neutron

  1. Bug #1462154
  2. Comment #10

Comment 10 for bug 1462154

Revision history for this message
Stephen Ma (stephen-ma) wrote : Re: With DVR Pings to floating IPs replied with fixed-ips

@ZongKai Li

I also have tried with an Iptables rule change and deleting the FIP from the rfp device:

1. Changed the IP prerouting dnat rule to be:
  -A neutron-l3-agent-PREROUTING ! -i qr-+ -d <fip> -j DNAT --to-destination <fixed-ip>

2. Have the FIP added to the RFP device just as it does now. After the L3-agent did the arping to the FIP from the fip namespace, deleted the FIP from the rfp device. If the arping is not done, the status of the FIP is ERROR.

After this pings and ssh to VM2 using the FIP worked. However, I found that after an L3 agent restart, the FIP count is set back to 0. The reason is that L3-agent, after restarting, is counting the number of FIPs configured on the rfp device. Since there are no FIPs configured on the rfp device now, it thinks the FIP count is 0.