Bugcentos6.5

ReleaseNotesforContrailRelease2.
21Release2.
21October2015ContentsIntroduction2NewandChangedFeatures2DiscoveryClientsHonorDiscoveryServerResponse2DiscoveryClientLibraryProvidesPublishReevaluation3Layer3OnlyForwardingMode3ImprovedISSUSupportinQFXSeriesTORSwitches4SupportedPlatforms4KnownBehavior4KnownIssues5UpgradingContrailSoftwarefromRelease2.
00orGreatertoRelease2.
2011DocumentationUpdates14DocumentationFeedback14RequestingTechnicalSupport14Self-HelpOnlineToolsandResources14OpeningaCasewithJTAC15RevisionHistory151Copyright2015,JuniperNetworks,Inc.
IntroductionJuniperNetworksContrailisanopen,standards-basedsoftwaresolutionthatdeliversnetworkvirtualizationandserviceautomationforfederatedcloudnetworks.
Itprovidesself-serviceprovisioning,improvesnetworktroubleshootinganddiagnostics,andenablesservicechainingfordynamicapplicationenvironmentsacrossenterprisevirtualprivatecloud(VPC),managedInfrastructureasaService(IaaS),andNetworksFunctionsVirtualization(NFV)usecases.
ThesereleasenotesaccompanyRelease2.
21ofJuniperNetworksContrail.
Theydescribenewfeatures,limitations,andknownproblems.
.
ThesereleasenotesaredisplayedontheJuniperNetworksContrailDocumentationWebpageathttp://www.
juniper.
net/techpubs/en_US/contrail2.
20/information-products/topic-collections/release-notes/index.
html.
NewandChangedFeaturesThefeatureslistedinthissectionareneworchangedasofContrailRelease2.
20.
Abriefdescriptionofeachnewfeatureisincluded.
DiscoveryClientsHonorDiscoveryServerResponseonpage2DiscoveryClientLibraryProvidesPublishReevaluationonpage3Layer3OnlyForwardingModeonpage3ImprovedISSUSupportinQFXSeriesTORSwitchesonpage4SupportedPlatformsonpage4DiscoveryClientsHonorDiscoveryServerResponseOncetheload-balanceristriggered,thediscoveryserverrespondswithanewsetofserversinresponsetothesubscriber.
Clientsmusthonorthenewsetofservices,irrespectiveofthecurrentconnectionbeingupordown.
Thefollowingarerulestohonoringthenewsetofpublishedservices:Foractive-activeconnections,ifbothservicesaredisrupted,theclientappliesonlyoneserviceatatime.
Ifthediscoveryserverrespondswithasmallersubsetofservices,thestaleservicesarenotcleanedup.
IfthediscoveryserverrespondswithaNULLlist,theclientscontinuetofunctionwiththeolderlist.
ClientsnowsupportresubscribingiftheconnectionsaredetectedasbeingDOWN.
Forfasterconvergence,theclientwaitsatleast3intervals(heart-beattime(=15secs))totriggeraresubscriberequest.
Theintrospectcommandisprovidedtoviewthediscoverylistandthecurrentactiveconnections.
Copyright2015,JuniperNetworks,Inc.
2ReleaseNotes:ContrailController2.
21NOTE:Discoveryserversensureonlyonesetofservicesarechangedatanygiventime,buttheclientalsoneedstoensureithandlesthenewsetgracefully.
NOTE:Theabovefeatureappliestosubscribersthatmaintainactive-activeconnections.
DiscoveryClientLibraryProvidesPublishReevaluationThediscoverypublishreevaluationenhancementprovidesthefollowing:Theclientlibraryprovidestheabilitytopublishaservicewiththeoper-stateupordown.
Theapplicationmustregisteracallbacksotheservicecanbereevaluatedandtheoper-statecanbeupdatedaccordingly.
Reevaluationofapublishedserviceistriggeredeveryheartbeatinterval.
Thediscoveryservermusthonortheoperationalstateofpublishedservicesandprovideanewsetofservicesinresponsetothenextsubscriberequest.
Twonewstatesareintroduced,theadmin-stateandtheoper-statewhicharedisplayedinthediscovery-server:5998URL.
Clientscanchangetheoper-statebasedontheinternalstateofserviceswhichenablesthediscoveryservertodeallocateorreallocateresources.
Theadmin-statecanonlybechangesusingthepythonCLItopullservicespermanentlyDOWN.
Layer3OnlyForwardingModeContrailRelease2.
21andlatersupportstheintegratedroutingandbridging(IRB)modelinwhichthetrafficflowingwithinthesamesubnetisbridgedwhilethetrafficacrosssubnetsandvirtualnetworksisrouted.
ThismodeisreferredtoasLayer2plusLayer3(Layer2+Layer3)anditisthedefaultmodeinwhichaclusteroperatesandavirtualnetworkiscreated.
InLayer2plusLayer3mode,ARPrequestsareflooded.
TheContrailsolutionminimizesARPfloodingbyhavingthevRouterproxyforARPwherepossible.
Insomecasesitmightnotbedesirabletohavethistypeofflooding.
Itmightalsobedesirabletoruntheclusterorvirtualnetworkinthesamemodeusedinpreviousreleases.
Tosupportthis,ContrailRelease2.
21alsosupportsaLayer3onlymodeandaLayer2onlymode.
WhenLayer3-onlymodeisused:TheIProuteslearnedfromanIPVPNareusedtoroutethetrafficirrespectiveofwhetherthehostsareinthesamesubnet.
3Copyright2015,JuniperNetworks,Inc.
NewandChangedFeaturesTrafficcomingfromthefabricthatusesMPLSoverGRE(MPLSoGRE)orMPLSoverUDP(MPLSoUDP)encapsulation,isroutedatLayer3.
AnEVPNIPaddresstoMACaddressbindingisnotused.
Instead,anypacketwithadestinationMACaddressthatisnottheVRRPMACaddressandisnotanIProutablepacket,isbridged.
Theforwardingmodecanbeconfiguredatthegloballeveltosetthedefaultoritcanbesetatthevirtualnetworkleveltooverridethedefaultsettingandsetthemodeforaspecifiedvirtualnetwork.
ToconfiguretheglobalforwardingmodeintheContrailController,selectConfigure->GlobalConfig->ForwardingMode.
ToconfiguretheforwardingmodeofavirtualnetworkintheContrailController,selectConfigure->Networking->Create>Network->AdvancedOptions->ForwardingMode.
ImprovedISSUSupportinQFXSeriesTORSwitchesAContrailTORAgentretainstheMACaddresseslearnedfromaTORswitchforfiveminutesaftertheOVSDBprotocolconnectionbetweentheTORswitchandTORAgentgoesdown.
ThisavoidschurninroutedistributionforshortconnectiondropsandhelpsinsupportingISSUonaQFXSeriesswitch.
FormoreinformationabouttheimprovedISSUsupport,seetheReleaseNotes:JunosOSRelease14.
1X53-D30forQFXSwitches.
SupportedPlatformsContrailRelease2.
21,issupportedontheOpenStackJunoandIcehousereleases.
JunoissupportedonUbuntu14.
04.
2andCentos7.
1.
ContrailnetworkingissupportedonRedHatRHOSP5.
0,whichissupportedonlyonOpenStackIcehouseInContrailRelease2.
21,supportforVMwarevCenter5.
5.
vCenterislimitedtoUbuntu14.
04.
2(Linuxkernelversion:3.
13.
0-40-generic).
Othersupportedplatformsinclude:CentOS6.
5(Linuxkernelversion:2.
6.
32-358.
el6.
x86_64)CentOS7.
1(Linuxkernelversion:3.
10.
0-229.
el7)Redhat7/RHOSP5.
0(Linuxkernelversion:3.
10.
0-299.
el7.
x86_64)Ubuntu12.
04.
04(Linuxkernelversion:3.
13.
0-34-generic)Ubuntu14.
04.
(Linuxkernelversion:3.
13.
0-40-generic)KnownBehaviorThefollowingareknownbehaviorsinthisreleaseofContrail.
DNSrecordupdatesfromacontrollerDNSservertoanamedservermightbemissingevenafterrepeatedretries.
thisisbecausethereisnoinfrastructurecurrentlytosyncrecordsacrossnamedservers.
Copyright2015,JuniperNetworks,Inc.
4ReleaseNotes:ContrailController2.
21DNSqueriesfromanagentarenowsenttobothnamedserversthatwerelearntusingdiscovery.
Thereisaverylowprobabilityofrecordsmissingonbothnamedservers.
ThefirstgoodresponsefromeitherofthenamedserversisusedtoupdatetheDNSclientthatsenttheDNSqueryrequest.
Ifthereisnogoodresponse,thelastbadresponseissenttotheDNSclienttoinformtheclientoftheerror.
Usethefollowingtodisplayalistofnamedserverstowhichqueriesaresent:http://x.
x.
x.
x:8085/Snh_DnsInfooUsethefollowingtotracethequeriessentandresponses:http://x.
x.
x.
x:8085/Snh_SandeshTraceRequestx=DnsBindKnownIssuesThissectionlistsknownlimitationswiththisrelease.
BugnumbersarelistedandcanberesearchedinLaunchpad.
netathttps://bugs.
launchpad.
net/.
Storage:1497047InContrailRelease2.
20andearlier,ifaCassandranodeisofflineforoneminuteorlongerandthenbroughtbackonline,itmightcorruptthedatabase.
InContrailRelease2.
21andlater,aCassandranodecanbeofflineforuptothreehoursandthenbroughtbackonlinewithoutcorruptingthedatabase.
IftheCassandranodeisofflineformorethanthreehours,youneedtoperformthefollowingprocedure:AftertheCassandranodejoinstheCassandracluster,youmustusethenodetoolrepaircommandIftheCassandranodeisofflineformorethantendays,itshouldnotbebroughtbackonline.
Instead,youneedtoremovetheCassandranodeusingthenodetoolremovenodecommandandtheassociatedprocedure.
Theprocedurecanbeaccessat:http://docs.
datastax.
com/en/cassandra/1.
2/cassandra/operations/ops_remove_node_t.
htmlAftertheprocedureiscomplete,youcanaddthenodebackasanewnode.
ContrailNetworking:1501951UpgradingfromContrailRelease2.
20Build64toContrailRelease2.
21build102failsduetoaRabbitmqclustercrash.
Tocorrecttheproblem,youmustreprovisionthewholecluster.
1499169TousetheContrailRelease2.
21package,youmustupgradeServerManagerfromRelease2.
20toRelease2.
21.
SeetheServerManagerupgradeprocedurefortheRelease2.
21upgrade.
1499546AconfigurationflaghasbeenaddedthatcontrolstheabilitytosendflowsamplesfromavRoutertoacollector.
Whenthedisable_flow_collectionflagisset,thevRouterdoesnotsendflowsamplestothecollector.
5Copyright2015,JuniperNetworks,Inc.
KnownIssues1484297TheCassandragc_grace_secondsvalueneedstobechangedforkeyspacesthatdodeletestothedefaultvalueof10daystohandlenodedownscenariosandtopreventdeleteddatafromshowingupsincethetombstonesarestoredforonlythegc_grace_secondstime.
ThenodetoolrepaircommandneedstoberunontheCassandranodesperiodicallytopreventtheseissues.
1496606Youusethefabinstall_new_contrailandfabjoin_clustercommandstoaddanewcontrolnodetoaclusterthatisalreadyprovisioned.
Thefabjoin_clustercommandsucceedsonlyifthenewlyaddedcontrolnodeis"up"intherabbitmqctlcluster_statuscommandoutput.
Alsobeforepurginganexistingcontrolnode,youneedtoverifyifthecontrolnodeisdisplayedintherabbitmqctlcluster_statuscommandoutput.
Forexample:root@a12c4s2:/opt/contrail/utils#rabbitmqctlcluster_statusClusterstatusofnode'rabbit@a12c4s2-ctrl'.
.
.
[{nodes,[{disc,['rabbit@a12c3s3-ctrl','rabbit@a12c3s4-ctrl','rabbit@a12c4s2-ctrl']}]},{running_nodes,['rabbit@a12c3s4-ctrl','rabbit@a12c3s3-ctrl','rabbit@a12c4s2-ctrl']},{cluster_name,>},{partitions,[]}]root@a12c4s2:/opt/contrail/utils#mysql-uroot-p$(cat/etc/contrail/mysql.
token)-e"showstatuslike'wsrep%'"|wsrep_cert_index_size|41||wsrep_causal_reads|145146||wsrep_incoming_addresses|5.
5.
5.
5:3306,5.
5.
5.
6:3306,5.
5.
5.
4:3306||wsrep_cluster_conf_id|60||wsrep_cluster_size|3||wsrep_cluster_state_uuid|3c0286Verifythatthehostnameofthenewcontrolnodeislistedintherabbitmqctlcluster_statuscommandoutputandtheIPaddressofthenewcontrolnodeislistedinthewsrep_incoming_addressesfield.
1496605Whenaddinganewcontrolnodeusingthefabinstall_new_contrailcommand,thecommandexpectsthenewcontrolnodetobeaddedtotheendofeachroledefinitioninthetestbed.
pyfile.
Forexample,inthefollowingtestbed.
pyfileexample,host2isthenewlyaddedcontrolnode.
#Roledefinitionofthehosts.
env.
roledefs={'all':[host3,host4,host5,host1,host2],'cfgm':[host3,host5,host1,host2],'openstack':[host3,host5,host1,host2],'control':[host3,host5,host1,host2],'compute':[host4],'collector':[host3,host5,host1,host2],'webui':[host3,host5,host1,host2],'database':[host3,host5,host1,host2],Copyright2015,JuniperNetworks,Inc.
6ReleaseNotes:ContrailController2.
21'build':[host_build],}Thisconstraintmightberemovedinafuturerelease.
1491644WhenbaremetalserversarebehindanMXSeriesrouter,MXredundancyisprovisionedinthenetwork,andabaremetalserverpingsanotherbaremetalserver,theARPcacheofthefirstbaremetalserverforthesecondbaremetalserverispoisonedwiththevRoutercomputenode'sMACaddressThisleadstoconnectivityfailurebetweenthetwobaremetalserver.
ThecauseisthatwhentheARPrequestfromBMS1isfloodedtoacomputenodebytheMXSeriesrouter,thevRouterdoesthesourceIPaddresslookupforthebaremetalserverIPaddressintheinet(IPv4)routetable.
ThislookupresultsinthesubnetroutepointingtotheECMPnexthopoftwoMXSeriesrouters.
ThismakesthevRouterrespondwiththevirtualhost'sMACaddresstoforcethepacketstoLayer3processingthoughtheARPrequestisnotmeantforanyVMsinthatcomputenode.
1496609Foracontrolnodetoparticipateinhighavailabilityproperly,allthecontrolnodesmusthaveauniquepriority.
Whenaddinganewcontrolnodetoanalreadyprovisionedhighavailabilityenabledcluster,theuniquenessinthepriorityacrossthecontrolnodeisnotautomatic.
Youneedtoadjustthevaluestoensureuniquenessasfollows:1.
Stopthekeepalivedprocessusingtheservicekeepalivedstopcommand2.
Editthe/etc/keepalived/keepalived.
conffileinallthecontrolnodesandmodifythepriorityunderthevrrp_instanceINTERNAL*andvrrp_instanceEXTERNAL*configurationsection,sothatallthecontrolnodeshaveuniquevalues.
3.
Startthekeepalivedprocessusingtheservicekeepalivedstartcommand.
1495697Whenyouaddanewcontrolnodeusingthefabinstall_new_contrailcommandtoaclusterthatisalreadyprovisioned,thereisapossibilitythatthecommandmightfailduetoatimingissue.
Eventhoughthiscommandreportsfailure,itactuallydoeseverythingasexpected.
Youcanproceedusingthefabjoin_clustercommandasthenextstepforaddinganewcontrolnode.
1474258WhentheHTTPportisalreadyusedbyanotherinstance,theTORAgentcrashesatstaticinit.
1462990WhenaTORagentswitchoveroccursontheContrailcontroller,theOVScontrolleraddresschangestotheTSN.
Inthisscenario,thereisadelayofuptotwominutesbetweentheOVSbeingupdatedintheQFXSeriesswitchandthefirstmulticastpacketreachingtheTSNnode.
1404846InJuno,VPCVMlaunchisfailingVPCAPIisnotsupportedwithJuno.
Itsplannedtobesupportedinsubsequentrelease.
1464606Vtep-ctlisonlyabletolist7MACaddresses.
TheTORagentislearningfewerMACaddressesthanareactuallypresent.
1465744Contrail/MXinteropwhenaVMisusingSNATtoreachabaremetalserverfloatingIPaddress.
ThishappensonlyincaseswhereaSNATinstanceanddestinationFloatingIPaddressareonthesamecomputenode.
7Copyright2015,JuniperNetworks,Inc.
KnownIssues1466777Thereisaneedtoimproveapi-serverandschemainitializationtimesinascaledsetup.
Onhighlyscaledsetupsittakesupto40minutesforanAPIserverandschematransformertoconverge.
1466731AQFXSeriesswitchdoesnothandletransientduplicateVxLANIDsfortwodifferentVNs.
IfaVNisdeletedandaddedquicklytheTORswitchmaygointoabadstate.
1468685Centos6.
5icehouse-singlenodesetupconfigprocessesarekilledafteranodereboot.
AsinglenodeCentosinstallationrunsintoanAPIserverexception.
1469366InaDeviceManagersetupwhichhasanMXSeriesrouterconfiguredforavirtualnetwork,iftheMXSeriesrouterisdownandthencomesbackup,thelatestconfigurationisnotpushed.
1475028OneContrailcontrollercangetstuckinitializingforabout5minutes.
Whenthishappens,anothercontrollerisinitializedandthefirstonemovestoabackuprole.
1484600WhenadeviceismovedfromoneQFXSeriesswitchtoanotherSeriesswitch,theMACaddressisnotlearnedontheswitchforaperiodupto12minutes.
1486387Ifyouconfigurecomputeandconfigservicesinthesamenode,youmustusethefabsetup_nova_aggregatecommandafterthenodeisrebooted.
Ifthecommandisnotused,setup_nova_aggregatewillnevergetexecuted.
1491202TheTSNstopsreplicatingbroadcastpacketsafterbroadcastpacketswithapayloadof1400bytesaresent.
1491791Whenthemcast_controllergetsswitchedaspartofacontrolnodeswitchoverthereis6secondsofmulticasttrafficloss.
1493861Whenclearingthesetupusedforinter-VNcommunication,thecomputenodemightcrash.
1414850InterfacescreatedforlogicalroutersandotherconstructsthatarenotonvRouters,donotgetaccountedforinthedashboard.
1403348Ifyouattachandthendetachasecuritygroup,thetransparentfirewallserviceinterfacedoesnothaveaninternalsecuritygroup.
1447401OnmultipleVMsinaDockercluster,theyinvariablyendupononecomputeonly.
1454813SetupofavCenterfailsifthesamedv_portordv_switchnameispartofmultipledatacenters.
1455944WhencreatingnovainstancesinDockercontainers,theuser-datascriptisnotexecuted.
1457854IfyoutrytocreateananalyzerVMwithcontrail_flavor_smallconfigured,theVMisnotcreatedbutmultipleinstancesarerespawnedandallareinanerrorstate.
1458794DNSconfigurationinDockercontaineriswrong.
ADockerinstancedoesnotlearntheDNSaddressprovidedbythevVrouter.
1459505Anxmpppeerisnotdeleteduntilthereplicatedroutesaregone.
Copyright2015,JuniperNetworks,Inc.
8ReleaseNotes:ContrailController2.
211460241Ifyoucreatetwelvevirtualroutersattachedtoasinglelogicalrouterandthencleartherouter,Neutronexperiencesanerror.
1461791WhenserversinaclusterarereimagedwithanESXISOimage,onlyoneserverissuccessfullyreimaged,allotherserversinthatclusterwillbere-imaginginaloop.
1463622Ifyoucreatemultiplecomputenodesandmultiplevirtualmachines,returntrafficfromservertoclientconvergesonasinglelabel.
Eventually,alltheflowsconvergeononeVMoneachcomputenode.
1463786Ifyoucreatethousandsoflogicalinterfacesandthousandsofvirtualmachineinterfaces,deletingalltheinterfacesusingtheWebuserinterfacemightresultintheToomanypendingupdatestoRabbitMQ:4096error.
1465372IfabaremetalserverandaSNATinstanceareattachedtoapublicnetworkandapacketissentfromthenetworknamespace(netns)instancetothebaremetalserver,itgetsLayer3lookupsratherthanabridgetablelookup.
1467028Inathree-nodeVcentersetup,restartingthepluginservicemighttakeuptotwominutesfortheothernodetodetectandestablishmastership.
1467031ATSNdropsARPpacketscomingfromabackupLBaaSnetworknamespacewiththeinvalidmulticastsourceerror.
Asaresult,thebackupLBaaSnetworknamespaceinstancecontinuouslysendsARPrequestsforeachofthebaremetalserverIPaddressesthathavebeenconfiguredasmembersoftheload-balancepool.
1468420Ifyoucreatethousandsofvirtualmachineinterfacesandlogicalinterfaceswithathousandvirtualnetworks,andthenpushtheconfigurationusingthedevicemanager,theconfigurationmightgetrepeatedlyaddedanddeletedontheMXSeriesrouter.
1468474TORAgentSwitchover:BUM/ARPtrafficloss.
Currentlyacontrolnodedoesnotimplementthegracefulrestartfeature,soMACroutesareimmediatelywithdrawnontheTORagentduringswitchoverleadingtotrafficloss.
1468886Sometimesittakesmorethanhalfanhourforcmontobringupmysqlduringnodefailurescenarios.
1469296WhenanMXSeriesrouterisprovidingNATserviceforabaremetalserverusingfloatingIPaddressesandthebaremetalserverbelongstooverlappingsubnets,theirrespectiveNATconfigurationswillcollideintheNATpoolsectionoftheconfigandgetrejected.
1469312WhenHAProxyisstoppedonavirtualIPnode,oneoutofthreeglancerequestsfail.
1399812TheOpenStackhighavailabilitycontrolnodereboothangsiftheNetworkFileSystemmountpointisunavailableduringboot.
1441810Afterrebootingacomputenode,sometimesthenova-computeisstartedbeforethevirtualizationAPI(libvirt)isinitialized.
Thereforeitfailstocomeup.
1480050IfyouassignthesameFIPaddresstotwovirtualmachines,onlytheVMwithanactiveVRRPaddressshouldgettheFIPtraffic.
1489610IftwoDNSserversareconfiguredandoneisdown,theDNSrequestshouldonlybesenttotheserverthatisup.
9Copyright2015,JuniperNetworks,Inc.
KnownIssues1490788WhenaToR-Agent'sstatusisbusy,itcannotreplytoHAProxykeepalivemessages.
1492979BroadcastroutesarealwaysprogrammedwiththeEVPNasthenexthop.
SoevenifthereisnoMXSeriesroutertofloodthetraffic,itisstillprogrammedinthecompositenexthop.
TheVrouterreplicatesthetrafficfortheEVPNnexthopandeventuallythetrafficisdiscarded.
Thiscausesthedropstatisticscounttoincrease.
1469341TheVcentersetupdoesnotusethesvc-monitor.
Thecontrail-svc-monitorstatusneedstoberemovedfromthecontrail-statuscommandoutput.
1493687FragmentpacketswithpartialTCPheadersgetdroppedbuttheflowstillgetscreatedandthenextfragmentgetsforwardedtothereceiver.
WhenapacketfragmenthasafullTCPheaderandthenextfragmentsoffsetis1,thentheVrouterforwardsthisfragment.
Whenafragmentpacketheadisreceivedafter3ormorefragments,itsometimeleadstofragmentloss.
1485754Whenavirtualnetworkisextendedtoaphysicalrouter,theDeviceManagerallocatesanIPaddressfortheIRBinterface.
Ifthevirtualnetworktophysicalrouterassociationisbroken,theDeviceManagertriestofreetheallocatedIPaddress.
Thiscallfails.
Asaresult,theIPaddressthatwaspreviouslyallocated,isnolongeravailableinthefreepool.
Copyright2015,JuniperNetworks,Inc.
10ReleaseNotes:ContrailController2.
21UpgradingContrailSoftwarefromRelease2.
00orGreatertoRelease2.
20UsethefollowingproceduretoupgradeaninstallationofContrailsoftwarefromonereleasetoamorerecentrelease.
ThisprocedureisvalidstartingfromContrailRelease2.
00andgreater.
NOTE:IfyouareinstallingContrailforthefirsttime,refertothefulldocumentationandinstallationinstructionsinInstallingtheOperatingSystemandContrailPackages.
InstructionsaregivenforbothCentOSandUbuntuversions.
TheonlyUbuntuversionssupportedforupgradingareUbuntu12.
04and14.
04.
2.
ToupgradeContrailsoftwarefromContrailRelease2.
00orgreater:1.
Downloadthefilecontrail-install-packages-x.
xx-xxx.
xxx.
noarch.
rpm|debfromhttp://www.
juniper.
net/support/downloads/p=contrail#swandcopyittothe/tmpdirectoryontheconfignode,asfollows:CentOS:scp:/path/to/contrail-install-packages-x.
xx-xxx.
xxx.
noarch.
rpm/tmpUbuntu:scp:/path/to/contrail-install-packages-x.
xx-xx~havana_all.
deb/tmpNOTE:Thevariablesxxx.
-xxxandsoonrepresentthereleaseandbuildnumbersthatarepresentinthenameoftheinstallationpackagesthatyoudownload.
2.
Installthecontrail-install-packages,usingthecorrectcommandforyouroperatingsystem:CentOS:yumlocalinstall/tmp/contrail-install-packages-x.
xx-xxx.
xxx.
.
noarch.
rpmUbuntu:dpkg–i/tmp/contrail-install-packages_x.
xx-xxx~icehouse_all.
deb3.
Setupthelocalrepositorybyrunningthesetup.
sh:cd/opt/contrail/contrail_packages;.
/setup.
sh4.
Ensurethatthetestbed.
pyfilethatwasusedtosetuptheclusterwithContrailisintactat/opt/contrail/utils/fabfile/testbeds/.
Ensurethattestbed.
pyhasbeensetupwithacombinedcontrol_datasection(requiredasofContrailRelease1.
10).
Ensurethatthedo_parallelflagissettoTrueinthetestbed.
pyfile,seebug1426522inLaunchpad.
net.
SeePopulatingtheTestbedDefinitionsFile.
11Copyright2015,JuniperNetworks,Inc.
UpgradingContrailSoftwarefromRelease2.
00orGreatertoRelease2.
205.
Upgradethesoftware,usingthecorrectsetofcommandstomatchyouroperatingsystemandvrouter,asdescribedinthefollowing:Changedirectorytotheutilsfolder:cd/opt/contrail/utils;\Selectthecorrectupgradeprocedurefromthefollowingtomatchyouroperatingsystemandvrouter.
Inthefollowing,referstothecurrentlyinstalledreleasenumber,suchas2.
0,2.
01,2.
1:CentOSUpgradeProcedure:fabupgrade_contrail:,/tmp/contrail-install-packages-x.
xx-xxx.
xxx.
noarch.
rpm;Ubuntu12.
04Procedure:fabupgrade_contrail:,/tmp/contrail-install-packages-x.
xx-xxx~icehouse_all.
deb;Ubuntu14.
04Upgrade,TwoProcedures:TherearetwodifferentupgradeproceduresforUbuntu14.
04upgradetoContrailRelease2.
20,dependingonwhichvrouter(contrail-vrouter-3.
13.
0-35-genericorcontrail-vrouter-dkms)isinstalledinyourcurrentsetup.
AsofContrailRelease2.
20,therecommendedkernelversionforanUbuntu14.
04-basedsystemis3.
13.
0-40.
Bothprocedurescanusethecommandfabupgrade_kernel_alltoupgradethekernel.
Ubuntu14.
04UpgradeProcedureForaSystemWithcontrail-vrouter-3.
13.
0-35-generic:UsethefollowingupgradeprocedureforContrailRelease2.
20systemsbasedonUbuntu14.
04withthecontrail-vrouter-3.
13.
0-35-genericinstalled.
Thecommandsequenceupgradesthekernelversionandalsorebootsthecomputenodeswhenfinished.
fabinstall_pkg_all:/tmp/contrail-install-packages-x.
xx-xxx~icehouse_all.
deb;fabmigrate_compute_kernel;fabupgrade_contrail:,/tmp/contrail-install-packages-x.
xx-xxx~icehouse_all.
deb;fabupgrade_kernel_all;fabrestart_openstack_compute;Ubuntu14.
04UpgradeProcedureForSystemwithcontrail-vrouter-dkms:UsethefollowingupgradeprocedureforContrailR2.
20systemsbasedonUbuntu14.
04withcontrail-vrouter-dkmsinstlled.
Thecommandsequenceupgradesthekernelversionandalsorebootsthecomputenodeswhenfinished.
fabupgrade_contrail:,/tmp/contrail-install-packages-x.
xx-xxx~icehouse_all.
deb;Copyright2015,JuniperNetworks,Inc.
12ReleaseNotes:ContrailController2.
21Allnodesintheclustercanbeupgradedtokernelversion3.
13.
0-40byusingthefollowingfabcommand:fabupgrade_kernel_all6.
OntheOpenStacknode,softrebootallofthevirtualmachines.
YoucandothisintheOpenStackdashboardorlogintothenodethatusestheopenstackroleandissuethefollowingcommands:source/etc/contrail/openstackrc;novarebootYoucanalsousethefollowingfabcommandtorebootallvirtualmachines:fabreboot_vm7.
Checktoensurethatthenova-novncproxyserviceisstillrunning:servicenova-novncproxystatusIfnecessary,restarttheservice:servicenova-novncproxyrestart8.
(ForContrailStorageoption,only.
)ContrailStoragehasitsownpackages.
ToupgradeContrailStorage,downloadthefile:contrail-storage-packages_x.
x-xx*.
debfromhttp://www.
juniper.
net/support/downloads/p=contrail#swandcopyittothe/tmpdirectoryontheconfignode,asfollows:Ubuntu:scp:/path/to/contrail-storage-packages_x.
x-xx*.
deb/tmpNOTE:UseonlyIcehousepackages(forexample,contrail-storage-packages_2.
0-22~icehouse_all.
deb)becauseOpenStackHavanaisnolongersupported.
Usethefollowingstatementtoupgradethesoftware:cd/opt/contrail/utils;\Ubuntu:fabupgrade_storage:,/tmp/contrail-storage-packages_2.
0-22~icehouse_all.
deb;WhenupgradingtoContrailRelease2.
10,addthefollowingstepsifyouhavelivemigrationconfigured.
UpgradestoRelease2.
0donotrequirethesesteps.
Selectthecommandthatmatchesyourlivemigrationconfiguration.
fabsetup_nfs_livemorfabsetup_nfs_livem_global13Copyright2015,JuniperNetworks,Inc.
UpgradingContrailSoftwarefromRelease2.
00orGreatertoRelease2.
20RelatedDocumentationContrailGettingStartedGuide,Release2.
21ContrailFeatureGuide,Release2.
21DocumentationUpdatesDocumentationFeedbackWeencourageyoutoprovidefeedback,comments,andsuggestionssothatwecanimprovethedocumentation.
Youcanprovidefeedbackbyusingeitherofthefollowingmethods:Onlinefeedbackratingsystem—OnanypageattheJuniperNetworksTechnicalDocumentationsiteathttp://www.
juniper.
net/techpubs/index.
html,simplyclickthestarstoratethecontent,andusethepop-upformtoprovideuswithinformationaboutyourexperience.
Alternately,youcanusetheonlinefeedbackformathttp://www.
juniper.
net/techpubs/feedback/.
E-mail—Sendyourcommentstotechpubs-comments@juniper.
net.
Includethedocumentortopicname,URLorpagenumber,andsoftwareversion(ifapplicable).
RequestingTechnicalSupportTechnicalproductsupportisavailablethroughtheJuniperNetworksTechnicalAssistanceCenter(JTAC).
IfyouareacustomerwithanactiveJ-CareorPartnerSupportServicesupportcontract,orarecoveredunderwarranty,andneedpost-salestechnicalsupport,youcanaccessourtoolsandresourcesonlineoropenacasewithJTAC.
JTACpolicies—ForacompleteunderstandingofourJTACproceduresandpolicies,reviewtheJTACUserGuidelocatedathttp://www.
juniper.
net/us/en/local/pdf/resource-guides/7100059-en.
pdf.
Productwarranties—Forproductwarrantyinformation,visithttp://www.
juniper.
net/support/warranty/.
JTAChoursofoperation—TheJTACcentershaveresourcesavailable24hoursaday,7daysaweek,365daysayear.
Self-HelpOnlineToolsandResourcesForquickandeasyproblemresolution,JuniperNetworkshasdesignedanonlineself-serviceportalcalledtheCustomerSupportCenter(CSC)thatprovidesyouwiththefollowingfeatures:FindCSCofferings:http://www.
juniper.
net/customers/support/Searchforknownbugs:http://www2.
juniper.
net/kb/Findproductdocumentation:http://www.
juniper.
net/techpubs/FindsolutionsandanswerquestionsusingourKnowledgeBase:http://kb.
juniper.
net/Copyright2015,JuniperNetworks,Inc.
14ReleaseNotes:ContrailController2.
21Downloadthelatestversionsofsoftwareandreviewreleasenotes:http://www.
juniper.
net/customers/csc/software/Searchtechnicalbulletinsforrelevanthardwareandsoftwarenotifications:http://kb.
juniper.
net/InfoCenter/JoinandparticipateintheJuniperNetworksCommunityForum:http://www.
juniper.
net/company/communities/OpenacaseonlineintheCSCCaseManagementtool:http://www.
juniper.
net/cm/Toverifyserviceentitlementbyproductserialnumber,useourSerialNumberEntitlement(SNE)Tool:https://tools.
juniper.
net/SerialNumberEntitlementSearch/OpeningaCasewithJTACYoucanopenacasewithJTAContheWeborbytelephone.
UsetheCaseManagementtoolintheCSCathttp://www.
juniper.
net/cm/.
Call1-888-314-JTAC(1-888-314-5822toll-freeintheUSA,Canada,andMexico).
Forinternationalordirect-dialoptionsincountrieswithouttoll-freenumbers,seehttp://www.
juniper.
net/support/requesting-support.
html.
RevisionHistoryOctober.
2015—Revision1,Contrail2.
21August2015—Revision1,Contrail2.
20April2014—Revision1,Contrail1.
0518March2014—Revision1,Contrail1.
04January2014—Revision1,Contrail1.
0321October2013—Revision1,Contrail1.
0216September2013—Revision1,Contrail1.
0Copyright2015,JuniperNetworks,Inc.
Allrightsreserved.
JuniperNetworks,Junos,Steel-BeltedRadius,NetScreen,andScreenOSareregisteredtrademarksofJuniperNetworks,Inc.
intheUnitedStatesandothercountries.
TheJuniperNetworksLogo,theJunoslogo,andJunosEaretrademarksofJuniperNetworks,Inc.
Allothertrademarks,servicemarks,registeredtrademarks,orregisteredservicemarksarethepropertyoftheirrespectiveowners.
JuniperNetworksassumesnoresponsibilityforanyinaccuraciesinthisdocument.
JuniperNetworksreservestherighttochange,modify,transfer,orotherwiserevisethispublicationwithoutnotice.
15Copyright2015,JuniperNetworks,Inc.
RequestingTechnicalSupport