l3-agent should nat metadata requests even if no gateway exists

Bug #1051842 reported by dan wendlandt
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
High
dan wendlandt

Bug Description

Currently, the l3-agent only pushes down some of the DNAT rules for metadata mapping if there is a gateway set on a router.

The original thinking for this was that the nova API server would only be reachable via the external network. However, the nova-api server could itself be running in the local router namespace (or on the same box as the quantum-l3-agent in the case were namespaces are disabled. In face, with namespaces disabled, this is the likely setup for a simple environment).

Thus, we should simply always push down the metadata nat rules for a router, router than waiting until a gateway is added.

dan wendlandt (danwent)
tags: added: folsom-rc-potential
Changed in quantum:
status: New → In Progress
importance: Undecided → High
assignee: nobody → dan wendlandt (danwent)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to quantum (master)

Fix proposed to branch: master
Review: https://review.openstack.org/13096

tags: removed: folsom-rc-potential
Changed in quantum:
milestone: none → folsom-rc2
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to quantum (master)

Reviewed: https://review.openstack.org/13096
Committed: http://github.com/openstack/quantum/commit/f6e9158d6ff5afeae2712cf4d8c2e0de4dc500b0
Submitter: Jenkins
Branch: master

commit f6e9158d6ff5afeae2712cf4d8c2e0de4dc500b0
Author: Dan Wendlandt <email address hidden>
Date: Mon Sep 17 09:29:35 2012 -0700

    always push down metadata rules for router, not just if gateway exists

    bug 1051842

    the l3-agent only pushes down some of the DNAT rules for metadata mapping
    if there is a gateway set on a router. However, the nova-api server could
    itself be running in the local router namespace (or on the same box as
    the quantum-l3-agent in the case were namespaces are disabled. In fact,
    with namespaces disabled, this is the likely setup for a simple
    environment). Thus, we should simply always push down the metadata nat
    rules for a router, router than waiting until a gateway is added.

    This patch also refactors the actions taken by the l3-agent when a router
    is added or removed into a separate function for improved readability,
    as add/removing the nat rules made these code segments even longer.

    Change-Id: I3c6eb35b51df3babf747dbcff7f943b850e69838

Changed in quantum:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to quantum (milestone-proposed)

Fix proposed to branch: milestone-proposed
Review: https://review.openstack.org/13258

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to quantum (milestone-proposed)

Reviewed: https://review.openstack.org/13258
Committed: http://github.com/openstack/quantum/commit/36d702a69754e29042bc9eb914e8daedfd349179
Submitter: Jenkins
Branch: milestone-proposed

commit 36d702a69754e29042bc9eb914e8daedfd349179
Author: Dan Wendlandt <email address hidden>
Date: Mon Sep 17 09:29:35 2012 -0700

    always push down metadata rules for router, not just if gateway exists

    bug 1051842

    the l3-agent only pushes down some of the DNAT rules for metadata mapping
    if there is a gateway set on a router. However, the nova-api server could
    itself be running in the local router namespace (or on the same box as
    the quantum-l3-agent in the case were namespaces are disabled. In fact,
    with namespaces disabled, this is the likely setup for a simple
    environment). Thus, we should simply always push down the metadata nat
    rules for a router, router than waiting until a gateway is added.

    This patch also refactors the actions taken by the l3-agent when a router
    is added or removed into a separate function for improved readability,
    as add/removing the nat rules made these code segments even longer.

    Change-Id: I3c6eb35b51df3babf747dbcff7f943b850e69838

Changed in quantum:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in quantum:
milestone: folsom-rc2 → 2012.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.