Description of problem:
In a clustered setup (3 OSP Controllers+3 ODLs ) we are seeing instaces failing to boot and this has been identified to be due to lack of communication between ODL and networking-odl once the neutron port transitions to ACTIVE. More info can be found at https://bugzilla.redhat.com/show_bug.cgi?id=1486917
One of the issues identified was a missing iptables rule for port 8185 over which the websocket communication happens. So, we need Director to setup iptables rules for this port at deploy time.
We are able to manually workaround using:
sudo iptables -I INPUT 15 -p tcp -m multiport --dports 8081,8185 -m state --state NEW -j ACCEPT
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Deploy clustered OSP +ODL
2. Boot instance
Instance doesn't boot and the neutron port is never set to ACTIVE
The fix needs to go into tripleo-heat-templates/blob/master/puppet/services/opendaylight-api.yaml according to Tim Rozet.
Checked with openstack-tripleo-heat-templates-7.0.3-0.20171023134948.el7ost.noarch
Port 8185 is Open
-A INPUT -p tcp -m multiport --dports 8081,6640,6653,2550,8185 -m state --state NEW -m comment --comment "137 opendaylight api ipv4" -j ACCEPT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.