apache / apache/cloudstack

DNS service not working for System VMs on a fresh new install Cloudstack

Open
#7,473 10 comments 0 reactions 0 assignees View on GitHub
no-issue-activity status:needs-investigation status:needs-reproducing status:stale type:question
Dominant language
Java
Stars
3.1k
Forks
1.4k
Avg merge
6d 19h
Merged PRs (30d)
32

Description

##### ISSUE TYPE

* Other

##### COMPONENT NAME

~~~
UI, System VMs
~~~

##### CLOUDSTACK VERSION

~~~
CloudStack 4.18
~~~

##### CONFIGURATION

Zone with default Advanced networking with Isolation method as VLAN
Zone has only one "Physical Network 1" with all traffic types Guest, Management, Public, Storage passing through it
KVM
Management Server and KVM Host are same. Its a testing environment
OpenVswitch and DPDK enabled and created bridge interface using OpenVswitch commands
Primany and Secondary with NFS mount points

##### OS / ENVIRONMENT

Ubuntu 22.04.2 LTS
Codename: jammy

##### SUMMARY

The System VMs Agent state is not Up

##### STEPS TO REPRODUCE

~~~
Install a fresh new Ubuntu 22.04 LTS server
Enable OpenVswitch and dpdk over the interface and create bridge interface
Perform the install of cloudstack on a server. Also make this server as KVM Host.
Configure Cloudstack as zone with default advanced networking
Zone has only one "Physical Network 1" with all traffic types Guest, Management, Public, Storage
passing through it
~~~

##### EXPECTED RESULTS

~~~
The System VMs Agent state is OK
~~~

##### ACTUAL RESULTS

~~~
After the Cloudstack install and basic configuration of zone,

Go system vms section, we notice the state is "running" but the Agent state is not "OK"

Accessed one of the system vm using commands like ssh -i /root/.ssh/id_rsa.cloud -p 3922 root@link-local

Issued command /usr/local/cloud/systemvm/ssvm-check.sh

Noticed error ERROR: DNS not resolving cloudstack.apache.org

Confirmed Google DNS server is there at resolv.conf

Checked the service cloud status and noticed the system vm can't communicate with port 8250 of management server
over the management server IP

Further troubleshooting shows from inside system vm, only able to ping management server IP
but no connection with any active ports of management server like ssh port , management ports like 8250 etc

While checking the traffic over the bridge interface using ovs-tcpdump , we have noticed the
incoming traffic from system vms towards bridge interface are reaching but no outgoing response
towards system vms. Below is a sample captured traffic at bridge interface over
cloudstack port number 8250. We believe that we setup the openvswitch dpdk setup correctly
and not sure what we are missing from our side.

12:08:52.312394 IP SVMIP.33940 > MGMTIP.8250: Flags [S], seq 3467199111, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
<.............E..4\.@.@.....?...?... :..B.........................
12:08:53.314315 IP SVMIP.33940 > MGMTIP..8250: Flags [S], seq 3467199111, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0

issued the command "ovs-ofctl dump-flows cloudbr0" and got below result. Looks like the rule is fine

cookie=0x0, duration=148279.131s, table=0, n_packets=7453119, n_bytes=2575374706, priority=0 actions=NORMAL

Not sure what we are missing.

~~~

Contributor guide

Open the contributing guide

Research direction

Start with the System VM entry point `ssvm-check.sh` and reproduce the DNS and management-server port 8250 failures in the described Ubuntu 22.04, KVM, and Open vSwitch setup. Inspect the `cloudbr0` traffic and connectivity path; done means the System VM agent is OK, DNS resolves, and management-server connections receive responses.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux, ubuntu
Domain
infrastructure, networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.