RHBA-2015:1754 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse)
for RHEL 7.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issues:

• Previously, when using multiple subnets on an external network, traffic

between subnets would route through the upstream router first, resulting in
inefficiency.
This update addresses this issue by adding an on-link route to each subnet.
As a result, a router connected to an external network is attached to one
subnet, thus having one IP address. With this fix, the router stills consumes an
IP address from only one subnet, but also has an on-link route to all subnets.
(BZ#1185200)

• This enhancement optimizes 'logrotate' rules for OpenStack Networking

(neutron) by rotating logs more frequently to avoid excessive file system usage.

As a result of this update, OpenStack Networking log files are rotated based on
their size, among other criteria. (BZ#1213453)

• Previously, dnsmasq did not save lease information in persistent storage, and

when it was restarted, the lease information was lost. This behavior was a
result of the removal of the dnsmasq '--dhcp-script' option under BZ#1202392.
As a result, instances were stuck in the network boot process for a long period
of time. In addition, NACK messages were noted in the dnsmasq log.
This update addresses this issue by removing the authoritative option, so that
NAKs are not sent in response to DHCPREQUESTs to other servers. This change is
expected to prevent dnsmasq from NAKing clients renewing leases issued before it
was restarted/rescheduled, with the result that no DHCPNAK messages can be found
in the log files. (BZ#1227638)

• Previously, the Open vSwitch core plugin id not use 'vif_details' when

providing port binding information to Compute (nova).
Consequently, during migration from the OVS plugin to ML2 there was no
definitive source for the 'vif_details' column in the database.
With this update, the migration script now provides optional parameters for
injecting filtering and hybrid plugging into the vif_details column. The
available parameters are:

• -port-filter to enable filtering on port.
• -no-port-filter to disable filtering on port.
• -hybrid-plug to enable hybrid plugging in Compute.
• -no-hybrid-plug to disable hybrid plugging in Compute.

As a result, when using provided parameters, the OpenStack Networking (neutron)
database table is populated with vif details, and the later ml2 plugin
successfully passes vif_details to Compute, resulting in correct port creation.
(BZ#1247096)

• This rebase package includes a notable enhancement under version 2014.1.5:
• DHCP agent: This update adds stability and error resilience enhancements.

(BZ#1254702)

• Previously, there was a race condition that could occur when both the client

and broker raced over Exchange creation/deletion. This occurred only when the
Queue/Exchange were created with the auto-delete flag.
This update addresses this issue by adding a retry queue to workaround the race
condition. (BZ#1251370)

• This enhancement enables changes to a subnet's IP address allocation pool

using the update command. Previously, administrators were unable to change the
allocation pool range for a subnet.
Note: if shrinking the pool, consideration must be given to IP addresses that
have already been allocated. (BZ#1243801)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 5 runs on Red Hat Enterprise
Linux 7.1.

The Red Hat Enterprise Linux OpenStack Platform 5 Release Notes contain the
following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 5,

including which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/index.html

This update is available through the Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat OpenStack 5.0 for RHEL 7 x86_64

Fixes

• BZ - 1185200 - [RFE][Neutron] Backport add onlink route when multiple external subnets
• BZ - 1227638 - DHCPNAK after neutron-dhcp-agent restart
• BZ - 1254702 - Rebase openstack-neutron to 2014.1.5

CVEs

(none)

References

(none)