Essex - Quantum - OVS - Multi-Node Architecture -> Working Partially !
Hi Stackers,
I will be the more precise as possible.
I'm working in a multi-node architecture with Ubuntu 12.04 / Essex up to date.
My architecture is clean and all was working in VLAN-Manager Mode. From now, I switch to Quantum Manager.
My docs references :
http://docs.openstack.org/trunk/openstack-network/admin/content/index.html (http://docs.openstack.org/trunk/opens...) http://openvswitch.org/openstack/documentation/ (http://openvswitch.org/openstack/docu...)
- Node 1 : Controller
MySQL, Rabbit-MQ, nova-volume, nova-api, nova-network, nova-schedule, quantum-server with OVS plugin
nova.conf : http://paste.openstack.org/show/18401/
ovs-vsctl add-br br-int ovs-vsctl add-port br-int eth1
ovs-vsctl br-set-external-id br-int bridge br-int (useful ?) [Edit : I've rebuilt by bridge without this command]
I use default mode of Quantum (Without tunneling).
nova-manage network create --label=public --fixed_range_v4=192.168.15.0/24
DNSMASQ is running well on controller node (which is also nova-network).
/etc/network/interfaces with eth1 :
[..]
iface eth1 inet manual up ifconfig $IFACE 0.0.0.0 up up ip link set $IFACE promisc on down ip link set $IFACE promisc off down ifconfig $IFACE down
- Node 2 : Compute1 and Node 3 Compute2 :
nova.conf -> same as controller
nova-compute.conf -> http://paste.openstack.org/show/18403/
I explain now some stuff I've seen :
When I create an instance, it's does not get an IP address from DNSMASQ. After many hours to looking for why, I can see I'm not alone to be in this situation. I did not find someone in the OpenStack community with Essex + Quantum + OVS working in Multi-Node Architecture ! That's why I'm doing an investigation as I can, and I think to have localized the issue.
On the compute node :
root@compute1:~# ovs-vsctl show Bridge br-int Port "eth1" Interface "eth1" Port br-int Interface br-int type: internal Port "tap771bf804-eb" tag: 4095 Interface "tap771bf804-eb" ovs_version: "1.4.0+build0"
My first question :
Why we have a 4095 tag for the TAP interface (which is vNIC of VM) ?
What I found :
If I delete TAP interface after VM creation, and I recreate it, my VM gets an IP !!! :
ovs-vsctl del-port tap771bf804-eb ovs-vsctl add-port br-int tap771bf804-eb
After that, if my VM asks for an IP, she gets an IP.
I know that's not clean, but I try to find what's wrong with OVS Plugin in https://github.com/openstack/quantum/blob/master/quantum/plugins/openvswitch/agent/ovs_quantum_agent.py (https://github.com/openstack/quantum/...)
Maybe a issue with :
self.int_br.add_flow(priority=2, in_port=p.ofport, actions="drop")
?
- Other problem now, I can connect to the VM with this tips, but I can't connect from other hosts than my controller (ans nova-network as well). And also my VM does not have Internet.
Second question :
What's wrong with IPtables ? My security groups allow SSH + ICMP.
I think to have isolated the issue, but now we have to debug it and to understand what's wrong with OVS + Quantum in multi-node architecture.
Thank's for help, and please let me know ...