← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 2007826] [NEW] Create IPsec connection error with VPN service use subnet has subnetpool

 

Public bug reported:

Openstack: yoga
OS: Ubuntu
VPNaaS Driver: Strongswan

Subnet Pool:

+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| address_scope_id  | None                                 |
| created_at        | 2023-02-17T02:29:36Z                 |
| default_prefixlen | 24                                   |
| default_quota     | None                                 |
| description       | None                                 |
| id                | 4ae1490d-4670-40ca-b755-b5f1cd0df603 |
| ip_version        | 4                                    |
| is_default        | False                                |
| max_prefixlen     | 32                                   |
| min_prefixlen     | 8                                    |
| name              | 4ae1490d-4670-40ca-b755-b5f1cd0df603 |
| prefixes          | 10.0.0.0/8                           |
| project_id        | a2439087-60c0-4939-b381-209d7342ed37 |
| revision_number   | 1                                    |
| shared            | False                                |
| tags              |                                      |
| updated_at        | 2023-02-17T02:29:36Z                 |
+-------------------+--------------------------------------+

Subnet:

+----------------------+--------------------------------------+
| Field                | Value                                |
+----------------------+--------------------------------------+
| allocation_pools     | 10.1.0.2-10.1.0.254                  |
| cidr                 | 10.1.0.0/24                          |
| created_at           | 2023-02-17T02:30:19Z                 |
| description          | None                                 |
| dns_nameservers      |                                      |
| dns_publish_fixed_ip | None                                 |
| enable_dhcp          | True                                 |
| gateway_ip           | 10.1.0.1                             |
| host_routes          |                                      |
| id                   | 00fa7e20-daac-4727-a997-860ff079f254 |
| ip_version           | 4                                    |
| ipv6_address_mode    | None                                 |
| ipv6_ra_mode         | None                                 |
| name                 | 00fa7e20-daac-4727-a997-860ff079f254 |
| network_id           | d0cd4d4a-4752-4c43-bf31-ada40eb27393 |
| project_id           | a2439087-60c0-4939-b381-209d7342ed37 |
| revision_number      | 1                                    |
| segment_id           | None                                 |
| service_types        |                                      |
| subnetpool_id        | 4ae1490d-4670-40ca-b755-b5f1cd0df603 |
| tags                 |                                      |
| updated_at           | 2023-02-17T02:30:19Z                 |
+----------------------+--------------------------------------+

VPNservice:

+----------------+--------------------------------------+
| Field          | Value                                |
+----------------+--------------------------------------+
| Description    |                                      |
| Flavor         | None                                 |
| ID             | 273a2a07-23ff-41f1-a13e-453125399364 |
| Name           | 4ccd88c5-f89d-4fb3-bb7c-7f4ceae34b0e |
| Project        | a2439087-60c0-4939-b381-209d7342ed37 |
| Router         | eca8dd96-74f2-40bf-9211-1527db9e7c1a |
| State          | True                                 |
| Status         | PENDING_CREATE                       |
| Subnet         | 00fa7e20-daac-4727-a997-860ff079f254 |
| external_v4_ip | 111.111.1.101                        |
| external_v6_ip | None                                 |
| project_id     | a2439087-60c0-4939-b381-209d7342ed37 |
+----------------+--------------------------------------+

When I created IPSec site connection with VPNservice
273a2a07-23ff-41f1-a13e-453125399364, neutron server has log:

oslo_messaging.rpc.server [req-ebea8b3f-3ed7-413c-8fa7-48df474551b1 - - - - -] Can not send reply for message: Attribute 'SubnetPool' object has no attribute 'shared'
oslo_messaging.rpc.server Traceback (most recent call last):
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/rpc/server.py", line 184, in _process_incoming
oslo_messaging.rpc.server     message.reply(res)
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/_drivers/amqpdriver.py", line 150, in reply
oslo_messaging.rpc.server     self._send_reply(conn, reply, failure)
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/_drivers/amqpdriver.py", line 125, in _send_reply
oslo_messaging.rpc.server     conn.direct_send(self.reply_q, rpc_common.serialize_msg(msg))
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/_drivers/common.py", line 292, in serialize_msg
oslo_messaging.rpc.server     _MESSAGE_KEY: jsonutils.dumps(raw_msg)}
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_serialization/jsonutils.py", line 202, in dumps
oslo_messaging.rpc.server     return json.dumps(obj, default=default, **kwargs)
oslo_messaging.rpc.server   File "/usr/lib/python3.8/json/__init__.py", line 234, in dumps
oslo_messaging.rpc.server     return cls(
oslo_messaging.rpc.server   File "/usr/lib/python3.8/json/encoder.py", line 199, in encode
oslo_messaging.rpc.server     chunks = self.iterencode(o, _one_shot=True)
oslo_messaging.rpc.server   File "/usr/lib/python3.8/json/encoder.py", line 257, in iterencode
oslo_messaging.rpc.server     return _iterencode(o, 0)
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_serialization/jsonutils.py", line 161, in to_primitive
oslo_messaging.rpc.server     return recursive(dict(value.iteritems()), level=level + 1)
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_db/sqlalchemy/models.py", line 99, in iteritems
oslo_messaging.rpc.server     return self._as_dict().items()
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_db/sqlalchemy/models.py", line 91, in _as_dict
oslo_messaging.rpc.server     local = dict((key, value) for key, value in self)
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_db/sqlalchemy/models.py", line 91, in <genexpr>
oslo_messaging.rpc.server     local = dict((key, value) for key, value in self)
oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/neutron_lib/db/model_base.py", line 92, in next
oslo_messaging.rpc.server     return n, getattr(self, n)
oslo_messaging.rpc.server Attribute 'SubnetPool' object has no attribute 'shared'

However, when I created VPNservice with subnet without subnetpool, IPSec
site connection created with this VPNservice be OK but I didn't find any
note or anything include code about "Shouldn't create VPNservice with
subnet has subnetpool".

Thanks to read my report bug, I'm looking for receiving your help!

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: vpnaas

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2007826

Title:
  Create IPsec connection error with VPN service use subnet has
  subnetpool

Status in neutron:
  New

Bug description:
  Openstack: yoga
  OS: Ubuntu
  VPNaaS Driver: Strongswan

  Subnet Pool:

  +-------------------+--------------------------------------+
  | Field             | Value                                |
  +-------------------+--------------------------------------+
  | address_scope_id  | None                                 |
  | created_at        | 2023-02-17T02:29:36Z                 |
  | default_prefixlen | 24                                   |
  | default_quota     | None                                 |
  | description       | None                                 |
  | id                | 4ae1490d-4670-40ca-b755-b5f1cd0df603 |
  | ip_version        | 4                                    |
  | is_default        | False                                |
  | max_prefixlen     | 32                                   |
  | min_prefixlen     | 8                                    |
  | name              | 4ae1490d-4670-40ca-b755-b5f1cd0df603 |
  | prefixes          | 10.0.0.0/8                           |
  | project_id        | a2439087-60c0-4939-b381-209d7342ed37 |
  | revision_number   | 1                                    |
  | shared            | False                                |
  | tags              |                                      |
  | updated_at        | 2023-02-17T02:29:36Z                 |
  +-------------------+--------------------------------------+

  Subnet:

  +----------------------+--------------------------------------+
  | Field                | Value                                |
  +----------------------+--------------------------------------+
  | allocation_pools     | 10.1.0.2-10.1.0.254                  |
  | cidr                 | 10.1.0.0/24                          |
  | created_at           | 2023-02-17T02:30:19Z                 |
  | description          | None                                 |
  | dns_nameservers      |                                      |
  | dns_publish_fixed_ip | None                                 |
  | enable_dhcp          | True                                 |
  | gateway_ip           | 10.1.0.1                             |
  | host_routes          |                                      |
  | id                   | 00fa7e20-daac-4727-a997-860ff079f254 |
  | ip_version           | 4                                    |
  | ipv6_address_mode    | None                                 |
  | ipv6_ra_mode         | None                                 |
  | name                 | 00fa7e20-daac-4727-a997-860ff079f254 |
  | network_id           | d0cd4d4a-4752-4c43-bf31-ada40eb27393 |
  | project_id           | a2439087-60c0-4939-b381-209d7342ed37 |
  | revision_number      | 1                                    |
  | segment_id           | None                                 |
  | service_types        |                                      |
  | subnetpool_id        | 4ae1490d-4670-40ca-b755-b5f1cd0df603 |
  | tags                 |                                      |
  | updated_at           | 2023-02-17T02:30:19Z                 |
  +----------------------+--------------------------------------+

  VPNservice:

  +----------------+--------------------------------------+
  | Field          | Value                                |
  +----------------+--------------------------------------+
  | Description    |                                      |
  | Flavor         | None                                 |
  | ID             | 273a2a07-23ff-41f1-a13e-453125399364 |
  | Name           | 4ccd88c5-f89d-4fb3-bb7c-7f4ceae34b0e |
  | Project        | a2439087-60c0-4939-b381-209d7342ed37 |
  | Router         | eca8dd96-74f2-40bf-9211-1527db9e7c1a |
  | State          | True                                 |
  | Status         | PENDING_CREATE                       |
  | Subnet         | 00fa7e20-daac-4727-a997-860ff079f254 |
  | external_v4_ip | 111.111.1.101                        |
  | external_v6_ip | None                                 |
  | project_id     | a2439087-60c0-4939-b381-209d7342ed37 |
  +----------------+--------------------------------------+

  When I created IPSec site connection with VPNservice
  273a2a07-23ff-41f1-a13e-453125399364, neutron server has log:

  oslo_messaging.rpc.server [req-ebea8b3f-3ed7-413c-8fa7-48df474551b1 - - - - -] Can not send reply for message: Attribute 'SubnetPool' object has no attribute 'shared'
  oslo_messaging.rpc.server Traceback (most recent call last):
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/rpc/server.py", line 184, in _process_incoming
  oslo_messaging.rpc.server     message.reply(res)
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/_drivers/amqpdriver.py", line 150, in reply
  oslo_messaging.rpc.server     self._send_reply(conn, reply, failure)
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/_drivers/amqpdriver.py", line 125, in _send_reply
  oslo_messaging.rpc.server     conn.direct_send(self.reply_q, rpc_common.serialize_msg(msg))
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_messaging/_drivers/common.py", line 292, in serialize_msg
  oslo_messaging.rpc.server     _MESSAGE_KEY: jsonutils.dumps(raw_msg)}
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_serialization/jsonutils.py", line 202, in dumps
  oslo_messaging.rpc.server     return json.dumps(obj, default=default, **kwargs)
  oslo_messaging.rpc.server   File "/usr/lib/python3.8/json/__init__.py", line 234, in dumps
  oslo_messaging.rpc.server     return cls(
  oslo_messaging.rpc.server   File "/usr/lib/python3.8/json/encoder.py", line 199, in encode
  oslo_messaging.rpc.server     chunks = self.iterencode(o, _one_shot=True)
  oslo_messaging.rpc.server   File "/usr/lib/python3.8/json/encoder.py", line 257, in iterencode
  oslo_messaging.rpc.server     return _iterencode(o, 0)
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_serialization/jsonutils.py", line 161, in to_primitive
  oslo_messaging.rpc.server     return recursive(dict(value.iteritems()), level=level + 1)
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_db/sqlalchemy/models.py", line 99, in iteritems
  oslo_messaging.rpc.server     return self._as_dict().items()
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_db/sqlalchemy/models.py", line 91, in _as_dict
  oslo_messaging.rpc.server     local = dict((key, value) for key, value in self)
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/oslo_db/sqlalchemy/models.py", line 91, in <genexpr>
  oslo_messaging.rpc.server     local = dict((key, value) for key, value in self)
  oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib/python3.8/site-packages/neutron_lib/db/model_base.py", line 92, in next
  oslo_messaging.rpc.server     return n, getattr(self, n)
  oslo_messaging.rpc.server Attribute 'SubnetPool' object has no attribute 'shared'

  However, when I created VPNservice with subnet without subnetpool,
  IPSec site connection created with this VPNservice be OK but I didn't
  find any note or anything include code about "Shouldn't create
  VPNservice with subnet has subnetpool".

  Thanks to read my report bug, I'm looking for receiving your help!

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2007826/+subscriptions