Bug 1390070

Summary: Ephemeral ports are not open in compute firewall thus breaking live migration
Product: Red Hat OpenStack Reporter: Marius Cornea <mcornea>
Component: openstack-tripleo-heat-templatesAssignee: Sven Anderson <svanders>
Status: CLOSED ERRATA QA Contact: Gabriel Szasz <gszasz>
Severity: urgent Docs Contact:
Priority: high    
Version: 10.0 (Newton)CC: dbecker, eglynn, emacchi, jschluet, mburns, morazi, owalsh, panbalag, rhel-osp-director-maint, sasha, sclewis, sgordon
Target Milestone: rcKeywords: Triaged
Target Release: 10.0 (Newton)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-5.0.0-1.4.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-12-14 16:27:03 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Marius Cornea 2016-10-31 07:38:10 UTC 
Description of problem:
Ephemeral ports are not open in compute firewall thus breaking live migration. Live migration fails with:

Live Migration failure: unable to connect to server at 'comp-r00-01.redhat.local:49152': No route to host

Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-5.0.0-0.9.0rc3.el7ost.noarch

How reproducible:
100%

Steps to Reproduce:
1. Deploy overcloud with 2 computes, launch an instance
2. Try to live migrate it to the other node

Actual results:
Live migration fails.

Expected results:
Live migration succeeds.

Additional info:
According to the docs we need the ephemeral ports(49152-49215) to be opened on the compute node:

https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/paged/migrating-instances/chapter-1-how-to-migrate-a-live-instance
Comment 2 Sven Anderson 2016-11-07 16:30:24 UTC 
Merged in stable/newton. Next rebased build will include it.
Comment 7 Stephen Gordon 2016-11-17 13:36:08 UTC 
*** Bug 1393135 has been marked as a duplicate of this bug. ***
Comment 9 errata-xmlrpc 2016-12-14 16:27:03 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-2948.html