Ask Your Question
0

Getting error while creating firewall " Unable to retrieve routers (Request Failed: internal server error while processing your request.)." . How to can i solve this issue ?

asked 2015-05-24 10:16:38 -0600

SOUMAYA gravatar image

I have implemented 4 node architecture using gre as tunnel network method with kilo release on ubuntu 14.04 . Here is the network topology diagram .

*Note : Using maria DB as Database . Note:ml2 as core plugin* Every thing is working fine including lbass .

Here is the Fwaas configuration ..

In controller node changes made on neutron.conf file for fwaas

service_plugins = route,lbaas,firewall

[service_providers]

service_provider = FIREWALL:Iptables:neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver:default

In network node i have configured following file .

1) changes made in neutron.conf

service_plugins = firewall [service_providers] ...

service_provider = FIREWALL:Iptables:neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver:default

2) enable the following parameter in fwaas_driver.ini [fwaas] driver = neutron.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver enabled = True


Restarted all related service on controller and compute node .

But when i am trying to create rule and policy it is working smoothly and successfully created but when trying to create fireawall using a policy getting error Error: Unable to retrieve routers (Request Failed: internal server error while processing your request.). on both cli and dashboard .

Error: Unable to associate with the router

Surprising fact for me ---- When i am creating firewall without selecting router it is giving me successful message but showing following error.

Error: Unable to retrieve firewall list.

in the database neutron--firewalls , i can see firewall has been created but inactive .

I have made the debug on neutron and getting following error .

2015-05-24 19:49:02.989 23704 INFO neutron.wsgi [-] (23704) accepted ('10.0.0.12', 55285) 2015-05-24 19:49:02.998 23704 ERROR neutron.api.v2.resource [req-1df5b871-da1b-4717-8c31-b2f23082d0c2 ] index failed 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource Traceback (most recent call last): 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/api/v2/resource.py", line 83, in resource 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource result = method(request=request, args) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/api/v2/base.py", line 319, in index 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource return self._items(request, True, parent_id) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/api/v2/base.py", line 249, in _items 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource obj_list = obj_getter(request.context, *kwargs) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron_fwaas/services/firewall/fwaas_plugin.py", line 381, in get_firewalls 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource fw_current_rtrs = self.get_firewall_routers(context, fw['id']) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/common/log.py", line 34, in wrapper 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource return method(args, *kwargs) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource ...

(more)
edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted
0

answered 2015-09-29 04:43:43 -0600

I met the same issue with kilo release.

edit flag offensive delete link more
0

answered 2015-09-29 06:41:03 -0600

capsali gravatar image

The problem is that when you synced neutron database the fwaas table isn't created. You need to manually upgrade the db for the firewall to work.

Issue this command neutron-db-manage --service fwaas --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head to upgrade the db!

After this firewall shoudl work without giving any errors!

edit flag offensive delete link more

Comments

Thank You Very Much!!! I solved this problem by following your step.

craja gravatar imagecraja ( 2016-05-19 02:36:31 -0600 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-05-24 10:16:38 -0600

Seen: 1,333 times

Last updated: Sep 29 '15