[
https://issues.apache.org/jira/browse/CLOUDSTACK-6214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13931123#comment-13931123
]
angeline shen commented on CLOUDSTACK-6214:
-------------------------------------------
MS log 10.223.130.160:
2014-03-11 14:49:33,418 DEBUG [c.c.a.m.AgentManagerImpl]
(AgentManager-Handler-12:null) SeqA 3-121: Processing Seq 3-121: { Cmd ,
MgmtId: -1, via: 3, Ver: v1, Flags: 11,
[{"com.cloud.agent.api.ConsoleProxyLoadReportCommand":{"_p
roxyVmId":2,"_loadInfo":"{\n \"connections\": []\n}","wait":0}}] }
2014-03-11 14:49:33,426 DEBUG [c.c.a.m.AgentManagerImpl]
(AgentManager-Handler-12:null) SeqA 3-121: Sending Seq 3-121: { Ans: , MgmtId:
7437574735784, via: 3, Ver: v1, Flags: 100010,
[{"com.cloud.agent.api.AgentControlAnswer":{"
result":true,"wait":0}}] }
2014-03-11 14:49:37,063 DEBUG [c.c.a.ApiServlet] (catalina-exec-3:ctx-5c0b5954)
===START=== 10.215.3.21 -- GET
command=createNetworkACL&response=json&sessionkey=01F52uj0Cw1VwCqASim2Dxuaqq0%3D&number=5&cidrlist=0.0.0.0%2F0&actio
n=Allow&protocol=all&traffictype=Egress&aclid=0fecea53-537d-4edb-ac1e-e073af68f8d6&_=1394574929587
2014-03-11 14:49:37,114 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl]
(catalina-exec-3:ctx-5c0b5954 ctx-86a3cd30) submit async job-23, details:
AsyncJobVO {id:23, userId: 2, accountId: 2, instanceType: None, instanceId: 6,
cmd: org.apa che.cloudstack.api.command.user.network.CreateNetworkACLCmd,
cmdInfo:
{"sessionkey":"01F52uj0Cw1VwCqASim2Dxuaqq0\u003d","protocol":"all","cmdEventType":"NETWORK.ACL.ITEM.CREATE","ctxUserId":"2","traffictype":"Egress","httpmethod"
:"GET","number":"5","response":"json","id":"6","aclid":"0fecea53-537d-4edb-ac1e-e073af68f8d6","action":"Allow","cidrlist":"0.0.0.0/0","_":"1394574929587","ctxAccountId":"2","ctxStartEventId":"55"},
cmdVersion: 0, status: IN_PROGR ESS, processStatus: 0, resultCode: 0, result:
null, initMsid: 7437574735784, completeMsid: null, lastUpdated: null,
lastPolled: null, created: null}
2014-03-11 14:49:37,116 DEBUG [c.c.a.ApiServlet] (catalina-exec-3:ctx-5c0b5954
ctx-86a3cd30) ===END=== 10.215.3.21 -- GET
command=createNetworkACL&response=json&sessionkey=01F52uj0Cw1VwCqASim2Dxuaqq0%3D&number=5&cidrlist=0.0.0.
0%2F0&action=Allow&protocol=all&traffictype=Egress&aclid=0fecea53-537d-4edb-ac1e-e073af68f8d6&_=1394574929587
2014-03-11 14:49:37,119 INFO [o.a.c.f.j.i.AsyncJobMonitor]
(API-Job-Executor-17:Job-23) Add job-23 into job monitoring
2014-03-11 14:49:37,119 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl]
(API-Job-Executor-17:Job-23) Executing AsyncJobVO {id:23, userId: 2, accountId:
2, instanceType: None, instanceId: 6, cmd:
org.apache.cloudstack.api.command.user.net
work.CreateNetworkACLCmd, cmdInfo:
{"sessionkey":"01F52uj0Cw1VwCqASim2Dxuaqq0\u003d","protocol":"all","cmdEventType":"NETWORK.ACL.ITEM.CREATE","ctxUserId":"2","traffictype":"Egress","httpmethod":"GET","number":"5","response":"jso
n","id":"6","aclid":"0fecea53-537d-4edb-ac1e-e073af68f8d6","action":"Allow","cidrlist":"0.0.0.0/0","_":"1394574929587","ctxAccountId":"2","ctxStartEventId":"55"},
cmdVersion: 0, status: IN_PROGRESS, processStatus: 0, resultCode:
0, result: null, initMsid: 7437574735784, completeMsid: null, lastUpdated:
null, lastPolled: null, created: null}
2014-03-11 14:49:37,143 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl]
(API-Job-Executor-17:Job-23 ctx-7378e57d) Complete async job-23, jobStatus:
SUCCEEDED, resultCode: 0, result:
org.apache.cloudstack.api.response.NetworkACLItemRespon
se/networkacl/{"id":"90811fda-9436-4dcc-b110-beaee2be5fb3","protocol":"all","traffictype":"Egress","state":"Active","cidrlist":"0.0.0.0/0","tags":[],"aclid":"0fecea53-537d-4edb-ac1e-e073af68f8d6","number":5,"action":"Allow"}
2014-03-11 14:49:37,154 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl]
(API-Job-Executor-17:Job-23) Done executing
org.apache.cloudstack.api.command.user.network.CreateNetworkACLCmd for job-23
2014-03-11 14:49:37,160 INFO [o.a.c.f.j.i.AsyncJobMonitor]
(API-Job-Executor-17:Job-23) Remove job-23 from job monitoring
2014-03-11 14:49:38,419 DEBUG [c.c.a.m.AgentManagerImpl]
(AgentManager-Handler-13:null) SeqA 3-122: Processing Seq 3-122: { Cmd ,
MgmtId: -1, via: 3, Ver: v1, Flags: 11,
[{"com.cloud.agent.api.ConsoleProxyLoadReportCommand":{"_p
roxyVmId":2,"_loadInfo":"{\n \"connections\": []\n}","wait":0}}] }
2014-03-11 14:49:38,426 DEBUG [c.c.a.m.AgentManagerImpl]
(AgentManager-Handler-13:null) SeqA 3-122: Sending Seq 3-122: { Ans: , MgmtId:
7437574735784, via: 3, Ver: v1, Flags: 100010,
[{"com.cloud.agent.api.AgentControlAnswer":{"
result":true,"wait":0}}] }
2014-03-11 14:59:38,311 DEBUG [c.c.n.r.VirtualNetworkApplianceManagerImpl]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Found 0 firewall Egress
rule(s) to apply as a part of domR VM[DomainRouter|r-3-VM] start.
2014-03-11 14:59:38,316 DEBUG [c.c.n.r.VpcVirtualNetworkApplianceManagerImpl]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Found 2 network ACLs to apply
as a part of VPC VR VM[DomainRouter|r-3-VM] start for guest network id=2
04
2014-03-11 14:59:38,333 DEBUG [c.c.n.NetworkModelImpl]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Service SecurityGroup is not
supported in the network id=204
2014-03-11 14:59:38,352 DEBUG [c.c.a.t.Request]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Seq 1-1637810248: Sending {
Cmd , MgmtId: 7437574735784, via: 1(Rack2Host19.lab.vmops.com), Ver: v1, Flags:
100001, [{"com.cloud.ag
ent.api.routing.SetNetworkACLCommand":{"rules":[{"id":0,"vlanTag":"2487","protocol":"all","revoked":false,"alreadyAdded":true,"cidrList":["0.0.0.0/0"],"trafficType":"Ingress","action":"ACCEPT","number":4},{"id":0,"vlanTag":"2487"
,"protocol":"all","revoked":false,"alreadyAdded":true,"cidrList":["0.0.0.0/0"],"trafficType":"Egress","action":"ACCEPT","number":5}],"nic":{"deviceId":2,"networkRateMbps":200,"defaultNic":false,"uuid":"63e8bba9-bb6d-45d4-af58-ef7
f7adad641","ip":"10.4.1.1","netmask":"255.255.255.0","gateway":"10.4.1.1","mac":"02:00:7f:16:00:02","broadcastType":"Vlan","type":"Guest","broadcastUri":"vlan://2487","isolationUri":"vlan://2487","isSecurityGroupEnabled":false},"
accessDetails":{"router.guest.ip":"10.4.1.1","guest.vlan.tag":"2487","zone.network.type":"Advanced","router.ip":"169.254.3.181","router.name":"r-3-VM"},"wait":0}}]
}
2014-03-11 14:59:38,355 DEBUG [c.c.a.t.Request]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Seq 1-1637810248: Executing:
{ Cmd , MgmtId: 7437574735784, via: 1(Rack2Host19.lab.vmops.com), Ver: v1,
Flags: 100001, [{"com.cloud
.agent.api.routing.SetNetworkACLCommand":{"rules":[{"id":0,"vlanTag":"2487","protocol":"all","revoked":false,"alreadyAdded":true,"cidrList":["0.0.0.0/0"],"trafficType":"Ingress","action":"ACCEPT","number":4},{"id":0,"vlanTag":"24
87","protocol":"all","revoked":false,"alreadyAdded":true,"cidrList":["0.0.0.0/0"],"trafficType":"Egress","action":"ACCEPT","number":5}],"nic":{"deviceId":2,"networkRateMbps":200,"defaultNic":false,"uuid":"63e8bba9-bb6d-45d4-af58-
ef7f7adad641","ip":"10.4.1.1","netmask":"255.255.255.0","gateway":"10.4.1.1","mac":"02:00:7f:16:00:02","broadcastType":"Vlan","type":"Guest","broadcastUri":"vlan://2487","isolationUri":"vlan://2487","isSecurityGroupEnabled":false
},"accessDetails":{"router.guest.ip":"10.4.1.1","guest.vlan.tag":"2487","zone.network.type":"Advanced","router.ip":"169.254.3.181","router.name":"r-3-VM"},"wait":0}}]
}
2014-03-11 14:59:38,355 DEBUG [c.c.a.m.DirectAgentAttache]
(DirectAgent-17:ctx-b1450448) Seq 1-1637810248: Executing request
2014-03-11 14:59:39,030 DEBUG [c.c.a.m.DirectAgentAttache]
(DirectAgent-17:ctx-b1450448) Seq 1-1637810248: Response Received:
2014-03-11 14:59:39,031 DEBUG [c.c.a.t.Request] (DirectAgent-17:ctx-b1450448)
Seq 1-1637810248: Processing: { Ans: , MgmtId: 7437574735784, via: 1, Ver: v1,
Flags: 0, [{"com.cloud.agent.api.routing.SetNetworkACLAnswer":{"results
":[null,null],"result":true,"wait":0}}] }
2014-03-11 14:59:39,031 DEBUG [c.c.a.t.Request]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Seq 1-1637810248: Received: {
Ans: , MgmtId: 7437574735784, via: 1, Ver: v1, Flags: 0, { SetNetworkACLAnswer
} }
2014-03-11 14:59:39,031 DEBUG [c.c.n.r.VpcVirtualNetworkApplianceManagerImpl]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Succesfully added router
VM[DomainRouter|r-3-VM] to guest network Ntwk[204|Guest|15]
2014-03-11 14:59:39,031 DEBUG [c.c.n.e.VpcVirtualRouterElement]
(Work-Job-Executor-6:Job-24/Job-25 ctx-b450804e) Successfully added VPC router
VM[DomainRouter|r-3-VM] to guest network Ntwk[204|Guest|15]
> VPC: when guest network is in Setup state, on its initial nicPlug to the VR,
> corresponding network rules are not getting applied
> --------------------------------------------------------------------------------------------------------------------------------
>
> Key: CLOUDSTACK-6214
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6214
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: Network Controller
> Affects Versions: 4.3.0
> Reporter: Alena Prokharchyk
> Assignee: Alena Prokharchyk
> Priority: Critical
> Fix For: 4.3.0
>
>
> Steps to reproduce:
> ==========================
> 1) Create VPC
> 2) Add networkACLList and a rule to it
> 3) In VPC, create a network from NetworkOffering with specifyVlan=true.
> Network is created in Setup state.
> 4) Start user vm in the network.
> Bug: network ACLs are not applied although the guest nic is plugged to the VR.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
