zara-zaimeche 的档案 - activity

We found it. Turned out it was an issue with the neutron policy.json; the system was missing this commit:

"Postpone heavy policy check for ports to later"

de167d355d5ba314ab5732b4812251b86df00151

https://github.com/openstack/neutron/commit/de167d355d5ba314ab5732b4812251b86df00151#diff-335462891f7178710c6ca7185f9f877 (https://github.com/openstack/neutron/...)

As a result, it was doing the more costly checks before the quicker ones. We applied the change and things sped up again.

Hi! I'm looking at a Newton deployment where commands like nova list (or openstack server list) and nova show are slow-- but only for users without the 'admin' role. If they have only the member role, the calls are slow. The timings for token generation seem fine; the slow part is GET servers/detail. It seems like the speed of the api calls depends on which projects the user is in. The policy settings seem to be the default (ie: there's no custom policy.json). Has anyone seen something similar before, or does anyone know where to start looking for clues?

EDIT:

The slow calls are the calls via the neutronclient, to ports.json . For the member user, these take approx 10s apiece. For the admin user, these take approx 200 ms apiece.

EDIT 2:

Turns out openstack port list is also slow on its own. So slowness is likely in neutron, not nova itself. And again, only slow for non-admin users.