network_added
     self._disable_ipv6_addressing_on_interface(interface_name)
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 237, in _disable_ipv6_addressing_on_interface
     if self._should_delete_ipv6_lladdr(ipv6_lladdr):
   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 219, in _should_delete_ipv6_lladdr
     if manager.get_process().active:
 AttributeError: 'NoneType' object has no attribute 'get_process'

I've this type of error only during VPN creation between two openstack
tenant, VPN between external devices (Cisco ASA) work properly.

The neutron-vpnaas service continuosly send this log in vpn_agent.log
file until the VPN is delated and neutron-vpn-agent service restarted.

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: l3-ha vpnaas

** Attachment added: "VPNaaS Log"
   https://bugs.launchpad.net/bugs/1579080/+attachment/4657303/+files/OSLogVPNaaS.PNG

** Information type changed from Public to Public Security

** Description changed:

  I've a Liberty Openstack environment with a L3HA (VRRP)on Centos 7; the
  library used for VPN is Libreswan 3.15.
  
  During VPNaaS creation between two tenant of the same Opnetstack, the
  creation process report an error in vpn_agent.log file:
  
-   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 504, in _process_router_update
-      self._process_router_if_compatible(router)
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 443, in _process_router_if_compatible
-      self._process_updated_router(router)
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 457, in _process_updated_router
-      ri.process(self)
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 379, in process
-      super(HaRouter, self).process(agent)
-    File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 359, in call
-      self.logger(e)
-    File "/usr/lib/python2.7/site-packages/oslo_utils/excutils.py", line 195, in __exit__
-      six.reraise(self.type_, self.value, self.tb)
-    File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 356, in call
-      return func(*args, **kwargs)
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 691, in process
-      self._process_internal_ports(agent.pd)
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 395, in _process_internal_ports
-      self.internal_network_added(p)
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 277, in internal_network_added
-      self._disable_ipv6_addressing_on_interface(interface_name)
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 237, in _disable_ipv6_addressing_on_interface
-      if self._should_delete_ipv6_lladdr(ipv6_lladdr):
-    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 219, in _should_delete_ipv6_lladdr
-      if manager.get_process().active:
-  AttributeError: 'NoneType' object has no attribute 'get_process'
+   File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 504, in _process_router_update
+      self._process_router_if_compatible(router)
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 443, in _process_router_if_compatible
+      self._process_updated_router(router)
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 457, in _process_updated_router
+      ri.process(self)
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 379, in process
+      super(HaRouter, self).process(agent)
+    File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 359, in call
+      self.logger(e)
+    File "/usr/lib/python2.7/site-packages/oslo_utils/excutils.py", line 195, in __exit__
+      six.reraise(self.type_, self.value, self.tb)
+    File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 356, in call
+      return func(*args, **kwargs)
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 691, in process
+      self._process_internal_ports(agent.pd)
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 395, in _process_internal_ports
+      self.internal_network_added(p)
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 277, in internal_network_added
+      self._disable_ipv6_addressing_on_interface(interface_name)
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 237, in _disable_ipv6_addressing_on_interface
+      if self._should_delete_ipv6_lladdr(ipv6_lladdr):
+    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 219, in _should_delete_ipv6_lladdr
+      if manager.get_process().active:
+  AttributeError: 'NoneType' object has no attribute 'get_process'
  
- I've this type of error only during VPN creation between two opnestack
+ I've this type of error only during VPN creation between two openstack
  tenant, VPN between external devices (Cisco ASA) work properly.
  
  The neutron-vpnaas service continuosly send this log in vpn_agent.log
- file util the VPN is delated and neutron-vpn-agent service restarted.
+ file until the VPN is delated and neutron-vpn-agent service restarted.

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1579080

Title:
  VPNaaS crash during VPN Connection creation

Status in neutron:
  New

Bug description:
  I've a Liberty Openstack environment with a L3HA (VRRP)on Centos 7;
  the library used for VPN is Libreswan 3.15.

  During VPNaaS creation between two tenant of the same Opnetstack, the
  creation process report an error in vpn_agent.log file:

    File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 504, in _process_router_update
       self._process_router_if_compatible(router)
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 443, in _process_router_if_compatible
       self._process_updated_router(router)
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/agent.py", line 457, in _process_updated_router
       ri.process(self)
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 379, in process
       super(HaRouter, self).process(agent)
     File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 359, in call
       self.logger(e)
     File "/usr/lib/python2.7/site-packages/oslo_utils/excutils.py", line 195, in __exit__
       six.reraise(self.type_, self.value, self.tb)
     File "/usr/lib/python2.7/site-packages/neutron/common/utils.py", line 356, in call
       return func(*args, **kwargs)
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 691, in process
       self._process_internal_ports(agent.pd)
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 395, in _process_internal_ports
       self.internal_network_added(p)
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 277, in internal_network_added
       self._disable_ipv6_addressing_on_interface(interface_name)
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 237, in _disable_ipv6_addressing_on_interface
       if self._should_delete_ipv6_lladdr(ipv6_lladdr):
     File "/usr/lib/python2.7/site-packages/neutron/agent/l3/ha_router.py", line 219, in _should_delete_ipv6_lladdr
       if manager.get_process().active:
   AttributeError: 'NoneType' object has no attribute 'get_process'

  I've this type of error only during VPN creation between two openstack
  tenant, VPN between external devices (Cisco ASA) work properly.

  The neutron-vpnaas service continuosly send this log in vpn_agent.log
  file until the VPN is delated and neutron-vpn-agent service restarted.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1579080/+subscriptions


Follow ups