1. Messages
  2. I think I've fixed SecGrps and SecGrpRules

Re: I think I've fixed SecGrps and SecGrpRules

Suryanarayanan, Aswin <aswin.suryanarayanan@...>
 

Thanks Anil for the suggestions.

 

Hi Ed,

 

The logs and pcap are attached in the below link. There are some logs security groups in neutron server log. But I was not able to confirm whether the request reached ODL correctly. I am trying to understand the same.  But no flows related to security groups where  inserted. Let me know if any further logs are required.

 

The log is for the use case  Create Network -> Create Subnet -> Spawn VM.

 

https://drive.google.com/folderview?id=0BzO1nVcl7PumfmczY1lsWjJXSGc0SHVkYlNaYTh6TjdkZk1HazRqdzdCWUpjcFI4UzVIUW8&usp=sharing

 

Thanks and Regards

Aswin

 

From: Anil Vishnoi [mailto:vishnoianil@...]
Sent: Wednesday, June 17, 2015 3:06 AM
To: Edward Warnicke
Cc: Suryanarayanan, Aswin; ovsdb-dev@...; groupbasedpolicy-dev@...; neutron-dev@...; Kenchappa, Ravindra
Subject: Re: [ovsdb-dev] I think I've fixed SecGrps and SecGrpRules

 

I would say just enable the debug log in odl mechanism driver and you will get all the rest call details that it's sending to odl controller. 

 

On Wed, Jun 17, 2015 at 1:00 AM, Edward Warnicke <hagbard@...> wrote:

Aswin,

 

If you could stick the pcap files somwhere like google drive or dropbox and share them that would also be mega useful :)

 

Ed

 

On Tue, Jun 16, 2015 at 12:29 PM, Suryanarayanan, Aswin <aswin.suryanarayanan@...> wrote:

Hi Ed,

 

We checked with break points in  NeutronSecurityRulesNorthbound and NeutronSecurityGroupsNorthbound in neutron ODL. We will analyze with wireshark and get back.

 

Aswin

 

From: Edward Warnicke [mailto:hagbard@...]
Sent: Tuesday, June 16, 2015 11:40 PM
To: Suryanarayanan, Aswin
Cc: ovsdb-dev@...; Kenchappa, Ravindra; neutron-dev@...; groupbasedpolicy-dev@...
Subject: Re: [ovsdb-dev] I think I've fixed SecGrps and SecGrpRules

 

Looping in other interested parties.

 

Ravi,

 

Lets start debugging at the top :)

 

1)  When you create a VM, what call are you expecting to see to ODL, and how are you verifying you don't see it (wireshark, etc)

 

The reason I ask, is because the issue could be in any of the following components:

 

1) Neutron

2) ML2

3) ODL ML2 Driver (in Stackforge)

4) ODL Neutron Northbound (in ODL)

5) The provider

 

Usually, the simplest way to start debugging for me is to answer the question:

 

On the wire, do I see the REST calls I expected.

 

Once we know the answer to that, we can drill further down :)

 

Ed

 

 

 

On Tue, Jun 16, 2015 at 11:44 AM, Suryanarayanan, Aswin <aswin.suryanarayanan@...> wrote:

Hi Ed,

 

Me and Ravi  tired with the devstack kilo with latest code from networking-odl(few changes in neutron as well) along with latest ODL. We observed that when we created a network from horizon we received a call to NeutronSecurityRulesNorthbound  createSecurityRules with empty list. But when we created a vm call didn’t seem to reach Neutron northbound in ODL and no flows where inserted Table 40 or Table 90.  Shouldn’t we have the default rules to be added?  Could you please clarify?  Also when we tried to create SG from horizon UI, none of the call hit the Neutron Security Groups in ODL. Do that require any further changes in networking-odl/neutron?

 

Aswin


_______________________________________________
ovsdb-dev mailing list
ovsdb-dev@...
https://lists.opendaylight.org/mailman/listinfo/ovsdb-dev

 

 


_______________________________________________
ovsdb-dev mailing list
ovsdb-dev@...
https://lists.opendaylight.org/mailman/listinfo/ovsdb-dev



 

--

Thanks

Anil
Join z.archive.ovsdb-dev@lists.opendaylight.org to automatically receive all group messages.