[
https://issues.apache.org/jira/browse/CLOUDSTACK-9015?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14986720#comment-14986720
]
satoru nakaya edited comment on CLOUDSTACK-9015 at 11/3/15 5:33 AM:
--------------------------------------------------------------------
It recovered in the following.
I think there is a problem in the iptables rules ?
(I do not set the ACL (Default_allow))
15) Flush iptables rule r-40-VM
16) Flush iptables rule r-41-VM
17) Check Redundant state (good)
r-40-VM Redundant state:MASTER -> MASTER
r-41-VM Redundant state:MASTER -> BACKUP
==========================
root@r-40-VM:~# /etc/init.d/iptables-persistent flush
[ ok ] Flushing rules... IPv4... IPv6...done.
root@r-40-VM:~# iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@r-40-VM:~#
root@r-41-VM:~# /etc/init.d/iptables-persistent flush
[ ok ] Flushing rules... IPv4... IPv6...done.
root@r-41-VM:~# iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@r-41-VM:~#
root@r-40-VM:~# tcpdump -i eth2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth2, link-type EN10MB (Ethernet), capture size 65535 bytes
04:37:50.599495 IP 172.17.0.111.36574 > 225.0.0.50.3780: UDP, length 16
04:37:50.951447 IP 172.17.0.123 > vrrp.mcast.net: AH(spi=0xac11007b,seq=0x20f):
VRRPv2, Advertisement, vrid 7, prio 1, authtype ah, intvl 1s, length 20
04:37:51.155104 IP 172.17.0.123.39245 > 225.0.0.50.3780: UDP, length 16
04:37:51.600175 IP 172.17.0.111.36574 > 225.0.0.50.3780: UDP, length 16
04:37:51.952787 IP 172.17.0.123 > vrrp.mcast.net: AH(spi=0xac11007b,seq=0x210):
VRRPv2, Advertisement, vrid 7, prio 1, authtype ah, intvl 1s, length 20
==========================
was (Author: giraffeforestg):
It recovered in the following.
I think there is a problem in the iptables rules ?
(I do not set the ACL (Default_allow))
15) Flush iptables rule r-40-VM
16) Flush iptables rule r-41-VM
17) Check Redundant state (good)
r-40-VM Redundant state:MASTER
r-41-VM Redundant state:BACKUP
==========================
root@r-40-VM:~# /etc/init.d/iptables-persistent flush
[ ok ] Flushing rules... IPv4... IPv6...done.
root@r-40-VM:~# iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@r-40-VM:~#
root@r-41-VM:~# /etc/init.d/iptables-persistent flush
[ ok ] Flushing rules... IPv4... IPv6...done.
root@r-41-VM:~# iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@r-41-VM:~#
root@r-40-VM:~# tcpdump -i eth2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth2, link-type EN10MB (Ethernet), capture size 65535 bytes
04:37:50.599495 IP 172.17.0.111.36574 > 225.0.0.50.3780: UDP, length 16
04:37:50.951447 IP 172.17.0.123 > vrrp.mcast.net: AH(spi=0xac11007b,seq=0x20f):
VRRPv2, Advertisement, vrid 7, prio 1, authtype ah, intvl 1s, length 20
04:37:51.155104 IP 172.17.0.123.39245 > 225.0.0.50.3780: UDP, length 16
04:37:51.600175 IP 172.17.0.111.36574 > 225.0.0.50.3780: UDP, length 16
04:37:51.952787 IP 172.17.0.123 > vrrp.mcast.net: AH(spi=0xac11007b,seq=0x210):
VRRPv2, Advertisement, vrid 7, prio 1, authtype ah, intvl 1s, length 20
==========================
> Redundant VPC Virtual Router's state is BACKUP & BACKUP
> -------------------------------------------------------
>
> Key: CLOUDSTACK-9015
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9015
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Affects Versions: 4.6.0
> Environment: CloudStack master(2015/10/31) 4.6.0-snapshot
> Hypervisor CentOS6/KVM
> SystemVM
> build #654 (2015/10/22 19:27:55)
> http://jenkins.buildacloud.org/job/build-systemvm64-master/lastSuccessfulBuild/artifact/tools/appliance/dist/systemvm64template-master-4.6.0-kvm.qcow2.bz2
> Reporter: satoru nakaya
> Assignee: Wilder Rodrigues
> Priority: Critical
>
> Steps of reproduce.
> 1)Create VPC (Redundant VPC offering)
> 2)Create tier
> 3)Create VM Instance on this tier
> 4)Check Redundant state (good)
> r-14-VM Redundant state:MASTER
> r-15-VM Redundant state:BACKUP
> 5) Reboot Router r-14-VM
> 6)Check Redundant state (good)
> r-14-VM Redundant state:BACKUP
> r-15-VM Redundant state:MASTER
> 7) Reboot Router r-15-VM
> 8)Check Redundant state (bad)
> r-14-VM Redundant state:BACKUP
> r-15-VM Redundant state:BACKUP
> 9)Check Log(r-14-VM's /var/log/messages)
> Nov 1 00:46:29 r-14-VM Keepalived_vrrp[3711]: VRRP_Instance(inside_network)
> sending 0 priority
> Nov 1 00:47:34 r-14-VM Keepalived_vrrp[2179]: Netlink: filter function error
> Nov 1 00:47:34 r-14-VM Keepalived_healthcheckers[2178]: Netlink: filter
> function error
> Nov 1 00:47:53 r-14-VM Keepalived_healthcheckers[2178]: Netlink: filter
> function error
> Nov 1 00:47:53 r-14-VM Keepalived_vrrp[2179]: Netlink: filter function error
> Nov 1 00:47:54 r-14-VM Keepalived_healthcheckers[2178]: Netlink: filter
> function error
> Nov 1 00:47:54 r-14-VM Keepalived_vrrp[2179]: Netlink: filter function error
> 10)Check Log(r-15-VM's /var/log/messages)
> Nov 1 00:49:19 r-15-VM Keepalived_vrrp[3682]: VRRP_Instance(inside_network)
> sending 0 priority
> Nov 1 00:50:25 r-15-VM Keepalived_vrrp[2179]: Netlink: filter function error
> Nov 1 00:50:25 r-15-VM Keepalived_healthcheckers[2178]: Netlink: filter
> function error
> Nov 1 00:50:45 r-15-VM Keepalived_healthcheckers[2178]: Netlink: filter
> function error
> Nov 1 00:50:45 r-15-VM Keepalived_vrrp[2179]: Netlink: filter function error
> Nov 1 00:50:45 r-15-VM Keepalived_healthcheckers[2178]: Netlink: filter
> function error
> Nov 1 00:50:45 r-15-VM Keepalived_vrrp[2179]: Netlink: filter function error
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
