Ask Your Question

Neutron dvr and vrrp config [closed]

asked 2014-11-15 13:12:43 -0500

capsali gravatar image

Hi, I've been looking all over the internet for a tutorial for configuring dvr and vrrp. I didnt find any! Can someone help me with this? I have 2 controller/network nodes and 3 compute nodes.

As i understand i now need the l3 agent on the compute nodes too because they will be handling the floating ip's insttead of the network node!

From what i understood i must enable on network nodes: l3_ha=true in neutron.conf for l3 agent HA and keepalive with VIP; router_distributed = True into neutron.conf; agent_mode = dvr_snat in l3_agent.ini; l2_population = True, tunnel_types = vxlan, enable_distributed_routing = True and append l2population to mechanism_drivers in ml2.conf under [agent] section;

On compute nodes i must edit: router_distributed = True in neutron.conf; agent_mode = dvr in l3_agent.ini and the same config as the controller on ml2_config.ini.

Ofcourse i need access to the external network on the compute nodes. Does the ml2 config under the [agent] section brakes my tenant network type that is gre?

Is there anything that i'm missing? Because i cannot figure this out!

Thank you!

edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by capsali
close date 2015-09-24 10:41:10.032993

4 answers

Sort by ยป oldest newest most voted

answered 2015-09-12 10:03:25 -0500

dbaxps gravatar image

updated 2015-09-12 10:15:43 -0500

I believe that @Anil is correct, you are mixing up thing which don't work both at a time (in Juno Release)
Post bellow is providing details of explanation given you above
Current status of problem maybe seen :-

edit flag offensive delete link more

answered 2014-11-15 23:24:19 -0500

Anil gravatar image

looks like you are mixing 2 different ways to achieve HA for L3 As per my understanding either one should be used L3 agent with VRRP + keeplived or DVR with L3 on compute nodes.

edit flag offensive delete link more


But as i understood we need l3 agent on controller nodes for snat that serves all of the vm's. If neteork node fails no more snat. That is why ibthought i needed l3_ha on network nodes. I could have misinterpreted this though!

capsali gravatar imagecapsali ( 2014-11-16 05:54:14 -0500 )edit

In Juno a router cannot be HA and DVR at the same time.

darragh-oreilly gravatar imagedarragh-oreilly ( 2014-11-17 14:18:40 -0500 )edit

answered 2014-11-17 07:31:56 -0500

mikemowgli gravatar image

I'm also interested in such a tutorial. From what I've read so far, DVR and VRRP, which are 2 ways to achieve HA, and could be combined. This is the best I found: (

edit flag offensive delete link more

answered 2015-02-01 18:59:30 -0500

Here is the DVR configuration steps:

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-11-15 13:12:43 -0500

Seen: 939 times

Last updated: Sep 12 '15