Bug 2016497 - [RFE] Enhance the blocklist commands to take a CIDR
Summary: [RFE] Enhance the blocklist commands to take a CIDR
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: RADOS
Version: 5.1
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: 6.0
Assignee: Greg Farnum
QA Contact: Pawan
Masauso Lungu
URL:
Whiteboard:
Depends On:
Blocks: 2073209 2126050
TreeView+ depends on / blocked
 
Reported: 2021-10-21 18:09 UTC by Raghavendra Talur
Modified: 2023-03-20 18:56 UTC (History)
17 users (show)

Fixed In Version: ceph-17.2.3-1.el9cp
Doc Type: Enhancement
Doc Text:
.Users can now blocklist a CIDR range With this release, you can blocklist a CIDR range, in addition to individual client instances and IPs. In certain circumstances, you would want to blocklist all clients in an entire data center or rack instead of specifying individual clients to blocklist. For example, failing over a workload to a different set of machines and wanting to prevent the old workload instance from continuing to partially operate. This is now possible using a "blocklist range" analogous to the existing "blocklist" command.
Clone Of:
: 2073209 (view as bug list)
Environment:
Last Closed: 2023-03-20 18:55:34 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Ceph Project Bug Tracker 53050 0 None None None 2021-10-26 19:19:53 UTC
Github ceph ceph pull 44151 0 None open Implement CIDR blocklisting 2021-12-06 23:35:25 UTC
Red Hat Issue Tracker RHCEPH-2079 0 None None None 2021-10-21 18:10:01 UTC
Red Hat Product Errata RHBA-2023:1360 0 None None None 2023-03-20 18:56:13 UTC

Description Raghavendra Talur 2021-10-21 18:09:33 UTC 
Description of problem:

As of today, it is possible to blocklist a particular IP using the osd blocklist command. However, for the requirements of disaster recovery, we would like to blocklist a range of IPs that would belong to a data center hosting a set of clients.

Blocklisting such a big range of IPs individually(using what is available today) might have a adverse effect on the size of the OSD map and hence the need for this enhancement.
Comment 1 RHEL Program Management 2021-10-21 18:09:41 UTC 
Please specify the severity of this bug. Severity is defined here:
https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity.
Comment 3 Greg Farnum 2021-11-30 18:38:59 UTC 
https://github.com/ceph/ceph/pull/44151
Comment 12 Greg Farnum 2022-09-14 14:10:50 UTC 
This feature is done and already present in RHCS5 and the underlying upstream 17.2.3 for RHCS6. What QE we want to do can be negotiated, but we can't regress by pushing it out to 6.1.
Comment 37 errata-xmlrpc 2023-03-20 18:55:34 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat Ceph Storage 6.0 Bug Fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:1360
Note You need to log in before you can comment on or make changes to this bug.