[Yahoo-eng-team] [Bug 1515990] Re: Floating IP association without subnet gateway IP
There is nothing to do in horizon side as the neutron API wrapper in the horizon code does not depend on gateway_ip of a subnet. Marking this as Invalid in horizon side. Note that the neutron side fix which already landed is enough to fix this bug. ** Changed in: horizon Status: New => Invalid ** Changed in: horizon Assignee: Durga Malleswari Varanasi (durga1) => (unassigned) ** No longer affects: horizon -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1515990 Title: Floating IP association without subnet gateway IP Status in neutron: Fix Released Bug description: Hi All! There is a limitation in neutron/db/l3_db.py code, that not allows associating floatingip on a subnet where the subnet gateway ip in the database is not set, but the router has a port and ip on that subnet. This limitation excludes usecases where the user do not want to set default gateway on the subnet where the floating ip is associated, but use special host routes instead. A real life use case: An instance got two networks, one customer facing provider vlan with public internet address, and one GRE based tenant network for operations and maintenance. The the external network providing floating ips is from the company's intranet (like 10.0.0.0/8). The default gateway obviously should be pointing towards the public interface and special host routes used for private address ranges, for example 10.0.0.0/8 used for the intranet communication. In this usecase the user need to assign floating ips on a network where the default gateway is not set to reach the instance from the company's network. Code part causing the problem: def _get_router_for_floatingip(self, context, internal_port,internal_subnet_id,external_network_id): subnet = self._core_plugin.get_subnet(context, internal_subnet_id) if not subnet['gateway_ip']: msg = (_('Cannot add floating IP to port on subnet %s ' 'which has no gateway_ip') % internal_subnet_id) raise n_exc.BadRequest(resource='floatingip', msg=msg) Simply commenting out the validation on subnet['gateway_ip'] allows the user to associate floating ip on networks where no default gateway is set, and use without any kind of problem. Of course the virtual router still has to have port on that subnet. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1515990/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1515990] Re: Floating IP association without subnet gateway IP
Reviewed: https://review.openstack.org/451665 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=d5556a5e4eae3e638c4006987c7a334056b700f4 Submitter: Jenkins Branch:master commit d5556a5e4eae3e638c4006987c7a334056b700f4 Author: durga.malleswari Date: Thu Mar 30 11:53:08 2017 +0530 Floating IP association without subnet gateway IP Neutron throws an exception when we try to attach the floating ip to the instances that are launched in a network whose subnet is connected to the external router by an Ip address otherthan its gateway-ip. Now the neutron will execute the request with no exception/warning. Closes-Bug: #1515990 Change-Id: If212c36d918ed57400a53f4b5fa1925b3d1fa6fd ** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1515990 Title: Floating IP association without subnet gateway IP Status in OpenStack Dashboard (Horizon): New Status in neutron: Fix Released Bug description: Hi All! There is a limitation in neutron/db/l3_db.py code, that not allows associating floatingip on a subnet where the subnet gateway ip in the database is not set, but the router has a port and ip on that subnet. This limitation excludes usecases where the user do not want to set default gateway on the subnet where the floating ip is associated, but use special host routes instead. A real life use case: An instance got two networks, one customer facing provider vlan with public internet address, and one GRE based tenant network for operations and maintenance. The the external network providing floating ips is from the company's intranet (like 10.0.0.0/8). The default gateway obviously should be pointing towards the public interface and special host routes used for private address ranges, for example 10.0.0.0/8 used for the intranet communication. In this usecase the user need to assign floating ips on a network where the default gateway is not set to reach the instance from the company's network. Code part causing the problem: def _get_router_for_floatingip(self, context, internal_port,internal_subnet_id,external_network_id): subnet = self._core_plugin.get_subnet(context, internal_subnet_id) if not subnet['gateway_ip']: msg = (_('Cannot add floating IP to port on subnet %s ' 'which has no gateway_ip') % internal_subnet_id) raise n_exc.BadRequest(resource='floatingip', msg=msg) Simply commenting out the validation on subnet['gateway_ip'] allows the user to associate floating ip on networks where no default gateway is set, and use without any kind of problem. Of course the virtual router still has to have port on that subnet. To manage notifications about this bug go to: https://bugs.launchpad.net/horizon/+bug/1515990/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1515990] Re: Floating IP association without subnet gateway IP
** Also affects: horizon Importance: Undecided Status: New ** Changed in: horizon Assignee: (unassigned) => Durga Malleswari Varanasi (durga1) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1515990 Title: Floating IP association without subnet gateway IP Status in OpenStack Dashboard (Horizon): New Status in neutron: New Bug description: Hi All! There is a limitation in neutron/db/l3_db.py code, that not allows associating floatingip on a subnet where the subnet gateway ip in the database is not set, but the router has a port and ip on that subnet. This limitation excludes usecases where the user do not want to set default gateway on the subnet where the floating ip is associated, but use special host routes instead. A real life use case: An instance got two networks, one customer facing provider vlan with public internet address, and one GRE based tenant network for operations and maintenance. The the external network providing floating ips is from the company's intranet (like 10.0.0.0/8). The default gateway obviously should be pointing towards the public interface and special host routes used for private address ranges, for example 10.0.0.0/8 used for the intranet communication. In this usecase the user need to assign floating ips on a network where the default gateway is not set to reach the instance from the company's network. Code part causing the problem: def _get_router_for_floatingip(self, context, internal_port,internal_subnet_id,external_network_id): subnet = self._core_plugin.get_subnet(context, internal_subnet_id) if not subnet['gateway_ip']: msg = (_('Cannot add floating IP to port on subnet %s ' 'which has no gateway_ip') % internal_subnet_id) raise n_exc.BadRequest(resource='floatingip', msg=msg) Simply commenting out the validation on subnet['gateway_ip'] allows the user to associate floating ip on networks where no default gateway is set, and use without any kind of problem. Of course the virtual router still has to have port on that subnet. To manage notifications about this bug go to: https://bugs.launchpad.net/horizon/+bug/1515990/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1515990] Re: Floating IP association without subnet gateway IP
As a multi-tenant cloud provider we have the requirement of separating public VM traffic and backup VM traffic to our backup servers on our physical network whilst also isolating traffic between different clients. We are using DVR and our compute nodes have different physical interfaces for public VM traffic and the backup VM traffic. We are using vlxan for VM networks and have the following setup: public_external_subnet (vlan provider) mapped to physnet1 (public VM interface) backup_external_subnet (vlan provider) mapped to physnet2 (backup VM interface) Then for the project/tenant: client_public_subnet attached to client_public_router client_backup_subnet attached to client_backup_router And then we have an instance with: eth0 connected to client_public_router with an ip from client_public_subnet on eth0 with a floating ip from public_external_subnet eth1 connected to client_backup_router with an ip from client_backup_subnet on eth1 with a floating ip from backup_external_subnet So what we want to do is have the default route go out eth0 and then have a static route specifically for our backup server network go out eth1. But this is not possible due to the "if not subnet['gateway_ip']" code when adding the floating ip on the for the instance backup interface. When setting the gateway on the private subnet, this will result in the default gateway being updated for the instance public traffic to be incorrectly routed out the private interface. ** Changed in: neutron Status: Expired => Incomplete -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1515990 Title: Floating IP association without subnet gateway IP Status in neutron: Incomplete Bug description: Hi All! There is a limitation in neutron/db/l3_db.py code, that not allows associating floatingip on a subnet where the subnet gateway ip in the database is not set, but the router has a port and ip on that subnet. This limitation excludes usecases where the user do not want to set default gateway on the subnet where the floating ip is associated, but use special host routes instead. A real life use case: An instance got two networks, one customer facing provider vlan with public internet address, and one GRE based tenant network for operations and maintenance. The the external network providing floating ips is from the company's intranet (like 10.0.0.0/8). The default gateway obviously should be pointing towards the public interface and special host routes used for private address ranges, for example 10.0.0.0/8 used for the intranet communication. In this usecase the user need to assign floating ips on a network where the default gateway is not set to reach the instance from the company's network. Code part causing the problem: def _get_router_for_floatingip(self, context, internal_port,internal_subnet_id,external_network_id): subnet = self._core_plugin.get_subnet(context, internal_subnet_id) if not subnet['gateway_ip']: msg = (_('Cannot add floating IP to port on subnet %s ' 'which has no gateway_ip') % internal_subnet_id) raise n_exc.BadRequest(resource='floatingip', msg=msg) Simply commenting out the validation on subnet['gateway_ip'] allows the user to associate floating ip on networks where no default gateway is set, and use without any kind of problem. Of course the virtual router still has to have port on that subnet. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1515990/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1515990] Re: Floating IP association without subnet gateway IP
[Expired for neutron because there has been no activity for 60 days.] ** Changed in: neutron Status: Incomplete => Expired -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1515990 Title: Floating IP association without subnet gateway IP Status in neutron: Expired Bug description: Hi All! There is a limitation in neutron/db/l3_db.py code, that not allows associating floatingip on a subnet where the subnet gateway ip in the database is not set, but the router has a port and ip on that subnet. This limitation excludes usecases where the user do not want to set default gateway on the subnet where the floating ip is associated, but use special host routes instead. A real life use case: An instance got two networks, one customer facing provider vlan with public internet address, and one GRE based tenant network for operations and maintenance. The the external network providing floating ips is from the company's intranet (like 10.0.0.0/8). The default gateway obviously should be pointing towards the public interface and special host routes used for private address ranges, for example 10.0.0.0/8 used for the intranet communication. In this usecase the user need to assign floating ips on a network where the default gateway is not set to reach the instance from the company's network. Code part causing the problem: def _get_router_for_floatingip(self, context, internal_port,internal_subnet_id,external_network_id): subnet = self._core_plugin.get_subnet(context, internal_subnet_id) if not subnet['gateway_ip']: msg = (_('Cannot add floating IP to port on subnet %s ' 'which has no gateway_ip') % internal_subnet_id) raise n_exc.BadRequest(resource='floatingip', msg=msg) Simply commenting out the validation on subnet['gateway_ip'] allows the user to associate floating ip on networks where no default gateway is set, and use without any kind of problem. Of course the virtual router still has to have port on that subnet. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1515990/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp