[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-7493?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Chandan Purushothama updated CLOUDSTACK-7493:
---------------------------------------------
    Attachment: client_managementLogs.zip

Jayapal,

It is the basic use case of egress rule that failed: The log snippet shown 
below is taken from client logs. Notice the parameters passed and the jobstatus.

{code}
2014-09-09 05:33:10,240 - DEBUG - ========Sending GET Cmd : 
createEgressFirewallRule=======
2014-09-09 05:33:10,286 - DEBUG - === Jobid: 
856ae190-e3a6-4eb4-b682-234aeddc3484 Started ===
2014-09-09 05:33:10,286 - DEBUG - Payload: {'signature': 
'lsdLVNfCIelufUHs6LixL3riffw=', 'apiKey': 
u'nzr3aEbj9wPt-8pe8xsx510O7g_xfhA3xmozRaWajWqYmipFRoCqryYq8akuHmQ8Q-D7Px7ohg-MgRuBjzESbA',
 'command': 'queryAsyncJobResult', 'response': 'json', 'jobid': 
u'856ae190-e3a6-4eb4-b682-234aeddc3484'}
2014-09-09 05:33:10,286 - DEBUG - ========Sending GET Cmd : 
queryAsyncJobResult=======
2014-09-09 05:33:10,315 - DEBUG - Response : {jobprocstatus : 0, created : 
u'2014-09-09T05:33:10+0000', cmd : 
u'org.apache.cloudstack.api.command.user.firewall.CreateEgressFirewallRuleCmd', 
userid : u'c00195ee-37d3-11e4-a979-ba3c937e668f', jobstatus : 0, jobid : 
u'856ae190-e3a6-4eb4-b682-234aeddc3484', jobresultcode : 0, jobinstanceid : 
u'cfdbb542-bd36-41c2-9b8f-9e74f1b94bc7', jobinstancetype : u'FirewallRule', 
accountid : u'c00185cc-37d3-11e4-a979-ba3c937e668f'}
2014-09-09 05:33:15,320 - DEBUG - === 
JobId:856ae190-e3a6-4eb4-b682-234aeddc3484 is Still Processing, Will TimeOut 
in:3595 ====
2014-09-09 05:33:15,321 - DEBUG - Payload: {'signature': 
'lsdLVNfCIelufUHs6LixL3riffw=', 'apiKey': 
u'nzr3aEbj9wPt-8pe8xsx510O7g_xfhA3xmozRaWajWqYmipFRoCqryYq8akuHmQ8Q-D7Px7ohg-MgRuBjzESbA',
 'command': 'queryAsyncJobResult', 'response': 'json', 'jobid': 
u'856ae190-e3a6-4eb4-b682-234aeddc3484'}
2014-09-09 05:33:15,321 - DEBUG - ========Sending GET Cmd : 
queryAsyncJobResult=======
2014-09-09 05:33:15,341 - DEBUG - Response : {jobprocstatus : 0, created : 
u'2014-09-09T05:33:10+0000', jobresult : {networkid : 
u'e46b21a7-e4a3-4a10-ae1b-bce7a9d1d90e', protocol : u'all', fordisplay : True, 
cidrlist : u'0.0.0.0/0', tags : [], state : u'Active', id : 
u'cfdbb542-bd36-41c2-9b8f-9e74f1b94bc7'}, cmd : 
u'org.apache.cloudstack.api.command.user.firewall.CreateEgressFirewallRuleCmd', 
userid : u'c00195ee-37d3-11e4-a979-ba3c937e668f', jobstatus : 1, jobid : 
u'856ae190-e3a6-4eb4-b682-234aeddc3484', jobresultcode : 0, jobinstanceid : 
u'cfdbb542-bd36-41c2-9b8f-9e74f1b94bc7', jobresulttype : u'object', 
jobinstancetype : u'FirewallRule', accountid : 
u'c00185cc-37d3-11e4-a979-ba3c937e668f'}
2014-09-09 05:33:15,342 - DEBUG - ===Jobid:856ae190-e3a6-4eb4-b682-234aeddc3484 
; StartTime:Tue Sep  9 05:33:10 2014 ; EndTime:Tue Sep  9 05:33:15 2014 ; 
TotalTime:-5===
2014-09-09 05:33:15,342 - DEBUG - Response : {jobprocstatus : 0, created : 
u'2014-09-09T05:33:10+0000', jobresult : {networkid : 
u'e46b21a7-e4a3-4a10-ae1b-bce7a9d1d90e', protocol : u'all', fordisplay : True, 
cidrlist : u'0.0.0.0/0', tags : [], state : u'Active', id : 
u'cfdbb542-bd36-41c2-9b8f-9e74f1b94bc7'}, cmd : 
u'org.apache.cloudstack.api.command.user.firewall.CreateEgressFirewallRuleCmd', 
userid : u'c00195ee-37d3-11e4-a979-ba3c937e668f', jobstatus : 1, jobid : 
u'856ae190-e3a6-4eb4-b682-234aeddc3484', jobresultcode : 0, jobinstanceid : 
u'cfdbb542-bd36-41c2-9b8f-9e74f1b94bc7', jobresulttype : u'object', 
jobinstancetype : u'FirewallRule', accountid : 
u'c00185cc-37d3-11e4-a979-ba3c937e668f'}
{code}

I attached the management server log and test client execution logs to the bug 
report,

Thank you,
Chandan.

> [Automation] Egress Firewall Rule fails to create on the Virtual Router in 
> Hyper-V Setup - Reports Success instead of failure report
> ------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-7493
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7493
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>          Components: Automation, Test
>    Affects Versions: 4.5.0
>            Reporter: Chandan Purushothama
>            Assignee: Rajesh Battala
>            Priority: Blocker
>             Fix For: 4.5.0
>
>         Attachments: client_managementLogs.zip
>
>
> ==========================
> Error in management Server log:
> ==========================
> {code}
> 2014-09-03 18:04:36,689 DEBUG [c.c.a.ApiServlet] 
> (catalina-exec-22:ctx-a84568da ctx-c6c0fc58 ctx-985e7722) ===END===  
> 10.220.135.217 -- GET  
> jobid=561bbb6c-7931-493d-a778-525086befb96&apiKey=hCPmYiAF1lm_sBLrhXIEWXCJt0vYbxzkeFfv7E1ZhyPPL_TF6BvI8cVOm2AqLlzWwa2w9dO0eFQu6SafM_st3g&command=queryAsyncJobResult&response=json&signature=fWkgkcIGrOu7YQc%2Fw5GD%2B3HHGkM%3D
> 2014-09-03 18:04:36,701 DEBUG [c.c.a.t.Request] 
> (API-Job-Executor-33:ctx-4c5fd3c9 job-316 ctx-8bc88918) Seq 
> 1-4477422454536405316: Sending  { Cmd , MgmtId: 174253150778429, via: 
> 1(10.220.163.36), Ver: v1, Flags: 100001, 
> [{"com.cloud.agent.api.routing.SetFirewallRulesCommand":{"rules":[{"id":36,"srcIp":"","protocol":"all","revoked":false,"alreadyAdded":false,"sourceCidrList":["0.0.0.0/0"],"purpose":"Firewall","trafficType":"Egress","defaultEgressPolicy":false}],"accessDetails":{"router.guest.ip":"192.168.200.1","firewall.egress.default":"false","zone.network.type":"Advanced","router.ip":"10.220.165.184","router.name":"r-45-VM"},"wait":0}}]
>  }
> 2014-09-03 18:04:36,701 DEBUG [c.c.a.t.Request] 
> (API-Job-Executor-33:ctx-4c5fd3c9 job-316 ctx-8bc88918) Seq 
> 1-4477422454536405316: Executing:  { Cmd , MgmtId: 174253150778429, via: 
> 1(10.220.163.36), Ver: v1, Flags: 100001, 
> [{"com.cloud.agent.api.routing.SetFirewallRulesCommand":{"rules":[{"id":36,"srcIp":"","protocol":"all","revoked":false,"alreadyAdded":false,"sourceCidrList":["0.0.0.0/0"],"purpose":"Firewall","trafficType":"Egress","defaultEgressPolicy":false}],"accessDetails":{"router.guest.ip":"192.168.200.1","firewall.egress.default":"false","zone.network.type":"Advanced","router.ip":"10.220.165.184","router.name":"r-45-VM"},"wait":0}}]
>  }
> 2014-09-03 18:04:36,702 DEBUG [c.c.a.m.DirectAgentAttache] 
> (DirectAgent-316:ctx-c363d57a) Seq 1-4477422454536405316: Executing request
> 2014-09-03 18:04:36,702 DEBUG [c.c.h.h.r.HypervDirectConnectResource] 
> (DirectAgent-316:ctx-c363d57a) Use router's private IP for SSH control. IP : 
> 10.220.165.184
> 2014-09-03 18:04:36,702 DEBUG [c.c.h.h.r.HypervDirectConnectResource] 
> (DirectAgent-316:ctx-c363d57a) Run command on VR: 10.220.165.184, script: 
> firewall_egress.sh with args:  -F -E -P 0 -a :all:0:0:0.0.0.0/0:,
> 2014-09-03 18:04:37,394 DEBUG [c.c.a.m.AgentManagerImpl] 
> (AgentManager-Handler-14:null) SeqA 3-604: Processing Seq 3-604:  { Cmd , 
> MgmtId: -1, via: 3, Ver: v1, Flags: 11, 
> [{"com.cloud.agent.api.ConsoleProxyLoadReportCommand":{"_proxyVmId":2,"_loadInfo":"{\n
>   \"connections\": []\n}","wait":0}}] }
> 2014-09-03 18:04:37,397 DEBUG [c.c.a.m.AgentManagerImpl] 
> (AgentManager-Handler-14:null) SeqA 3-604: Sending Seq 3-604:  { Ans: , 
> MgmtId: 174253150778429, via: 3, Ver: v1, Flags: 100010, 
> [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
> 2014-09-03 18:04:37,826 DEBUG [c.c.s.StorageManagerImpl] 
> (StorageManager-Scavenger-3:ctx-e8a5b20a) Storage pool garbage collector 
> found 0 templates to clean up in storage pool: 
> XenRT-Zone-0-Pod-0-Cluster-0-Primary-Store-0
> 2014-09-03 18:04:37,829 DEBUG [c.c.s.StorageManagerImpl] 
> (StorageManager-Scavenger-3:ctx-e8a5b20a) Secondary storage garbage collector 
> found 0 templates to cleanup on template_store_ref for store: 
> cifs://10.220.163.36/storage/secondary
> 2014-09-03 18:04:37,831 DEBUG [c.c.s.StorageManagerImpl] 
> (StorageManager-Scavenger-3:ctx-e8a5b20a) Secondary storage garbage collector 
> found 0 snapshots to cleanup on snapshot_store_ref for store: 
> cifs://10.220.163.36/storage/secondary
> 2014-09-03 18:04:37,832 DEBUG [c.c.s.StorageManagerImpl] 
> (StorageManager-Scavenger-3:ctx-e8a5b20a) Secondary storage garbage collector 
> found 0 volumes to cleanup on volume_store_ref for store: 
> cifs://10.220.163.36/storage/secondary
> 2014-09-03 18:04:37,940 DEBUG [c.c.h.h.r.HypervDirectConnectResource] 
> (DirectAgent-316:ctx-c363d57a) firewall_egress.sh execution result: true
> 2014-09-03 18:04:37,940 DEBUG [c.c.a.m.DirectAgentAttache] 
> (DirectAgent-316:ctx-c363d57a) Seq 1-4477422454536405316: Response Received: 
> 2014-09-03 18:04:37,940 DEBUG [c.c.a.t.Request] 
> (DirectAgent-316:ctx-c363d57a) Seq 1-4477422454536405316: Processing:  { Ans: 
> , MgmtId: 174253150778429, via: 1, Ver: v1, Flags: 0, 
> [{"com.cloud.agent.api.Answer":{"result":true,"details":"iptables v1.4.14: 
> Couldn't load target `_FW_EGRESS_RULES':No such file or directory\n\nTry 
> `iptables -h' or 'iptables --help' for more information.\niptables: No 
> chain/target/match by that name.\niptables: No chain/target/match by that 
> name.\niptables: No chain/target/match by that name.\niptables v1.4.14: 
> Couldn't load target `_FW_EGRESS_RULES':No such file or directory\n\nTry 
> `iptables -h' or 'iptables --help' for more information.\niptables: No 
> chain/target/match by that name.\niptables: No chain/target/match by that 
> name.\n","wait":0}}] }
> 2014-09-03 18:04:37,941 DEBUG [c.c.a.t.Request] 
> (API-Job-Executor-33:ctx-4c5fd3c9 job-316 ctx-8bc88918) Seq 
> 1-4477422454536405316: Received:  { Ans: , MgmtId: 174253150778429, via: 1, 
> Ver: v1, Flags: 0, { Answer } }
> 2014-09-03 18:04:37,964 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] 
> (API-Job-Executor-33:ctx-4c5fd3c9 job-316 ctx-8bc88918) Complete async 
> job-316, jobStatus: SUCCEEDED, resultCode: 0, result: 
> org.apache.cloudstack.api.response.FirewallResponse/firewallrule/{"id":"ec795578-c833-4be6-a0d7-e33235d87920","protocol":"all","networkid":"49c9ee87-5ad0-4c4b-9111-621963f2e69e","state":"Active","cidrlist":"0.0.0.0/0","tags":[],"fordisplay":true}
> 2014-09-03 18:04:37,969 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] 
> (API-Job-Executor-33:ctx-4c5fd3c9 job-316) Done executing 
> org.apache.cloudstack.api.command.user.firewall.CreateEgressFirewallRuleCmd 
> for job-316
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to