Tuesday, 2018-07-10

openstackgerritMichael Johnson proposed openstack/octavia master: Implement provider drivers - Driver Library  https://review.openstack.org/57135800:04
openstackgerritMichael Johnson proposed openstack/neutron-lbaas master: Neutron-LBaaS to Octavia migration tool  https://review.openstack.org/57894200:16
johnsomBoom, the previous run was successful so this patch is my "for review" version with the job as a periodic.00:16
*** longkb has joined #openstack-lbaas00:24
*** abaindur has quit IRC00:24
*** abaindur has joined #openstack-lbaas00:29
*** yamamoto has joined #openstack-lbaas00:34
*** yamamoto has quit IRC00:39
*** hongbin has joined #openstack-lbaas01:08
*** kiennt26 has joined #openstack-lbaas01:09
*** abaindur has quit IRC01:23
*** abaindur has joined #openstack-lbaas01:28
johnsomcgoncalves I'm pushing back on your -1 for my pkg-map patch01:34
*** abaindur has quit IRC01:34
johnsomhttps://github.com/openstack/diskimage-builder/tree/master/diskimage_builder/elements/pkg-map+01:35
johnsomOpps, https://github.com/openstack/diskimage-builder/tree/master/diskimage_builder/elements/pkg-map01:35
*** AlexStaf has quit IRC01:37
openstackgerritMichael Johnson proposed openstack/octavia master: Cleanup Octavia create VIP ports on LB delete  https://review.openstack.org/58116801:38
*** kevko has quit IRC02:09
*** JuCross has joined #openstack-lbaas02:14
*** crazik_ has joined #openstack-lbaas02:16
*** crazik_ has joined #openstack-lbaas02:16
*** Eugene__ has joined #openstack-lbaas02:16
*** sbalukoff_ has joined #openstack-lbaas02:19
*** JudeC has quit IRC02:19
*** Eugene_ has quit IRC02:19
*** ltomasbo has quit IRC02:19
*** ltomasbo` has joined #openstack-lbaas02:19
*** crazik has quit IRC02:19
*** kiennt26 has quit IRC02:19
*** sbalukoff has quit IRC02:19
*** ivve has quit IRC02:19
*** ltomasbo` has quit IRC02:19
*** ltomasbo` has joined #openstack-lbaas02:19
*** ivve has joined #openstack-lbaas02:28
*** ramishra has joined #openstack-lbaas02:33
*** yboaron has joined #openstack-lbaas02:41
*** yboaron_ has quit IRC02:43
*** sapd_ has joined #openstack-lbaas03:04
*** sapd__ has quit IRC03:04
*** hongbin has quit IRC03:39
*** yamamoto has joined #openstack-lbaas03:52
*** ianychoi_ has quit IRC03:54
openstackgerritZhaoBo proposed openstack/octavia master: UDP jinja template  https://review.openstack.org/52542003:58
openstackgerritZhaoBo proposed openstack/octavia master: WIP:UDP for [2]  https://review.openstack.org/52965103:58
openstackgerritZhaoBo proposed openstack/octavia master: UDP for [3][5][6]  https://review.openstack.org/53939103:58
*** ianychoi has joined #openstack-lbaas04:08
sapd_johnsom: I would like to contribute a  monitoring  feature for octavia :D04:08
johnsomsapd_: ok, what kind of monitoring? Like Monasca?04:11
*** hongbin has joined #openstack-lbaas04:12
sapd_johnsom: I would like collect more measurements in a loadbalancer.04:12
*** kiennt26 has joined #openstack-lbaas04:12
johnsomOk.  Think about other drivers and the db performance.04:13
johnsomCreating a spec or RFE story?04:14
*** abaindur has joined #openstack-lbaas04:14
*** hongbin has quit IRC04:20
*** jappleii__ has quit IRC04:25
*** threestrands has joined #openstack-lbaas04:25
*** yamamoto_ has joined #openstack-lbaas04:42
*** kiennt26 has quit IRC04:45
*** yamamoto has quit IRC04:45
*** yamamoto_ has quit IRC05:16
*** links has joined #openstack-lbaas05:22
*** yamamoto has joined #openstack-lbaas05:35
sapd_currently, I send measurements about loadbalancer (haproxy) to influxdb to store and use grafana to visualize a graph.05:46
openstackgerritZhaoBo proposed openstack/octavia master: WIP:UDP for [2]  https://review.openstack.org/52965105:49
openstackgerritZhaoBo proposed openstack/octavia master: UDP for [3][5][6]  https://review.openstack.org/53939105:49
*** kobis has joined #openstack-lbaas06:00
*** kobis has quit IRC06:03
*** ltomasbo` is now known as ltomasbo06:08
*** abaindur has quit IRC06:10
*** yboaron has quit IRC06:16
*** ispp has joined #openstack-lbaas06:29
*** threestrands has quit IRC06:30
*** crazik_ is now known as crazik06:34
crazikhello06:34
craziksapd_: could you describe more that influxdb solution?06:35
crazikbtw: is there any way to prevent LB creation on EXTERNAL network?06:36
crazikI don't want users to use my external IPs (3 per LB), when they can use FIP instead06:37
*** links has quit IRC06:38
*** kobis has joined #openstack-lbaas06:38
*** velizarx has joined #openstack-lbaas06:52
*** links has joined #openstack-lbaas06:53
*** kobis has quit IRC06:56
*** nmanos has joined #openstack-lbaas07:03
*** nmanos has quit IRC07:04
*** nmanos has joined #openstack-lbaas07:04
*** nmanos has left #openstack-lbaas07:04
*** velizarx has quit IRC07:08
*** tesseract has joined #openstack-lbaas07:13
*** yboaron has joined #openstack-lbaas07:17
*** yboaron has quit IRC07:18
*** yboaron has joined #openstack-lbaas07:18
*** peereb has joined #openstack-lbaas07:19
*** rraja has joined #openstack-lbaas07:27
*** velizarx has joined #openstack-lbaas07:29
bzhao__crazik:  Your provider network maybe dhcp_enabled, users can create instances successful.. So users feel create on ext net seems the same as create on private net.. If the external net just used for NAT, why not disable the dhcp? Just my opinion.07:31
crazikbzhao__: not exactly. Users can use FIPs, can create instances in EXTERNAL directly07:33
crazikbut I don't want to allow only LB in that net07:33
crazikbecause of used IPs07:34
crazikfor vrrp07:34
*** ispp has quit IRC07:43
*** links has quit IRC07:44
openstackgerritZhaoBo proposed openstack/octavia master: WIP:UDP for [2]  https://review.openstack.org/52965107:45
openstackgerritZhaoBo proposed openstack/octavia master: UDP for [3][5][6]  https://review.openstack.org/53939107:45
*** rcernin has quit IRC07:47
johnsomcrazik: currently there is no way yo limit the network the user can select:07:49
*** crazik has quit IRC07:53
bzhao__crazik:  Hmm,  I check neutron code, it seems that the target user also can see the subnet_id now which owned by ext net and shared by admin. So policy engine on neutron side, may be also not helpful.07:54
*** KeithMnemonic has quit IRC07:55
*** links has joined #openstack-lbaas07:57
*** KeithMnemonic has joined #openstack-lbaas07:57
*** ktibi has joined #openstack-lbaas07:58
sapd_crazik Install agent in amphora.08:01
*** nmanos has joined #openstack-lbaas08:14
*** nmanos has left #openstack-lbaas08:14
*** kobis has joined #openstack-lbaas08:30
*** nmanos has joined #openstack-lbaas08:32
*** nmanos has left #openstack-lbaas08:33
*** kevko has joined #openstack-lbaas08:38
openstackgerritTuan Do Anh proposed openstack/neutron-lbaas master: Add release notes link in README  https://review.openstack.org/58126908:55
openstackgerritTuan Do Anh proposed openstack/octavia master: Add release notes link in README  https://review.openstack.org/58129409:43
*** rcernin has joined #openstack-lbaas09:44
*** rcernin has quit IRC09:47
*** sapd_ has quit IRC10:11
*** sapd has joined #openstack-lbaas10:11
*** yamamoto has quit IRC10:15
*** yamamoto has joined #openstack-lbaas10:19
*** kobis has quit IRC10:22
*** yamamoto has quit IRC10:45
*** kobis has joined #openstack-lbaas11:02
*** kobis has quit IRC11:09
*** kobis has joined #openstack-lbaas11:16
*** crazik has joined #openstack-lbaas11:19
*** crazik has joined #openstack-lbaas11:19
crazikblah.11:19
*** yamamoto has joined #openstack-lbaas11:33
*** atoth has joined #openstack-lbaas11:34
*** longkb has quit IRC11:38
*** ispp has joined #openstack-lbaas11:48
isppFeedback is welcome here octavia-helm https://review.openstack.org/#/c/578051/11:52
*** velizarx has quit IRC12:20
*** yamamoto has quit IRC12:26
*** yamamoto has joined #openstack-lbaas12:26
*** velizarx has joined #openstack-lbaas12:32
openstackgerritMerged openstack/octavia master: [doc] Add the missing markup for the hyperlink title  https://review.openstack.org/58104612:38
*** amuller has joined #openstack-lbaas13:08
*** ispp has quit IRC13:11
*** ispp has joined #openstack-lbaas13:23
*** fnaval has joined #openstack-lbaas13:26
*** yboaron_ has joined #openstack-lbaas13:34
*** yboaron has quit IRC13:36
openstackgerritCarlos Goncalves proposed openstack/octavia master: Aallow setting load balancer topology in Devstack  https://review.openstack.org/58136613:49
jitekajohnsom: yes it says "BOOTING" since a while now but the VM already spawned and is active14:01
jitekahttps://pastebin.com/942qHx6V14:01
jitekaWas curious if there is anyway to rekick the process or if it's impossible to recover from an LB that failed to finish his provisionning14:01
openstackgerritCarlos Goncalves proposed openstack/octavia master: Allow setting load balancer topology in Devstack  https://review.openstack.org/58136614:06
openstackgerritMerged openstack/octavia master: Follow the new PTI for document build  https://review.openstack.org/58098314:08
*** ispp has quit IRC14:11
*** ispp has joined #openstack-lbaas14:17
*** velizarx has quit IRC14:30
*** yboaron_ has quit IRC14:36
*** yboaron_ has joined #openstack-lbaas14:38
*** peereb has quit IRC14:45
*** ispp has quit IRC14:45
*** ispp has joined #openstack-lbaas14:54
xgerman_jiteka: no, we don’t have a way to kick… any pending_ state will block operations on the LB14:55
xgerman_since it means some other process is handling it and we don’t want data corruption14:55
*** yboaron_ has quit IRC14:56
*** yboaron has joined #openstack-lbaas14:57
*** kobis has quit IRC15:01
*** yboaron has quit IRC15:08
johnsomjiteka It should finish and go to ERROR which will allow you to fix the load balancer.15:18
*** links has quit IRC15:26
*** yamamoto has quit IRC15:29
*** yamamoto has joined #openstack-lbaas15:31
*** yamamoto has quit IRC15:34
sapdjohnsom: have you tried to create more l7 policies yet?15:54
*** rraja has quit IRC15:57
johnsomsapd No, sorry, I have not had time. Did you create the story with your configuration?15:59
*** ktibi has quit IRC16:01
jitekajohnsom: it's stuck since few days so I guess it won't move anymore, it's in devstack so I'm not too worried about it. I was just curious to know if any Ops command could handle that kind of scenario16:03
jitekaThanks for the answer xgerman_16:03
johnsomjiteka Did you kill -9 the controller? That would be the only way it would get stuck like that and not ERROR our16:04
johnsomout16:04
*** kobis has joined #openstack-lbaas16:08
*** ispp has quit IRC16:13
*** yamamoto has joined #openstack-lbaas16:34
*** yamamoto has quit IRC16:40
*** ramishra has quit IRC16:49
sapdjohnsom: I created a story.16:50
sapdafter database slow, It makes health manager can't process heart beat :'(16:52
sapd2018-07-10 23:52:05.774 80 WARNING octavia.controller.healthmanager.health_drivers.update_db [-] Amphora 2c0c83b2-9d89-4a86-b696-2fede4c294d3 health message was processed too slowly: 19.7807719707s! The system may be overloaded or otherwise malfunctioning. This heartbeat has been ignored and no update was made to the amphora health entry. THIS IS NOT GOOD.16:52
johnsomsapd Yeah, that means you database is failing!16:53
johnsomThat can cause failovers that are not necessary16:53
sapdhow failed?16:53
sapdyep. Loadbalancer is being failover.16:54
johnsomWell, it should take 0.004 seconds to process that heartbeat, but your database is taking 19.7807719707s16:54
johnsomSo the heartbeats aren't getting processed until after the 10 second heartbest interval.16:56
johnsomsapd What version of Octavia are you using?16:56
sapdI'm running octavia from master branch16:56
johnsomYeah, ok, so your database is very sick16:56
sapdI have added a column to load_balancer table.16:57
johnsomYou will see the HM process CPU load go up too as it tries to deal with the slow DB16:57
*** atoth has quit IRC16:57
sapdyep.16:58
sapdI saw16:58
johnsomMemory will grow too as it gets a backlog of heartbeats to process16:58
johnsomsapd You are not using neutron-lbaas right?16:59
sapdyep. I'm17:00
johnsomsapd If you are not using neutron-lbaas, make sure [health_manager] event_streamer_driver = noop_event_streamer and sync_provisioning_status = False are set in your octavia.conf. Those are the defaults, but someone may have set them17:00
*** atoth has joined #openstack-lbaas17:00
johnsomIf those are enabled, we have seen mis-configured rabbit queues also cause this17:00
xgerman_+117:01
sapdjohnsom: I have not set these config.17:01
*** KeithMnemonic1 has joined #openstack-lbaas17:02
sapd[health_manager]17:02
sapdbind_ip = 0.0.0.017:02
sapdbind_port = 555517:02
sapdheartbeat_key = insecure17:02
sapdcontroller_ip_port_list = 10.1.0.9:555517:02
*** KeithMnemonic has quit IRC17:03
*** kobis has quit IRC17:05
*** tesseract has quit IRC17:07
*** KeithMnemonic has joined #openstack-lbaas17:13
openstackgerritMerged openstack/octavia master: Ignore a port not found when deleting an LB  https://review.openstack.org/56484817:14
*** KeithMnemonic1 has quit IRC17:15
jitekajohnsom: restart controller worker and rebooting the VM got the amphora object removed from the list but the associated lb was still PENDING_CREATE. After manually forcing the provisionning_status to ERROR in the octavia DB the amphora VM got deleted (I guess the housekeeper process took care of it)17:28
*** nmanos has joined #openstack-lbaas17:34
*** yamamoto has joined #openstack-lbaas17:37
*** atoth_ has joined #openstack-lbaas17:41
*** yamamoto has quit IRC17:41
*** atoth has quit IRC17:44
*** atoth_ has quit IRC17:45
*** atoth has joined #openstack-lbaas17:46
*** atoth has quit IRC17:48
*** nmanos has quit IRC18:02
*** yamamoto has joined #openstack-lbaas18:39
*** yamamoto has quit IRC18:44
*** amuller has quit IRC19:06
*** atoth has joined #openstack-lbaas19:06
*** irenab has quit IRC19:18
*** irenab has joined #openstack-lbaas19:18
*** irenab has quit IRC19:28
*** irenab has joined #openstack-lbaas19:29
*** yamamoto has joined #openstack-lbaas19:32
*** yamamoto has quit IRC19:37
*** yboaron has joined #openstack-lbaas20:00
*** atoth has quit IRC20:27
*** atoth has joined #openstack-lbaas20:27
*** yamamoto has joined #openstack-lbaas20:33
*** yamamoto has quit IRC20:39
openstackgerritGerman Eichberger proposed openstack/octavia master: [WIP] Switch amphora agent to use privsep  https://review.openstack.org/54929520:44
*** kobis has joined #openstack-lbaas20:59
*** kobis has quit IRC21:03
*** irenab has quit IRC21:05
*** irenab has joined #openstack-lbaas21:05
*** fnaval has quit IRC21:24
*** blah123 has joined #openstack-lbaas21:28
*** fnaval has joined #openstack-lbaas21:39
*** fnaval has quit IRC22:01
*** yboaron has quit IRC22:13
*** blah123 has quit IRC22:17
*** rcernin has joined #openstack-lbaas22:22
*** KeithMnemonic1 has joined #openstack-lbaas22:32
openstackgerritGerman Eichberger proposed openstack/octavia master: [WIP] Switch amphora agent to use privsep  https://review.openstack.org/54929522:32
xgerman_really need to improve my test setup so I can build amps with a local git tree22:33
*** KeithMnemonic has quit IRC22:34
*** yamamoto has joined #openstack-lbaas22:36
*** fnaval has joined #openstack-lbaas22:37
*** fnaval has quit IRC22:37
*** yamamoto has quit IRC22:42
openstackgerritCarlos Goncalves proposed openstack/octavia master: Bring up lo when plugging interfaces  https://review.openstack.org/55086122:48
johnsomcgoncalves It's a security feature, not a bug.  lol22:56
cgoncalvesjohnsom, the loopback interface?22:58
johnsomyeah22:58
johnsomCompletely joking...22:58
cgoncalvesah :)23:00
cgoncalvesfrom time to time I hit this: http://paste.openstack.org/show/725489/23:03
cgoncalvesI cleaned up ~/.cache/{dib,image-create} first23:03
cgoncalvesI had built a CentOS image on a previous stack. I wonder if toggling distro somehow affects23:04
johnsomThat would be odd and a bummer23:05
johnsomI have not hit this23:05
cgoncalvesI'll re-stack from scratch overnight23:10
cgoncalvesjohnsom, can you confirm that on a clean arp table and active-standby LB topo, the first packets may indeed be served via the standby amp?23:11
openstackgerritGerman Eichberger proposed openstack/octavia master: Add a config to surpress amphora logging  https://review.openstack.org/56674123:11
cgoncalvesuntil the next garp (every 5 seconds by default)23:12
johnsomcgoncalves Yes, I think that is possible23:12
johnsomcgoncalves It has to do with the fact that one startup, both amps have the VIP ip....  It should be fixed, but it was low on the old priority list.23:13
cgoncalvesok, thanks. I wanted to make sure I was seeing things right23:13
cgoncalvesjohnsom, is there a point in time when only one amp has the VIP ip set? because I don't see that happening23:14
cgoncalveson the active I see <vip>/32 and <vip>/24, while on the standby only /2423:15
johnsomYes, if you fail it over, then back, the standby will drop the VIP IP like it should be23:15
johnsomBy failover I mean forcing keepalived's hand, not API failover23:16
cgoncalvesah, still need to play with that23:16
cgoncalvesright23:16
johnsomThere are two IPs, the base IP for the interface, this is unique per amp, and then the VIP which "moves"23:17
johnsomYou can do the VRRP failover game by stoping your HM, then going into the one you want down and stopping the amphora agent. This will trigger a VRRP switch.23:18
cgoncalvesjohnsom, how stopping the agent triggers a vrrp switch?23:20
cgoncalvesI could see that happening when deactivating eth1 I guess, but the agent?!23:21
johnsomOh, yeah, right, it's haproxy not the agent. Agent doesn't matter for VRRP failover23:26
xgerman_stopping the agent will get that amp discarded and is causing a vrrp switch that way23:28
johnsomRight, the brute force way....  Though I advised him to stop o-hm, so....23:28
xgerman_yep…23:29
cgoncalves;)23:29
cgoncalvescool, thanks! going to failover to standby (aka bed) now23:30
johnsomo/23:30
xgerman_o/23:30
*** yamamoto has joined #openstack-lbaas23:38
*** yamamoto has quit IRC23:44

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!