3 September 2014

Bruce Reeler

Red Hat Enterprise Linux OpenStack
Platform 5

Technical Notes for RHEL6.5

Release

Technical Notes for Red Hat Enterprise Linux OpenStack Platform and
supporting packages.

Red Hat Enterprise Linux OpenStack Platform 5 Technical Notes for
RHEL6.5 Release

Technical Notes for Red Hat Enterprise Linux OpenStack Platform and
supporting packages.

3 September 20 14

Bruce Reeler
Red Hat Do cumentatio n Team

Legal Notice

Co pyright © 20 13-20 14 Red Hat, Inc.

This do cument is licensed by Red Hat under the

Creative Co mmo ns Attributio n-ShareAlike 3.0

Unpo rted License

. If yo u distribute this do cument, o r a mo dified versio n o f it, yo u must pro vide

attributio n to Red Hat, Inc. and pro vide a link to the o riginal. If the do cument is mo dified, all Red
Hat trademarks must be remo ved.

Red Hat, as the licenso r o f this do cument, waives the right to enfo rce, and agrees no t to assert,
Sectio n 4 d o f CC-BY-SA to the fullest extent permitted by applicable law.

Red Hat, Red Hat Enterprise Linux, the Shado wman lo go , JBo ss, MetaMatrix, Fedo ra, the Infinity
Lo go , and RHCE are trademarks o f Red Hat, Inc., registered in the United States and o ther
co untries.

Linux ® is the registered trademark o f Linus To rvalds in the United States and o ther co untries.

Java ® is a registered trademark o f Oracle and/o r its affiliates.

XFS ® is a trademark o f Silico n Graphics Internatio nal Co rp. o r its subsidiaries in the United
States and/o r o ther co untries.

MySQL ® is a registered trademark o f MySQL AB in the United States, the Euro pean Unio n and
o ther co untries.

No de.js ® is an o fficial trademark o f Jo yent. Red Hat So ftware Co llectio ns is no t fo rmally
related to o r endo rsed by the o fficial Jo yent No de.js o pen so urce o r co mmercial pro ject.

The OpenStack ® Wo rd Mark and OpenStack Lo go are either registered trademarks/service
marks o r trademarks/service marks o f the OpenStack Fo undatio n, in the United States and o ther
co untries and are used with the OpenStack Fo undatio n's permissio n. We are no t affiliated with,
endo rsed o r spo nso red by the OpenStack Fo undatio n, o r the OpenStack co mmunity.

All o ther trademarks are the pro perty o f their respective o wners.

Abstract

These Technical No tes are pro vided to supplement the info rmatio n co ntained in the text o f Red
Hat Enterprise Linux OpenStack Platfo rm errata adviso ries released via Red Hat Netwo rk.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Table of Contents

⁠Chapt er 1 . O verview

⁠Chapt er 2 . RHEA- 2 0 1 4 :0 9 53 — Red Hat Ent erprise Linux O penSt ack Plat form Enhancement -
Net working

⁠2.1. o p enstack-neutro n

Revision Hist ory

⁠Index

2

3
3

5

5

T able of Cont ent s

1

Chapter 1. Overview

These Technical Notes are provided to supplement the information contained in the text of Red Hat
Enterprise Linux OpenStack Platform errata advisories released through Red Hat Network. If the text
for an advisory's problem description is too lengthy to fit into the advisory itself, bug listings for that
advisory are published as a chapter in this document.

The following table contains the list of errata advisories for this version.

T ab le 1.1. Errat a Ad viso ries

Release

Ad viso ries

5.0.1

Errata chapters:

Chapter 2, RHEA-2014:0953 — Red Hat Enterprise Linux OpenStack Platform Enhancement
- Networking

Additional errata include:

Enhancement advisories issued July 2014:

RHEA-2014:0958

- Compute.

RHEA-2014:0957

- Identity.

RHEA-2014:0928

- Runtime Components

RHEA-2014:0956

- Image Service

RHEA-2014:0955

- Block Storage

RHEA-2014:0950

- PackStack

RHEA-2014:0954

- Telemetry

RHEA-2014:0952

- Orchestration

RHEA-2014:0959

- Dashboard

RHEA-2014:0951

- Object Storage

Advisories issued September 2014:

RHBA-2014:1124

- PackStack and puppet-modules bug fix advisory.

RHBA-2014:1126

- Compute bug fix update.

RHBA-2014:1128

- Block Storage bug fix advisory.

RHBA-2014:1130

- Image bug fix advisory.

RHBA-2014:1134

- Orchestration bug fix advisory.

RHBA-2014:1132

- Telemetry bug fix advisory.

RHBA-2014:1117

- Red Hat Enterprise Linux OpenStack Platform Bug Fix and

Enhancement Advisory.

RHSA-2014:1122

- Low: Identity security and bug fix update.

RHBA-2014:1136

- Dashboard bug fix update.

RHSA-2014:1120

- Moderate: OpenStack Networking security, bug fix, and

enhancement update.

These September packages include rebases to 2014.1.2 for Compute, Block
Storage, Image, Orchestration, Telemetry, Identity, Dashboard, and OpenStack
Networking; and Open vSwitch package 2.1.2.

Red Hat Ent erprise Linux O penSt ack Plat form 5 T echnical Not es for RHEL6 .5 Release

2

Chapter 2. RHEA-2014:0953 — Red Hat Enterprise Linux
OpenStack Platform Enhancement - Networking

The bugs contained in this chapter are addressed by advisory RHEA-2014:0953. Further information
about this advisory is available at

https://rhn.redhat.com/errata/RHEA-2014-0953.html

.

2.1. openst ack-neut ron

BZ #

109 14 12

Openstack services rely heavily on JSON for their interactions. Red Hat
Enterprise Linux 6.5 still uses Python 2.6, which does not provide the
'json' module with major speed optimisations that can be found in Python
2.7+ and recent versions of 'simplejson' module. As a result, JSON
operations took a lot of processing time and slowed down the whole service.

With this update, OpenStack Networking (neutron) now uses the 'simplejson'
library on Red Hat Enterprise Linux 6.5 to get access to JSON speed
optimisations. The performance of JSON operations and the service as a whole
is now significantly increased.

BZ #

109 4 506

In Red Hat Enterprise Linux OpenStack Platform 5.0, OpenStack Networking
notifies Compute about port status changes, and to do so it requires
Identity credentials in the file neutron.conf.

Prior to this update, an instance's network ports were not created if the
Compute (nova) API configuration was missing from neutron.conf.

This update addresses this issue by disabling 'nova-neutron' notifications
by default in Red Hat Enterprise Linux OpenStack Platform 5.0.

As a result, instances will boot without dependency on the notification
feature. Enabling Compute's notifications is recommended in order to
mitigate race behavior issues.

This is managed in the following neutron.conf parameters:
notify_nova_port_status_changes=true
notify_nova_on_port_data_changes=true
nova_url=http://[nova_api]:[nova_api_port]/v2
nova_admin_username=[admin_username]
nova_admin_password=[admin_password]
nova_admin_tenant_id=[admin_tenant_id]
nova_admin_auth_url=http://[keystone_service_ip]:[keystone_port]/v2.0

With this workaround in place, OpenStack Networking will correctly notify
Compute of port changes.

BZ #

109 859 6

An argument that would make the agent read the /etc/neutron/fwaas_driver.ini
configuration file was missing in the previous release's neutron-vpn-agent
service files. As a result, neutron-vpn-agent didn't apply configuration
from the configuration file. At the same time, the L3 agent that is replaced
by neutron-vpn-agent did read the file. This introduced inconsistency in how
different L3 agents were configured.

⁠Chapt er 2 . RHEA- 2 0 1 4 :0 9 53 — Red Hat Ent erprise Linux O penSt ack Plat form Enhancement - Net working

3

The service files have been updated so that the configuration file is now
read on agent startup, and configuration from the file is applied for
neutron-vpn-agent.

BZ #

1101315

Previously, the OpenStack Networking (neutron) package did not depend on the
iproute2 version with network-namespace support. This meant that OpenStack
Networking was installed, but failed to operate with network namespaces.

An explicit dependency has been added to either install or update iproute2
to a version with network-namespace support. OpenStack Networking can now
operate with network namespaces.

BZ #

1117818

When deleting a port, under some circumstances a deadlock occurred when two
inter-dependent threads attempted to access the same database row.

This resulted in the database library returning an OperationalError after a
delay of approximately 50 seconds.

This has been fixed by moving notifications which could cause this type of
conflict to outside the database transaction.

Now, these types deadlock do not occur.

BZ #

11184 84

With this release, openstack-neutron is now rebased to upstream version
2014.1.1. This rebase applies the following updates:

* OVS agent now handles 'openvswitch service restart' correctly.
* Querying for security groups is optimized.
* The router-list command performance is optimized, reducing the average
time of the operation for 10-30%.
* Multiple updates to VMware NSX, Cisco N1KV, and other plugins.

Red Hat Ent erprise Linux O penSt ack Plat form 5 T echnical Not es for RHEL6 .5 Release

4

Revision History

Revisio n 5.0.0- 3

Wed Sep t 3 2014

Bru ce Reeler

Updated to include advisories released in Sept. 2014.

Revisio n 5.0.0- 2

Mo n Sep t 1 2014

Bru ce Reeler

Incremented revision number to test portal splash page docs order.

Revisio n 5.0.0- 1

T u e Ju ly 29 2014

Bru ce Reeler

Final revision for Red Hat Enterprise Linux OpenStack Platform 5.0.1 on RHEL 6.5.

Index

Revision Hist ory

5