You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Serg Senko <ke...@gmail.com> on 2014/04/21 02:20:32 UTC

Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Hi

After upgrade and restarting system-VM's
all VR started with some bad network configuration, egress rules stopped
work.
also some staticNAT rules,


there is " ip addr show " from one of VR's

root@r-256-VM:~# ip addr show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff

    inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0

    inet6 fe80::6bff:fe16:9/64 scope link

       valid_lft forever preferred_lft forever

3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff

    inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1

    inet6 fe80::c00:a9ff:fefe:138/64 scope link

       valid_lft forever preferred_lft forever

4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff

    inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2

    inet6 fe80::406:ecff:fe00:e/64 scope link

       valid_lft forever preferred_lft forever

5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff

    inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3

    inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth3

    inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth3

    inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth3

    inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth3

    inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth3

    inet6 fe80::481:44ff:fe00:e/64 scope link

       valid_lft forever preferred_lft forever

6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff

    inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4

    inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth4

    inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth4

    inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth4

    inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth4

    inet6 fe80::4e5:36ff:fe00:e/64 scope link

       valid_lft forever preferred_lft forever

7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff

    inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5

    inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth5

    inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth5

    inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth5

    inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth5

    inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth5

    inet6 fe80::46f:3aff:fe00:e/64 scope link

       valid_lft forever preferred_lft forever

8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff

    inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6

    inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth6

    inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth6

    inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth6

    inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth6

    inet6 fe80::4b0:30ff:fe00:e/64 scope link

       valid_lft forever preferred_lft forever

9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
UP qlen 1000

    link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff

    inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7

    inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth7

    inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth7

    inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth7

    inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth7

    inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth7

    inet6 fe80::426:b4ff:fe00:e/64 scope link

       valid_lft forever preferred_lft forever


-- 
ttyv0 "/usr/libexec/gmail Pc"  webcons on secure

Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Posted by Serg Senko <ke...@gmail.com>.
Hi,

Yes sure,

root@r-256-VM:~# cat /etc/cloudstack-release

Cloudstack Release 4.3.0 (64-bit) Wed Jan 15 00:27:19 UTC 2014


Also I tried to destroy the VR and re-create, VR up with same problem.

The "cloudstack-sysvmadm" script haven't receive success answer from VR's.


I have a finish rolling back to 4.1.1 - VR's successfully started,
everything is work again, but how to upgrade to 4.3 ?

This bug is not documented in know issue's,








On Mon, Apr 21, 2014 at 8:16 AM, Marcus <sh...@gmail.com> wrote:

> No idea, but have you verified that the vm is running the new system
> vm template? What happens if you destroy the router and let it
> recreate?
>
> On Sun, Apr 20, 2014 at 6:20 PM, Serg Senko <ke...@gmail.com> wrote:
> > Hi
> >
> > After upgrade and restarting system-VM's
> > all VR started with some bad network configuration, egress rules stopped
> > work.
> > also some staticNAT rules,
> >
> >
> > there is " ip addr show " from one of VR's
> >
> > root@r-256-VM:~# ip addr show
> >
> > 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
> >
> >     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> >
> >     inet 127.0.0.1/8 scope host lo
> >
> >     inet6 ::1/128 scope host
> >
> >        valid_lft forever preferred_lft forever
> >
> > 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff
> >
> >     inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0
> >
> >     inet6 fe80::6bff:fe16:9/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff
> >
> >     inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1
> >
> >     inet6 fe80::c00:a9ff:fefe:138/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2
> >
> >     inet6 fe80::406:ecff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet6 fe80::481:44ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet6 fe80::4e5:36ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet6 fe80::46f:3aff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet6 fe80::4b0:30ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet6 fe80::426:b4ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> >
> > --
> > ttyv0 "/usr/libexec/gmail Pc"  webcons on secure
>



-- 
ttyv0 "/usr/libexec/gmail Pc"  webcons on secure

Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Posted by Serg Senko <ke...@gmail.com>.
HI Suresh,

Thanks for you answer, but isn't realistic work around in my case, I have
more than ~150 VR's, also I'm already finished rolling back to 4.1.1.
Do you have some patch or link to updated systemvm template ( if that the
ssvm issue ) ?

P.S.
The same issue, will happened with upgrade to 4.2.1? Or it's bug of 4.3.0?







On Mon, Apr 21, 2014 at 8:35 AM, Suresh Sadhu <Su...@citrix.com>wrote:

> Type brctl show
> And check your public interface of your router is  plugged into cloudbr0
> or cloudbr1..If its plugged to cloubr0 and then need to detach from
> cloudbr0  and attach that interface to cloudbr1 and need to apply the all
>  the iptables rules . Take the backup of iptables rules with iptables-save
> command before performing attach /detach interfces.
>
>
>
> Regards
> Sadhu
>
>
>
> -----Original Message-----
> From: Marcus [mailto:shadowsor@gmail.com]
> Sent: 21 April 2014 10:46
> To: dev@cloudstack.apache.org
> Cc: users@cloudstack.apache.org
> Subject: Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN
> ) VR's bug
>
> No idea, but have you verified that the vm is running the new system vm
> template? What happens if you destroy the router and let it recreate?
>
> On Sun, Apr 20, 2014 at 6:20 PM, Serg Senko <ke...@gmail.com> wrote:
> > Hi
> >
> > After upgrade and restarting system-VM's all VR started with some bad
> > network configuration, egress rules stopped work.
> > also some staticNAT rules,
> >
> >
> > there is " ip addr show " from one of VR's
> >
> > root@r-256-VM:~# ip addr show
> >
> > 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
> >
> >     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> >
> >     inet 127.0.0.1/8 scope host lo
> >
> >     inet6 ::1/128 scope host
> >
> >        valid_lft forever preferred_lft forever
> >
> > 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff
> >
> >     inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0
> >
> >     inet6 fe80::6bff:fe16:9/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff
> >
> >     inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1
> >
> >     inet6 fe80::c00:a9ff:fefe:138/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2
> >
> >     inet6 fe80::406:ecff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> > eth3
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> > eth3
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> > eth3
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> > eth3
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> > eth3
> >
> >     inet6 fe80::481:44ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> > eth4
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> > eth4
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> > eth4
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> > eth4
> >
> >     inet6 fe80::4e5:36ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> > eth5
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> > eth5
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> > eth5
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> > eth5
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> > eth5
> >
> >     inet6 fe80::46f:3aff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> > eth6
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> > eth6
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> > eth6
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> > eth6
> >
> >     inet6 fe80::4b0:30ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > state UP qlen 1000
> >
> >     link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> > eth7
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> > eth7
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> > eth7
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> > eth7
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> > eth7
> >
> >     inet6 fe80::426:b4ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> >
> > --
> > ttyv0 "/usr/libexec/gmail Pc"  webcons on secure
>



-- 
ttyv0 "/usr/libexec/gmail Pc"  webcons on secure

RE: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Posted by Suresh Sadhu <Su...@citrix.com>.
Type brctl show 
And check your public interface of your router is  plugged into cloudbr0 or cloudbr1..If its plugged to cloubr0 and then need to detach from cloudbr0  and attach that interface to cloudbr1 and need to apply the all  the iptables rules . Take the backup of iptables rules with iptables-save command before performing attach /detach interfces.


 
Regards
Sadhu



-----Original Message-----
From: Marcus [mailto:shadowsor@gmail.com] 
Sent: 21 April 2014 10:46
To: dev@cloudstack.apache.org
Cc: users@cloudstack.apache.org
Subject: Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

No idea, but have you verified that the vm is running the new system vm template? What happens if you destroy the router and let it recreate?

On Sun, Apr 20, 2014 at 6:20 PM, Serg Senko <ke...@gmail.com> wrote:
> Hi
>
> After upgrade and restarting system-VM's all VR started with some bad 
> network configuration, egress rules stopped work.
> also some staticNAT rules,
>
>
> there is " ip addr show " from one of VR's
>
> root@r-256-VM:~# ip addr show
>
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
>
>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>
>     inet 127.0.0.1/8 scope host lo
>
>     inet6 ::1/128 scope host
>
>        valid_lft forever preferred_lft forever
>
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff
>
>     inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0
>
>     inet6 fe80::6bff:fe16:9/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff
>
>     inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1
>
>     inet6 fe80::c00:a9ff:fefe:138/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2
>
>     inet6 fe80::406:ecff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet6 fe80::481:44ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet6 fe80::4e5:36ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet6 fe80::46f:3aff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet6 fe80::4b0:30ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet6 fe80::426:b4ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
>
> --
> ttyv0 "/usr/libexec/gmail Pc"  webcons on secure

RE: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Posted by Suresh Sadhu <Su...@citrix.com>.
Type brctl show 
And check your public interface of your router is  plugged into cloudbr0 or cloudbr1..If its plugged to cloubr0 and then need to detach from cloudbr0  and attach that interface to cloudbr1 and need to apply the all  the iptables rules . Take the backup of iptables rules with iptables-save command before performing attach /detach interfces.


 
Regards
Sadhu



-----Original Message-----
From: Marcus [mailto:shadowsor@gmail.com] 
Sent: 21 April 2014 10:46
To: dev@cloudstack.apache.org
Cc: users@cloudstack.apache.org
Subject: Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

No idea, but have you verified that the vm is running the new system vm template? What happens if you destroy the router and let it recreate?

On Sun, Apr 20, 2014 at 6:20 PM, Serg Senko <ke...@gmail.com> wrote:
> Hi
>
> After upgrade and restarting system-VM's all VR started with some bad 
> network configuration, egress rules stopped work.
> also some staticNAT rules,
>
>
> there is " ip addr show " from one of VR's
>
> root@r-256-VM:~# ip addr show
>
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
>
>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>
>     inet 127.0.0.1/8 scope host lo
>
>     inet6 ::1/128 scope host
>
>        valid_lft forever preferred_lft forever
>
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff
>
>     inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0
>
>     inet6 fe80::6bff:fe16:9/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff
>
>     inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1
>
>     inet6 fe80::c00:a9ff:fefe:138/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2
>
>     inet6 fe80::406:ecff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth3
>
>     inet6 fe80::481:44ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth4
>
>     inet6 fe80::4e5:36ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth5
>
>     inet6 fe80::46f:3aff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth6
>
>     inet6 fe80::4b0:30ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
> state UP qlen 1000
>
>     link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary 
> eth7
>
>     inet6 fe80::426:b4ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
>
> --
> ttyv0 "/usr/libexec/gmail Pc"  webcons on secure

Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Posted by Serg Senko <ke...@gmail.com>.
Hi,

Yes sure,

root@r-256-VM:~# cat /etc/cloudstack-release

Cloudstack Release 4.3.0 (64-bit) Wed Jan 15 00:27:19 UTC 2014


Also I tried to destroy the VR and re-create, VR up with same problem.

The "cloudstack-sysvmadm" script haven't receive success answer from VR's.


I have a finish rolling back to 4.1.1 - VR's successfully started,
everything is work again, but how to upgrade to 4.3 ?

This bug is not documented in know issue's,








On Mon, Apr 21, 2014 at 8:16 AM, Marcus <sh...@gmail.com> wrote:

> No idea, but have you verified that the vm is running the new system
> vm template? What happens if you destroy the router and let it
> recreate?
>
> On Sun, Apr 20, 2014 at 6:20 PM, Serg Senko <ke...@gmail.com> wrote:
> > Hi
> >
> > After upgrade and restarting system-VM's
> > all VR started with some bad network configuration, egress rules stopped
> > work.
> > also some staticNAT rules,
> >
> >
> > there is " ip addr show " from one of VR's
> >
> > root@r-256-VM:~# ip addr show
> >
> > 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
> >
> >     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> >
> >     inet 127.0.0.1/8 scope host lo
> >
> >     inet6 ::1/128 scope host
> >
> >        valid_lft forever preferred_lft forever
> >
> > 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff
> >
> >     inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0
> >
> >     inet6 fe80::6bff:fe16:9/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff
> >
> >     inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1
> >
> >     inet6 fe80::c00:a9ff:fefe:138/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2
> >
> >     inet6 fe80::406:ecff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth3
> >
> >     inet6 fe80::481:44ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth4
> >
> >     inet6 fe80::4e5:36ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth5
> >
> >     inet6 fe80::46f:3aff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth6
> >
> >     inet6 fe80::4b0:30ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> > 9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state
> > UP qlen 1000
> >
> >     link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff
> >
> >     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7
> >
> >     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary
> eth7
> >
> >     inet6 fe80::426:b4ff:fe00:e/64 scope link
> >
> >        valid_lft forever preferred_lft forever
> >
> >
> > --
> > ttyv0 "/usr/libexec/gmail Pc"  webcons on secure
>



-- 
ttyv0 "/usr/libexec/gmail Pc"  webcons on secure

Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Posted by Marcus <sh...@gmail.com>.
No idea, but have you verified that the vm is running the new system
vm template? What happens if you destroy the router and let it
recreate?

On Sun, Apr 20, 2014 at 6:20 PM, Serg Senko <ke...@gmail.com> wrote:
> Hi
>
> After upgrade and restarting system-VM's
> all VR started with some bad network configuration, egress rules stopped
> work.
> also some staticNAT rules,
>
>
> there is " ip addr show " from one of VR's
>
> root@r-256-VM:~# ip addr show
>
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
>
>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>
>     inet 127.0.0.1/8 scope host lo
>
>     inet6 ::1/128 scope host
>
>        valid_lft forever preferred_lft forever
>
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff
>
>     inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0
>
>     inet6 fe80::6bff:fe16:9/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff
>
>     inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1
>
>     inet6 fe80::c00:a9ff:fefe:138/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2
>
>     inet6 fe80::406:ecff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet6 fe80::481:44ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet6 fe80::4e5:36ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet6 fe80::46f:3aff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet6 fe80::4b0:30ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet6 fe80::426:b4ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
>
> --
> ttyv0 "/usr/libexec/gmail Pc"  webcons on secure

Re: Upgrade from 4.1.1 to 4.3.0 ( KVM, Traffic labels, Adv. VLAN ) VR's bug

Posted by Marcus <sh...@gmail.com>.
No idea, but have you verified that the vm is running the new system
vm template? What happens if you destroy the router and let it
recreate?

On Sun, Apr 20, 2014 at 6:20 PM, Serg Senko <ke...@gmail.com> wrote:
> Hi
>
> After upgrade and restarting system-VM's
> all VR started with some bad network configuration, egress rules stopped
> work.
> also some staticNAT rules,
>
>
> there is " ip addr show " from one of VR's
>
> root@r-256-VM:~# ip addr show
>
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
>
>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>
>     inet 127.0.0.1/8 scope host lo
>
>     inet6 ::1/128 scope host
>
>        valid_lft forever preferred_lft forever
>
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 02:00:6b:16:00:09 brd ff:ff:ff:ff:ff:ff
>
>     inet 10.1.1.1/24 brd 10.1.1.255 scope global eth0
>
>     inet6 fe80::6bff:fe16:9/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 0e:00:a9:fe:01:38 brd ff:ff:ff:ff:ff:ff
>
>     inet 169.254.1.56/16 brd 169.254.255.255 scope global eth1
>
>     inet6 fe80::c00:a9ff:fefe:138/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:06:ec:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth2
>
>     inet6 fe80::406:ecff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:81:44:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth3
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth3
>
>     inet6 fe80::481:44ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:e5:36:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth4
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth4
>
>     inet6 fe80::4e5:36ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 7: eth5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:6f:3a:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth5
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth5
>
>     inet6 fe80::46f:3aff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 8: eth6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:b0:30:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth6
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth6
>
>     inet6 fe80::4b0:30ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
> 9: eth7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
> UP qlen 1000
>
>     link/ether 06:26:b4:00:00:0e brd ff:ff:ff:ff:ff:ff
>
>     inet XXX.XXX.XXX.219/26 brd 46.165.231.255 scope global eth7
>
>     inet XXX.XXX.XXX.247/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.228/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.230/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.209/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet XXX.XXX.XXX.227/26 brd 46.165.231.255 scope global secondary eth7
>
>     inet6 fe80::426:b4ff:fe00:e/64 scope link
>
>        valid_lft forever preferred_lft forever
>
>
> --
> ttyv0 "/usr/libexec/gmail Pc"  webcons on secure