Re: [Openstack-operators] Three Node Deployment Model

[Hossein Zabolzadeh]

I read all of the proposed documents. One of my question is not
answered. Is there any operational issue when install neutron(network
service) on the compute node? Due to my physical node limitation my
initial deploymet plan is as follows:

Node#1: Controller
Node#2: Compute + Controller (Controller Fail-over)
Node#3: Compute

I want to install neutron service on my node#3.

Is there any operational issue when install neutron(network service)
on the compute node(Node#3)?

Thanks in advance.


On 10/26/14, Hossein Zabolzadeh  wrote:
> Really thanks for your opinion.
>
> On 10/26/14, Juan José Pavlik Salles  wrote:
>> Hi Hossein, I wouldn't use a VM from the cloud as a controller failover,
>> it
>> would complicate things unnecessarily. What I would do is: use one of the
>> compute nodes a controller failover.  You can install the APIs easily on
>> the compute node and the rest of the software too.
>>
>> 2014-10-26 10:38 GMT-03:00 Hossein Zabolzadeh :
>>
>>> With three node deployment in mind(one controller and 2 compute
>>> nodes), in order to acheive minimum HA with threse three physical
>>> nodes, is it possible to setup second controller as a virtual machine
>>> on one of my compute node?
>>> Does this approach improve HA in my deployment(atleast until my other
>>> physical nodes become available)?
>>> Thanks in advance.
>>>
>>> On 10/25/14, Hossein Zabolzadeh  wrote:
>>> > Thanks for your useful answers.
>>> > Very helpful resource and guides.
>>> >
>>> > On 10/23/14, Adam Lawson  wrote:
>>> >> Your dilemna looks like this as I see it:
>>> >>
>>> >> Highly-Available, Highly-Scalable, Limited Hardware. Pick any 2.
>>> >>
>>> >> In an ideal world we'd all like the benefits of everything with
>>> >> limited
>>> >> resources. True HA requires some meaningful separation (logical
>>> >> fencing
>>> >> if
>>> >> you will). You can't do that with only 3 nodes so you need to make
>>> >> some
>>> >> concessions. Starting with motivation that begins your efforts within
>>> >> Openstack Docs per Anne. ; )
>>> >>
>>> >> Mahalo,
>>> >> Adam
>>> >>
>>> >>
>>> >> *Adam Lawson*
>>> >>
>>> >> AQORN, Inc.
>>> >> 427 North Tatnall Street
>>> >> Ste. 58461
>>> >> Wilmington, Delaware 19801-2230
>>> >> Toll-free: (844) 4-AQORN-NOW ext. 101
>>> >> International: +1 302-387-4660
>>> >> Direct: +1 916-246-2072
>>> >>
>>> >>
>>> >> On Thu, Oct 23, 2014 at 10:58 AM, Anne Gentle 
>>> wrote:
>>> >>
>>> >>>
>>> >>>
>>> >>> On Tue, Oct 21, 2014 at 2:43 PM, Hossein Zabolzadeh
>>> >>> 
>>> >>> wrote:
>>> >>>
>>>  Hi there,
>>>  I have an openstack deployment question. I have three physical
>>>  server(Configurations are listed in the following). What is the
>>>  best
>>>  optimized production-ready deployment model to achieve the
>>>  following
>>>  goals in mind(Users will not exceeds more than 10)?
>>>  - Ability to add more services(compute, controller, storage node)
>>>  later, without service interruption
>>>  - Ability to provide HA for all services, after more nodes added
>>>  without service interruption
>>>  - No need to change the deployment architecture later when more
>>>  physical nodes and resources available(My physical infrastructure
>>>  will
>>>  be scaled later, and not limitted to these three physical
>>>  machines).
>>>  For example I don't know is it better to have 1 neutron node, or
>>>  have
>>>  two neutron service on my two compute nodes?
>>> 
>>> >>>
>>> >>> Hi - Have you read:
>>> >>> http://docs.openstack.org/openstack-ops/content/scaling.html
>>> >>>
>>> >>> and
>>> >>>
>>> >>>
>>> >>>
>>> http://docs.openstack.org/openstack-ops/content/example_architecture.html#example_architecture-neutron
>>> >>>
>>> >>> Horizontal scaling is covered in these as well as your neutron
>>> question.
>>> >>>
>>> >>> Anne
>>> >>>
>>> >>>
>>> >>>
>>>  A really appreciate any helps.
>>>  Thanks in advance.
>>>  --
>>>  Server 1:
>>>  RAM: 128GB
>>>  HDD: 300GB
>>>  --
>>>  Server 2:
>>>  RAM: 128GB
>>>  HDD: 300GB
>>>  --
>>>  Server 3:
>>>  RAM: 256GB
>>>  HDD: 512GB
>>> 
>>>  ___
>>>  OpenStack-operators mailing list
>>>  OpenStack-operators@lists.openstack.org
>>> 
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>> 
>>> >>>
>>> >>>
>>> >>> ___
>>> >>> OpenStack-operators mailing list
>>> >>> OpenStack-operators@lists.openstack.org
>>> >>>
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>> >>>
>>> >>>
>>> >>
>>> >
>>>
>>> ___
>>> OpenStack-operators mailing list
>>> OpenStack-operators@lists.openstack.org
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>>
>>
>>
>>
>> --
>> Pavlik Salles Juan José
>> Blog - http://viviendolared.blogspot.com
>>

Re: [Openstack-operators] floatin ip issue

[George Shuklin]

I don't like this:

15: qg-d351f21a-08:  mtu 1500 qdisc noqueue state 
UNKNOWN group default
inet 192.168.122.193/24  brd 
192.168.122.255 scope global qg-d351f21a-08

   valid_lft forever preferred_lft forever
inet 192.168.122.194/32  brd 
192.168.122.194 scope global qg-d351f21a-08

   valid_lft forever preferred_lft forever

Why you got two IPs on same interface with different netmasks?

I just rechecked it on our installations - it should not be happens.

Next: or this is a bug, or this is uncleaned network node (lesser bug), 
or someone messing with neutron.


Starts from neutron:

show ports for router:

neutron port-list --device-id=router-uuid-here
neutron floatingips-list
neutron net-list
neutron subnet-list
(trim to related only)

(and please mark again who is 'internet' and who is 'internal' ips, i'm 
kinda loosing in '192.168.*'.



On 10/27/2014 04:47 PM, Paras pradhan wrote:

*Yes it got its ip which is 192.168.122.194 in the paste below.*

--

root@juno2:~# ip netns exec 
qrouter-34f3b828-b7b8-4f44-b430-14d9c5bd0d0c ip -4 a


1: lo:  mtu 65536 qdisc noqueue state UNKNOWN 
group default


inet 127.0.0.1/8  scope host lo

   valid_lft forever preferred_lft forever

14: qr-ac50d700-29:  mtu 1500 qdisc noqueue 
state UNKNOWN group default


inet 50.50.50.1/24  brd 50.50.50.255 scope 
global qr-ac50d700-29


   valid_lft forever preferred_lft forever

15: qg-d351f21a-08:  mtu 1500 qdisc noqueue 
state UNKNOWN group default


inet 192.168.122.193/24  brd 
192.168.122.255 scope global qg-d351f21a-08


   valid_lft forever preferred_lft forever

inet 192.168.122.194/32  brd 
192.168.122.194 scope global qg-d351f21a-08


   valid_lft forever preferred_lft forever

---

*stdbuf -e0 -o0 ip net exec qrouter... /bin/bash give me the following
*


--


root@juno2:~# ifconfig

loLink encap:Local Loopback

  inet addr:127.0.0.1  Mask:255.0.0.0

  inet6 addr: ::1/128 Scope:Host

  UP LOOPBACK RUNNING  MTU:65536 Metric:1

  RX packets:2 errors:0 dropped:0 overruns:0 frame:0

  TX packets:2 errors:0 dropped:0 overruns:0 carrier:0

  collisions:0 txqueuelen:0

  RX bytes:168 (168.0 B)  TX bytes:168 (168.0 B)


qg-d351f21a-08 Link encap:Ethernet  HWaddr fa:16:3e:79:0f:a2

  inet addr:192.168.122.193 Bcast:192.168.122.255  
Mask:255.255.255.0


  inet6 addr: fe80::f816:3eff:fe79:fa2/64 Scope:Link

  UP BROADCAST RUNNING  MTU:1500 Metric:1

  RX packets:2673 errors:0 dropped:0 overruns:0 frame:0

  TX packets:112 errors:0 dropped:0 overruns:0 carrier:0

  collisions:0 txqueuelen:0

  RX bytes:205377 (205.3 KB)  TX bytes:6537 (6.5 KB)


qr-ac50d700-29 Link encap:Ethernet  HWaddr fa:16:3e:7e:6d:f3

  inet addr:50.50.50.1 Bcast:50.50.50.255  Mask:255.255.255.0

  inet6 addr: fe80::f816:3eff:fe7e:6df3/64 Scope:Link

  UP BROADCAST RUNNING  MTU:1500 Metric:1

  RX packets:345 errors:0 dropped:0 overruns:0 frame:0

  TX packets:1719 errors:0 dropped:0 overruns:0 carrier:0

  collisions:0 txqueuelen:0

  RX bytes:27377 (27.3 KB)  TX bytes:164541 (164.5 KB)

--


Thanks

Paras.



On Sat, Oct 25, 2014 at 3:18 AM, George Shuklin 
mailto:george.shuk...@gmail.com>> wrote:


Check out if qrouter got floating inside network namespace  (ip
net exec qrouter... ip -4 a), or just bash in to it (stdbuf -e0
-o0 ip net exec qrouter... /bin/bash) and play with it like with
normal server.



On 10/24/2014 07:38 PM, Paras pradhan wrote:

Hello,

Assigned a floating ip to an instance. But I can't ping the
instance. This instance can reach internet with no problem. But I
can't ssh or icmp to this instance. Its not a security group issue.

On my network node that runs l3, I can see qrouter. The extenel
subnet looks like this:

allocation-pool start=192.168.122.193,end=192.168.122.222
--disable-dhcp --gateway 192.168.122.1 192.168.122.0/24


I can ping 192.168.122.193 using: ip netns exec
qrouter-34f3b828-b7b8-4f44-b430-14d9c5bd0d0c ping 192.168.122.193

but not 192.168.122.194 (which is the floating ip)

Doing tcp dump on the interace that connects to the external
world, I can see ICMP request but not reply from the interface :


11:36:40.360255 IP 192.168.122.1 > 192.168.122.194
: ICMP echo request, id 2589, seq 312,
length 64

11:36:41.360222 IP 192.168.122.1 > 192.168.122.194
: ICMP echo request, id 2589, seq 313,
length 64


Ideas?

Thanks

Paras.



___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org  

Re: [Openstack-operators] [Openstack-docs] High Availability Guide team

[Matt Griffin]

Thanks to all that took the poll. It is now closed.
Wednesday looks like the best day for most of us so mark your calendars.

Date/time: Wednesday, October 29, 2014 3:00 PM - 3:45 PM (Time zone:
Central Time)
Location: #openstack-haguide on freenode

Follow this link to open the poll:
https://doodle.com/xkuhru2snhvvyi7v

Let's use this time to get organized for an HA Guide [1] update.
Prior to the meeting, please document any ideas [2] on what areas to
improve and then we can talk about scope, assignments, and milestones in
our meeting.
Anne mentioned that this would be similar to the update to the Security
Guide with "subject matter experts working with core docs team members for
reviews." Sounds good to me, and, thankfully, Anne said she was free at
this time.

Looking forward to chatting with all of you. Apologies to those of you that
might have a conflict at this time. I should be able to share the log of
the discussion with the group after the meeting.

Best,
Matt Griffin
irc: mattgriffin

[1] http://docs.openstack.org/high-availability-guide/content/index.html
[2] https://etherpad.openstack.org/p/openstack-haguide-update



On Fri, Oct 24, 2014 at 2:34 PM, Matt Griffin 
wrote:

> It looks like next Tuesday or Thursday are best. If you haven't done so
> already and want to contribute to the HA Guide update, please mark times
> that are good for you for an irc meeting.
> https://doodle.com/xkuhru2snhvvyi7v
>
> I'll close the poll on Sunday and email this list.
>
> Take a look at https://etherpad.openstack.org/p/openstack-haguide-update
> to note any specific things you think should be included in the HA Guide.
> I've added links to the repo as well as the existing bugs we should resolve.
>
> For the new contributors, WELCOME! I've also added a link to the
> FirstTimers wiki page that Anne provided earlier.
>
> Ping me anytime in #openstack-haguide ... Otherwise, have a great weekend!
>
> Thanks for your participation and contribution.
>
> Best,
> Matt
>
>
>
> On Fri, Oct 24, 2014 at 10:49 AM, Matt Griffin 
> wrote:
>
>> Excellent!
>> For a meeting, here's a link to help us schedule a time that works best
>> for those interested in contributing.
>> https://doodle.com/xkuhru2snhvvyi7v
>>
>> These are all times throughout next week. Otherwise, if many will be at
>> the Summit in Paris (I won't unfortunately), we can have a meeting there.
>> My colleague from Percona, Tushar Katarki, will be in Paris, though, so he
>> can help kickstart the project if needed.
>>
>> I also created https://etherpad.openstack.org/p/openstack-haguide-update
>> to capture some ideas on what parts of the guide need attention. Please add
>> your comments and include links to the Guide pages if possible.
>>
>> Thanks!
>> Matt Griffin
>> irc: mattgriffin
>>
>>
>> On Fri, Oct 17, 2014 at 2:54 AM, Alessandro Vozza 
>> wrote:
>>
>>> Dear all,
>>>
>>> I was looking for an entry point for my first contribution to Openstack
>>> (been around as an operator for years, but lack of programming skills kept
>>> me away from contributing) and I think I finally found something I can give
>>> some meaningful help to :) At my $daily_job I deal with HA architectures
>>> for one major Openstack player, so I’m looking forward to the first meeting
>>> and my first patch (and to meet all of you in Paris!).
>>>
>>> regards
>>> Alessandro
>>>
>>>
>>> On 16 Oct 2014, at 00:55, David Medberry  wrote:
>>>
>>> Yep, Anne's right. Also, while both email addresses work for me,
>>> openst...@medberry.net is the one subscribed to the list (so the only
>>> one I can reply from.)
>>>
>>> On Wed, Oct 15, 2014 at 4:37 PM, Anne Gentle  wrote:
>>>


 On Wed, Oct 15, 2014 at 5:30 PM, Matt Griffin >>> > wrote:

> Fantastic to see so much interest in updating the HA Guide. I finally
> have some free cycles to help move this along so how about we schedule an
> irc chat so volunteer contributors can meet and we can decide on an
> approach? I propose either this Friday (10/17) or next Friday (10/24).
> Here's my schedule.
> https://doodle.com/percona-mattgriffin
>
> Here's the initial bug list that Anne referenced in the original email
> [1] that we can at least use as a starting point for more updates. Any
> ideas on where things stand on the steps that Anne proposed to get a repo
> set up so we can move forward with updating content?
>

 Repo is ready-to-go here:
 http://git.openstack.org/cgit/openstack/ha-guide

 Christian did some initial clean up so it is ready to keep iterating
 on. A meeting sounds like a great first step, thanks for starting the
 conversation!
 Anne



>
> Thanks!
> Matt
>
> [1]
> https://bugs.launchpad.net/openstack-manuals/+bugs/?field.tag=ha-guide
>
>
> On Mon, Sep 15, 2014 at 2:15 PM, Andreas Jaeger  wrote:
>
>> On 15. September 2014 20:49:46 MESZ, Sriram Subramanian <
>> sri...@sriramhere.com

Re: [Openstack-operators] Glance Image Upload error

[Abel Lopez]

This sounds like a packaging error. What linux distribution are you using?
The quick fix is to just install the oslo.config module manually, not sure why 
it wasn't included.

`sudo pip install oslo.config` should help


On Oct 26, 2014, at 1:26 AM, mo...@qmail.com.bd wrote:

> 
> Hi ,
> 
> I am facing keystone configuration problem. My problem is give in bellow.
> 
>  
> keystone-manage pki_setup --keystone-user keystone --keystone-group keystone
> Traceback (most recent call last):
>   File "/usr/bin/keystone-manage", line 30, in 
> from keystone import cli
>   File "/usr/lib/python2.7/site-packages/keystone/cli.py", line 19, in 
> 
> from oslo.config import cfg
> ImportError: No module named oslo.config
> 
>  
> Please help me for solution this problem.
> 
> 
> Thanks
> 
>  
> ___
> OpenStack-operators mailing list
> OpenStack-operators@lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

Re: [Openstack-operators] floatin ip issue

[Paras pradhan]

*Yes it got its ip which is 192.168.122.194 in the paste below.*

--

root@juno2:~# ip netns exec qrouter-34f3b828-b7b8-4f44-b430-14d9c5bd0d0c ip
-4 a

1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group
default

inet 127.0.0.1/8 scope host lo

   valid_lft forever preferred_lft forever

14: qr-ac50d700-29:  mtu 1500 qdisc noqueue state
UNKNOWN group default

inet 50.50.50.1/24 brd 50.50.50.255 scope global qr-ac50d700-29

   valid_lft forever preferred_lft forever

15: qg-d351f21a-08:  mtu 1500 qdisc noqueue state
UNKNOWN group default

inet 192.168.122.193/24 brd 192.168.122.255 scope global qg-d351f21a-08

   valid_lft forever preferred_lft forever

inet 192.168.122.194/32 brd 192.168.122.194 scope global qg-d351f21a-08

   valid_lft forever preferred_lft forever

---


*stdbuf -e0 -o0 ip net exec qrouter... /bin/bash give me the following*


--


root@juno2:~# ifconfig

loLink encap:Local Loopback

  inet addr:127.0.0.1  Mask:255.0.0.0

  inet6 addr: ::1/128 Scope:Host

  UP LOOPBACK RUNNING  MTU:65536  Metric:1

  RX packets:2 errors:0 dropped:0 overruns:0 frame:0

  TX packets:2 errors:0 dropped:0 overruns:0 carrier:0

  collisions:0 txqueuelen:0

  RX bytes:168 (168.0 B)  TX bytes:168 (168.0 B)


qg-d351f21a-08 Link encap:Ethernet  HWaddr fa:16:3e:79:0f:a2

  inet addr:192.168.122.193  Bcast:192.168.122.255
Mask:255.255.255.0

  inet6 addr: fe80::f816:3eff:fe79:fa2/64 Scope:Link

  UP BROADCAST RUNNING  MTU:1500  Metric:1

  RX packets:2673 errors:0 dropped:0 overruns:0 frame:0

  TX packets:112 errors:0 dropped:0 overruns:0 carrier:0

  collisions:0 txqueuelen:0

  RX bytes:205377 (205.3 KB)  TX bytes:6537 (6.5 KB)


qr-ac50d700-29 Link encap:Ethernet  HWaddr fa:16:3e:7e:6d:f3

  inet addr:50.50.50.1  Bcast:50.50.50.255  Mask:255.255.255.0

  inet6 addr: fe80::f816:3eff:fe7e:6df3/64 Scope:Link

  UP BROADCAST RUNNING  MTU:1500  Metric:1

  RX packets:345 errors:0 dropped:0 overruns:0 frame:0

  TX packets:1719 errors:0 dropped:0 overruns:0 carrier:0

  collisions:0 txqueuelen:0

  RX bytes:27377 (27.3 KB)  TX bytes:164541 (164.5 KB)

--


Thanks

Paras.



On Sat, Oct 25, 2014 at 3:18 AM, George Shuklin 
wrote:

>  Check out if qrouter got floating inside network namespace  (ip net exec
> qrouter... ip -4 a), or just bash in to it (stdbuf -e0 -o0 ip net exec
> qrouter... /bin/bash) and play with it like with normal server.
>
>
>
> On 10/24/2014 07:38 PM, Paras pradhan wrote:
>
> Hello,
>
>  Assigned a floating ip to an instance. But I can't ping the instance.
> This instance can reach internet with no problem. But I can't ssh or icmp
> to this instance. Its not a security group issue.
>
>  On my network node that runs l3, I can see qrouter. The extenel subnet
> looks like this:
>
>  allocation-pool start=192.168.122.193,end=192.168.122.222 --disable-dhcp
> --gateway 192.168.122.1 192.168.122.0/24
>
> I can ping 192.168.122.193 using: ip netns exec
> qrouter-34f3b828-b7b8-4f44-b430-14d9c5bd0d0c ping 192.168.122.193
>
> but not 192.168.122.194 (which is the floating ip)
>
> Doing tcp dump on the interace that connects to the external world, I can
> see ICMP request but not reply from the interface :
>
>
>  11:36:40.360255 IP 192.168.122.1 > 192.168.122.194: ICMP echo request,
> id 2589, seq 312, length 64
>
>  11:36:41.360222 IP 192.168.122.1 > 192.168.122.194: ICMP echo request,
> id 2589, seq 313, length 64
>
>
>  Ideas?
>
> Thanks
>
> Paras.
>
>
> ___
> OpenStack-operators mailing 
> listOpenStack-operators@lists.openstack.orghttp://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
>
> ___
> OpenStack-operators mailing list
> OpenStack-operators@lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators