<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jul 17, 2017 at 10:56 AM, Nelson Lameiras <span dir="ltr"><<a href="mailto:nelson.lameiras@lyra-network.com" target="_blank">nelson.lameiras@lyra-network.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:arial,helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><div>Hello, Can any one please help us with the problem described below?<br></div><div><br></div><div>Nir, I'm including you since a quick search on the internet led me to think that you have worked on this part of the project. Please forgive me if I'm off topic.<br></div><div><br></div><div>(I incorrectly used below the expression "patch" when I meant "configure". it's corrected now)<br></div></div></div></blockquote><div><br></div><div>VDSM may indeed change the IP filter. From the function that sets it[1]:</div><div><br></div><div>def setRpFilterIfNeeded(netIfaceName, hostname, loose_mode):</div><div> """</div><div> Set rp_filter to loose or strict mode if there's no session using the</div><div> netIfaceName device and it's not the device used by the OS to reach the</div><div> 'hostname'.</div><div> loose mode is needed to allow multiple iSCSI connections in a multiple NIC</div><div> per subnet configuration. strict mode is needed to avoid the security</div><div> breach where an untrusted VM can DoS the host by sending it packets with</div><div> spoofed random sources.</div><div><br></div><div> Arguments:</div><div> netIfaceName: the device used by the iSCSI session</div><div> target: iSCSI target object cointaining the portal hostname</div><div> loose_mode: boolean</div><div> </div><div><br></div><div><br></div><div><br></div><div>I think it sets it to strict mode when disconnecting or removing an iSCSI session.</div><div>Perhaps something in the check we are doing is incorrect? Do you have other sessions open?</div><div>Y.<br></div><div><br></div><div>[1] <a href="https://github.com/oVirt/vdsm/blob/321233bea649fb6d1e72baa1b1164c8c1bc852af/lib/vdsm/storage/iscsi.py#L556">https://github.com/oVirt/vdsm/blob/321233bea649fb6d1e72baa1b1164c8c1bc852af/lib/vdsm/storage/iscsi.py#L556</a></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:arial,helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span class="gmail-"><div></div><div><div>cordialement, regards,</div><div><br></div><table style="margin:0px;table-layout:fixed;border:none;width:345pt;padding:0px" width="460" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:86.25pt;text-align:left" width="115" valign="top"><a href="https://www.lyra-network.com/" style="border:none;text-decoration:none;width:100%;display:block;clear:both" target="_blank"><img src="cid:ac318af44fd2ff936fd390a2dfa5ac7f8bf624d9@zimbra" alt="" width="115" border="0" height="94"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:258.75pt" width="345" valign="top"><table style="margin:0px;width:258.75pt;table-layout:fixed;border:none" width="345" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td style="font-size:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:18px;font-weight:bold">Nelson LAMEIRAS</td></tr><tr><td style="font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px;line-height:16px">Ingénieur Systèmes et Réseaux<span style="font-family:Arial,sans-serif;color:rgb(51,122,183);font-size:11px"> / Systems and Networks engineer</span></td></tr><tr><td style="line-height:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px"><span style="font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px">Tel: <a href="tel:+33%205%2032%2009%2009%2070" value="+33532090970" target="_blank">+33 5 32 09 09 70</a></span></td></tr><tr><td style="line-height:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px"><a href="mailto:nelson.lameiras@lyra-network.com" style="font-size:11px;font-family:Arial,sans-serif;line-height:16px;text-decoration:none" target="_blank">nelson.lameiras@lyra-network.<wbr>com</a><br></td></tr><tr><td style="line-height:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px"><a href="https://www.lyra-network.com/" style="font-size:11px;font-family:Arial,sans-serif;line-height:16px;border:none;text-decoration:none" target="_blank">www.lyra-network.com</a> <a href="https://payzen.eu" style="font-size:11px;font-family:Arial,sans-serif;line-height:16px;border:none;text-decoration:none" target="_blank"> | www.payzen.eu</a><br></td></tr></tbody></table></td></tr></tbody></table><table style="margin:0px;table-layout:fixed;border:none;width:345pt" width="460" cellspacing="0" cellpadding="0"><tbody><tr><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:24pt;text-align:left" width="32" valign="top"><a href="https://www.youtube.com/channel/UCrVl1CO_Jlu3KbiRH-tQ_vA" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:32px" target="_blank"><img src="cid:6f3cc57ba362f7a2942a16e88d1ea9ce686c7da2@zimbra" alt="" width="32" border="0" height="28"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:30.75pt;text-align:left" width="41" valign="top"><a href="https://www.linkedin.com/company/lyra-network_2" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:41px" target="_blank"><img src="cid:95ac2affdb66bc26fd0e254578e26d8574139b42@zimbra" width="41" border="0" height="28"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:31.5pt;text-align:left" width="42" valign="top"><a href="https://twitter.com/LyraNetwork" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:42px" target="_blank"><img src="cid:5e9e243634081dcf099c93fd9ca78f8b346f57b3@zimbra" alt="" width="42" border="0" height="28"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:258.75pt;text-align:left" width="345" valign="top"><a href="https://payzen.eu" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:61px" target="_blank"><img src="cid:72acbdf9e9761a33ad68ac239cb304da61f1cda1@zimbra" alt="" width="61" border="0" height="28"></a><br></td></tr></tbody></table><table style="margin:0px;table-layout:fixed;border:none;width:345pt" width="460" cellspacing="0" cellpadding="0"><tbody><tr><td><hr style="background:none 0% 0% repeat scroll rgb(41,59,121);width:100%;height:4px;color:rgb(41,59,121);margin:0px"></td></tr></tbody></table><table style="margin:0px;table-layout:fixed;border:none;width:345pt" width="460" cellspacing="0" cellpadding="0"><tbody><tr><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:30.75pt;text-align:left"><div>Lyra Network, 109 rue de l'innovation, 31670 Labège, FRANCE</div></td></tr></tbody></table><div><br></div></div><br></span><hr id="gmail-m_-4092040025727675175zwchr"><div><b>De: </b>"Nelson Lameiras" <<a href="mailto:nelson.lameiras@lyra-network.com" target="_blank">nelson.lameiras@lyra-network.<wbr>com</a>><br><b>À: </b>"ovirt users" <<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>><br><b>Envoyé: </b>Mercredi 7 Juin 2017 14:59:48<br><b>Objet: </b>[ovirt-users] ISCSI storage with multiple nics on same subnet disabled on host activation<br></div><br><div><div style="font-family:arial,helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><div>Hello,<br></div><br><div>In our oVirt hosts, we are using DELL equallogic SAN with each server connecting to SAN via 2 physical interfaces. Since both interfaces share the same network (Equalogic limitation) we must configure sysctl to to allow iSCSI multipath with multiple NICs in the same subnet :<br></div><div><div class="gmail-h5"><br><div>------------------------------<wbr>------------------------------<wbr>------------------------------<wbr>--<br></div><div><pre>net.ipv4.conf.p2p1.arp_ignore=<wbr>1
net.ipv4.conf.p2p1.arp_<wbr>announce=2
net.ipv4.conf.p2p1.rp_filter=2
net.ipv4.conf.p2p2.arp_ignore=<wbr>1
net.ipv4.conf.p2p2.arp_<wbr>announce=2
net.ipv4.conf.p2p2.rp_filter=2<br><br></pre><p>------------------------------<wbr>------------------------------<wbr>------------------------------<wbr>--<br><br></p><p>This works great in most setups, but for a strange reason, on some of our setups, the sysctl configuration is updated by VDSM when activating a host and the second interface stops working immeadiatly :</p><div>------------------------------<wbr>------------------------------<wbr>------------------------------<wbr>--</div><div>vdsm.log<br></div><div><pre id="gmail-m_-4092040025727675175preview"><code>2017-06-07 11:51:51,063+0200 INFO (jsonrpc/5) [storage.ISCSI] Setting strict mode rp_filter for device 'p2p2'. (iscsi:602)
2017-06-07 11:51:51,064+0200 ERROR (jsonrpc/5) [storage.HSM] Could not connect to storageServer (hsm:2392)
Traceback (most recent call last):
File "/usr/share/vdsm/storage/hsm.<wbr>py", line 2389, in connectStorageServer
conObj.connect()
File "/usr/share/vdsm/storage/<wbr>storageServer.py", line 433, in connect
iscsi.addIscsiNode(self._<wbr>iface, self._target, self._cred)
File "/usr/lib/python2.7/site-<wbr>packages/vdsm/storage/iscsi.<wbr>py", line 232, in addIscsiNode
iscsiadm.node_login(<a href="http://iface.name" target="_blank">iface.name</a><wbr>, target.address, target.iqn)
File "/usr/lib/python2.7/site-<wbr>packages/vdsm/storage/<wbr>iscsiadm.py", line 337, in node_login
raise IscsiNodeError(rc, out, err)</code></pre><pre><br><br></pre><p style="margin:0px">------------------------------<wbr>------------------------------<wbr>------------------------------<wbr>--</p></div></div></div></div><div><div><div class="gmail-h5"><br><div>"strict mode" is enforced for second interface, and it no longuer works...</div><div>Which means - at least - that there is no redundancy in case of hardware faillure and this is not acceptable for our production needs.<br></div><br><div>What is really strange is that we have another "twin" site on another geographic region with simillar hardware configuration and same oVirt installation, and this problem does not happen.<br></div></div></div><div>Can this be really random?<br></div><span class="gmail-">What can be the root cause of this behaviour? How can I correct it?<br><br><div>our setup:</div></span><div>oVirt hostedEngine : Centor 7.3, ovirt 4.1.2<br></div><div>3 physical oVirt nodes centos 7.3, ovirt 4.1.2<br></div><div>SAN DELL Equalogic<br></div></div><span class="gmail-"><br><div><div>cordialement, regards,</div><br><table style="margin:0px;table-layout:fixed;border:none;width:345pt;padding:0px" width="460" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:86.25pt;text-align:left" width="115" valign="top"><a href="https://www.lyra-network.com/" style="border:none;text-decoration:none;width:100%;display:block;clear:both" target="_blank"><img src="cid:6fa8666d679e18cab5e566228d0ca3519aabec27@zimbra" alt="" width="115" border="0" height="94"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:258.75pt" width="345" valign="top"><table style="margin:0px;width:258.75pt;table-layout:fixed;border:none" width="345" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td style="font-size:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:18px;font-weight:bold">Nelson LAMEIRAS</td></tr><tr><td style="font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px;line-height:16px">Ingénieur Systèmes et Réseaux<span style="font-family:Arial,sans-serif;color:rgb(51,122,183);font-size:11px"> / Systems and Networks engineer</span></td></tr><tr><td style="line-height:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px"><span style="font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px">Tel: <a href="tel:+33%205%2032%2009%2009%2070" value="+33532090970" target="_blank">+33 5 32 09 09 70</a></span></td></tr><tr><td style="line-height:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px"><a href="mailto:nelson.lameiras@lyra-network.com" style="font-size:11px;font-family:Arial,sans-serif;line-height:16px;text-decoration:none" target="_blank">nelson.lameiras@lyra-network.<wbr>com</a><br></td></tr><tr><td style="line-height:16px;font-family:Arial,sans-serif;color:rgb(43,60,122);font-size:11px"><a href="https://www.lyra-network.com/" style="font-size:11px;font-family:Arial,sans-serif;line-height:16px;border:none;text-decoration:none" target="_blank">www.lyra-network.com</a> <a href="https://payzen.eu" style="font-size:11px;font-family:Arial,sans-serif;line-height:16px;border:none;text-decoration:none" target="_blank"> | www.payzen.eu</a><br></td></tr></tbody></table></td></tr></tbody></table><table style="margin:0px;table-layout:fixed;border:none;width:345pt" width="460" cellspacing="0" cellpadding="0"><tbody><tr><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:24pt;text-align:left" width="32" valign="top"><a href="https://www.youtube.com/channel/UCrVl1CO_Jlu3KbiRH-tQ_vA" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:32px" target="_blank"><img src="cid:2806a89cb9fbba6f879bd3fd54a93b515defd6d2@zimbra" alt="" width="32" border="0" height="28"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:30.75pt;text-align:left" width="41" valign="top"><a href="https://www.linkedin.com/company/lyra-network_2" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:41px" target="_blank"><img src="cid:878634ba055bb6ae851a7ef4540f754afa3ff86c@zimbra" width="41" border="0" height="28"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:31.5pt;text-align:left" width="42" valign="top"><a href="https://twitter.com/LyraNetwork" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:42px" target="_blank"><img src="cid:18a767bbdad6a1133fc4152b03ea78228ce25a14@zimbra" alt="" width="42" border="0" height="28"></a><br></td><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:258.75pt;text-align:left" width="345" valign="top"><a href="https://payzen.eu" style="border:none;text-decoration:none;margin:0px;float:left;display:inline-block;width:61px" target="_blank"><img src="cid:d3fc119a0aa72bf985c19ca559c993b5b4b54ca3@zimbra" alt="" width="61" border="0" height="28"></a><br></td></tr></tbody></table><table style="margin:0px;table-layout:fixed;border:none;width:345pt" width="460" cellspacing="0" cellpadding="0"><tbody><tr><td><hr style="background:none 0% 0% repeat scroll rgb(41,59,121);width:100%;height:4px;color:rgb(41,59,121);margin:0px"></td></tr></tbody></table><table style="margin:0px;table-layout:fixed;border:none;width:345pt" width="460" cellspacing="0" cellpadding="0"><tbody><tr><td style="margin:0px;font-size:11px;font-family:Arial,sans-serif;color:rgb(43,60,122);line-height:16px;width:30.75pt;text-align:left"><div>Lyra Network, 109 rue de l'innovation, 31670 Labège, FRANCE</div></td></tr></tbody></table><br></div></span></div><br>______________________________<wbr>_________________<br>Users mailing list<br><a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br><a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br></div></div></div><br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br>
<br></blockquote></div><br></div></div>