[Yahoo-eng-team] [Bug 1681184] [NEW] It takes too long to update multiple addresses at once

2017-04-09 Thread
Public bug reported:

1. create two security groups
sg-test-1:
  id 523ea2a0-8b73-4a9d-b122-68030418f9a6
  security_group_rules egress, IPv4
 egress, IPv6
 ingress, IPv4
2. create two vms with security group
 vm1(10.20.10.12) port id ffcd8854-f4f6-4d66-84cd-ad29192ab778 sg-test-1

3. test update address pairs
   
3.1  one update 
date +%s;neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
ip_address=10.20.10.4,mac_address=fa:16:3e:02:70:85 -v;date +%s;

1491374284 - 1491374282 = 2 s

3.2 five update
date +%s;neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
ip_address=10.20.10.4,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.5,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.96,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.7,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.8,mac_address=fa:16:3e:02:70:85 -v;date +%s;

1491374403 - 1491374397 = 6 s

3.3 ten update
date +%s;neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
ip_adate +%s;neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
ip_address=10.20.10.4,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.5,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.96,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.7,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.8,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.9,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.10,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.11,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.92,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.13,mac_address=fa:16:3e:02:70:85 \
-v;date +%s;

1491373934 - 1491373916 = 18 s

3.4 twenty update
change 'max_allowed_address_pair' to '100' in /etc/neutron/neutron.conf 
,then restart neutron-server

date +%s;neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
ip_address=10.20.10.4,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.5,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.96,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.7,mac_address=fa:16:3e:02:70:85 \ 
ip_address=10.20.10.8,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.9,mac_address=fa:16:3e:02:70:85 \ 
ip_address=10.20.10.10,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.11,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.92,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.13,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.14,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.15,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.16,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.17,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.18,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.19,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.20,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.21,mac_address=fa:16:3e:02:70:85 \
ip_address=10.20.10.22,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.23,mac_address=fa:16:3e:02:70:85 \
-v;date +%s;

1491374139 - 1491374078 = 61

release used: ocata

** Affects: neutron
 Importance: Undecided
 Assignee: 刘成乾 (liuchengqian90)
 Status: New

** Changed in: neutron
 Assignee: (unassigned) => 刘成乾 (liuchengqian90)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1681184

Title:
  It takes too long to update multiple addresses at once

Status in neutron:
  New

Bug description:
  1. create two security groups
  sg-test-1:
id 523ea2a0-8b73-4a9d-b122-68030418f9a6
security_group_rules egress, IPv4
   egress, IPv6
   ingress, IPv4
  2. create two vms with security group
   vm1(10.20.10.12) port id ffcd8854-f4f6-4d66-84cd-ad29192ab778 sg-test-1

  3. test update address pairs
 
  3.1  one update 
  date +%s;neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
  ip_address=10.20.10.4,mac_address=fa:16:3e:02:70:85 -v;date +%s;

  1491374284 - 1491374282 = 2 s

  3.2 five update
  date +%s;neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
  ip_address=10.20.10.4,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.5,mac_address=fa:16:3e:02:70:85 \
  ip_address=10.20.10.96,mac_address=fa:16:3e:02:70:85 
ip_address=10.20.10.7,mac_address=fa:16:3e:02:70:85 \
  ip_address=10.20.10.8,mac_address=fa:16:3e:02:70:85 -v;date +%s;

  1491374403 - 1491374397 = 6 s
  
  3.3 ten update
  date +%s;neutr

[Yahoo-eng-team] [Bug 1680305] [NEW] remote securitygroup address pairs update

2017-04-05 Thread
Public bug reported:

1. create two security groups
sg-test-1:
  id   523ea2a0-8b73-4a9d-b122-68030418f9a6
  security_group_rules   egress, IPv4
 egress, IPv6
 ingress, IPv4, icmp, remote_group_id: 
56dd2c05-fd80-4f1d-a17f-f1be73a42a82

sg-test-2:
  id   56dd2c05-fd80-4f1d-a17f-f1be73a42a82
  security_group_rules   egress, IPv4
 egress, IPv6
2. create two vms with security group
 vm1(10.20.10.12)   port idb11b8dde-69cb-4a1e-bd9c-20db51748c52 
sg-test-1
 vm2(10.20.10.6)port idffcd8854-f4f6-4d66-84cd-ad29192ab778 
sg-test-2

3. in vm1's compute node

   #iptables -nvL  neutron-openvswi-ib11b8dde-6;
   
0 0 RETURN icmp --  *  *   0.0.0.0/00.0.0.0/0   
 match-set NIPv456dd2c05-fd80-4f1d-a17f- src
   #ipset list NIPv456dd2c05-fd80-4f1d-a17f-
   Name: NIPv456dd2c05-fd80-4f1d-a17f-
   Type: hash:net
   Revision: 3
   Header: family inet hashsize 1024 maxelem 65536
   Size in memory: 19216
   References: 1
   Members:
   10.20.10.6

4、update vm2's port 
   #neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
ip_address=10.20.10.66,mac_address=fa:16:3e:02:70:85

5、 ipset list NIPv456dd2c05-fd80-4f1d-a17f- ,not found address
10.20.10.66

release used: ocata

** Affects: neutron
 Importance: Undecided
 Assignee: 刘成乾 (liuchengqian90)
 Status: New

** Changed in: neutron
 Assignee: (unassigned) => 刘成乾 (liuchengqian90)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1680305

Title:
  remote securitygroup address pairs update

Status in neutron:
  New

Bug description:
  1. create two security groups
  sg-test-1:
id   523ea2a0-8b73-4a9d-b122-68030418f9a6
security_group_rules   egress, IPv4
   egress, IPv6
   ingress, IPv4, icmp, 
remote_group_id: 56dd2c05-fd80-4f1d-a17f-f1be73a42a82

  sg-test-2:
id   56dd2c05-fd80-4f1d-a17f-f1be73a42a82
security_group_rules   egress, IPv4
   egress, IPv6
  2. create two vms with security group
   vm1(10.20.10.12)   port idb11b8dde-69cb-4a1e-bd9c-20db51748c52 
sg-test-1
   vm2(10.20.10.6)port idffcd8854-f4f6-4d66-84cd-ad29192ab778 
sg-test-2

  3. in vm1's compute node

 #iptables -nvL  neutron-openvswi-ib11b8dde-6;
 
  0 0 RETURN icmp --  *  *   0.0.0.0/00.0.0.0/0 
   match-set NIPv456dd2c05-fd80-4f1d-a17f- src
 #ipset list NIPv456dd2c05-fd80-4f1d-a17f-
 Name: NIPv456dd2c05-fd80-4f1d-a17f-
 Type: hash:net
 Revision: 3
 Header: family inet hashsize 1024 maxelem 65536
 Size in memory: 19216
 References: 1
 Members:
 10.20.10.6

  4、update vm2's port 
 #neutron port-update ffcd8854-f4f6-4d66-84cd-ad29192ab778 
--allowed-address-pairs type=dict list=true \
  ip_address=10.20.10.66,mac_address=fa:16:3e:02:70:85

  5、 ipset list NIPv456dd2c05-fd80-4f1d-a17f- ,not found address
  10.20.10.66

  release used: ocata

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1680305/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp