*** ccneill_ has quit IRC | 00:04 | |
*** Guest29885 has quit IRC | 00:20 | |
*** km has joined #openstack-dns | 00:21 | |
*** km is now known as Guest39187 | 00:21 | |
*** jmcbride has joined #openstack-dns | 00:27 | |
*** jasonsb has quit IRC | 00:47 | |
*** jmcbride has quit IRC | 01:28 | |
*** rudrajit has joined #openstack-dns | 01:30 | |
*** rudrajit has quit IRC | 01:35 | |
*** stanzgy has joined #openstack-dns | 01:40 | |
*** ducttape_ has joined #openstack-dns | 01:55 | |
*** ccneill_ has joined #openstack-dns | 01:59 | |
*** ducttape_ has quit IRC | 02:07 | |
*** ducttape_ has joined #openstack-dns | 02:17 | |
*** ccneill_ has quit IRC | 02:18 | |
*** ducttape_ has quit IRC | 02:21 | |
*** ducttape_ has joined #openstack-dns | 02:24 | |
*** richm has joined #openstack-dns | 02:31 | |
*** richm has quit IRC | 02:45 | |
*** ducttape_ has quit IRC | 02:51 | |
*** Jet_ has joined #openstack-dns | 02:52 | |
*** ducttape_ has joined #openstack-dns | 02:57 | |
*** jmcbride has joined #openstack-dns | 02:59 | |
*** jmcbride has quit IRC | 02:59 | |
*** ducttape_ has quit IRC | 03:01 | |
*** ducttape_ has joined #openstack-dns | 03:17 | |
*** jmcbride has joined #openstack-dns | 03:25 | |
*** ducttape_ has quit IRC | 03:27 | |
*** ducttape_ has joined #openstack-dns | 03:28 | |
*** richm has joined #openstack-dns | 03:44 | |
*** ducttape_ has quit IRC | 03:55 | |
*** kei_yama has quit IRC | 04:02 | |
*** kei_yama has joined #openstack-dns | 04:03 | |
*** ducttape_ has joined #openstack-dns | 04:05 | |
*** ducttape_ has quit IRC | 04:05 | |
*** richm has quit IRC | 04:09 | |
*** ducttape_ has joined #openstack-dns | 04:12 | |
*** Jet_ has quit IRC | 04:17 | |
*** ducttape_ has quit IRC | 04:19 | |
*** Jezogwza_ has quit IRC | 04:34 | |
*** kei_yama has quit IRC | 04:59 | |
*** kei_yama has joined #openstack-dns | 04:59 | |
*** rudrajit has joined #openstack-dns | 05:28 | |
*** rudrajit has quit IRC | 05:29 | |
*** rudrajit has joined #openstack-dns | 05:29 | |
*** murali has joined #openstack-dns | 05:44 | |
*** Jet_ has joined #openstack-dns | 05:44 | |
*** murali has quit IRC | 05:58 | |
*** jmcbride has quit IRC | 06:04 | |
*** jasonsb has joined #openstack-dns | 06:33 | |
*** elarson has joined #openstack-dns | 06:51 | |
*** kei_yama has quit IRC | 06:59 | |
*** kei_yama has joined #openstack-dns | 06:59 | |
*** Jet_ has quit IRC | 07:16 | |
*** kei_yama has quit IRC | 08:10 | |
*** kei_yama has joined #openstack-dns | 08:11 | |
*** Guest39187 has quit IRC | 08:11 | |
*** km has joined #openstack-dns | 08:11 | |
*** km is now known as Guest28179 | 08:11 | |
*** zigo has quit IRC | 08:16 | |
*** zigo has joined #openstack-dns | 08:19 | |
*** nyechiel has joined #openstack-dns | 08:42 | |
*** jordanP has joined #openstack-dns | 08:53 | |
*** kei_yama_ has joined #openstack-dns | 09:02 | |
*** kei_yama has quit IRC | 09:02 | |
*** rudrajit_ has joined #openstack-dns | 09:12 | |
*** rudrajit has quit IRC | 09:15 | |
*** openstack has joined #openstack-dns | 09:20 | |
*** ChanServ sets mode: +v openstack | 09:20 | |
*** rudrajit_ has quit IRC | 09:35 | |
*** rudrajit has joined #openstack-dns | 09:35 | |
*** bradjones has joined #openstack-dns | 10:37 | |
*** bradjones has quit IRC | 10:37 | |
*** bradjones has joined #openstack-dns | 10:37 | |
*** nyechiel has joined #openstack-dns | 10:45 | |
*** stanzgy has quit IRC | 10:48 | |
*** kei_yama_ has quit IRC | 10:54 | |
*** kei_yama has joined #openstack-dns | 10:55 | |
*** nyechiel has quit IRC | 11:14 | |
*** weihan has joined #openstack-dns | 11:43 | |
*** nyechiel has joined #openstack-dns | 12:11 | |
*** kei_yama has quit IRC | 12:13 | |
*** ig0r__ has joined #openstack-dns | 12:17 | |
*** Guest28179 has quit IRC | 12:25 | |
*** weihan has quit IRC | 12:57 | |
*** jordanP has quit IRC | 12:59 | |
*** slevchenko has quit IRC | 13:15 | |
*** Diplomat has joined #openstack-dns | 13:20 | |
Diplomat | Hello, anyone here? I have a quick question.. is there a way to control designate from the controller ? | 13:21 |
---|---|---|
*** boris-42 has quit IRC | 13:28 | |
*** jordanP has joined #openstack-dns | 13:37 | |
*** rsyed_away is now known as rsyed | 13:42 | |
*** mwagner has quit IRC | 13:44 | |
en_austin | hello, anyone here? | 13:47 |
*** boris-42 has joined #openstack-dns | 13:59 | |
mugsie | en_austin: yup - here | 14:07 |
mugsie | your error looks like you have an old version of pip | 14:07 |
mugsie | Diplomat: from the designate controller? | 14:08 |
Diplomat | Naw, from OS controller | 14:08 |
Diplomat | but I already found an answer | 14:08 |
*** mwagner has joined #openstack-dns | 14:16 | |
Diplomat | Would it be possible to update the serial ? | 14:16 |
Diplomat | Also is there an easy to way to transfer data from bind? Like.. existing zones | 14:17 |
mugsie | yeap, there is an import function | 14:17 |
Diplomat | Sweet, what about updating the serial ? | 14:18 |
mugsie | updating the serial - just make a change to any of the records .. there was a v1 API for "touch"ing a domain | 14:18 |
mugsie | but I don't think that got into the v2 API | 14:18 |
Diplomat | Well, I'd like to set a specific value there | 14:18 |
mugsie | ah | 14:18 |
mugsie | no. | 14:19 |
mugsie | we assume control of the serial internally | 14:19 |
Diplomat | Hmn, that's not the best.. I think I could create a temporary dns record with an updated serial and then import it | 14:20 |
mugsie | Diplomat: why do you need to set the serial? | 14:21 |
Diplomat | Clients need that.. because they have some kind of reasons | 14:21 |
mugsie | ah | 14:21 |
mugsie | clients | 14:21 |
* mugsie tries to avoid them :P | 14:22 | |
Diplomat | lol | 14:22 |
Diplomat | Well, it's not that bad as long as your service is good | 14:22 |
*** richm has joined #openstack-dns | 14:22 | |
Diplomat | I think I could update that API a bit for myself | 14:23 |
mugsie | Diplomat: if you want to send it upstream we could talk about if it makes sense for the project | 14:32 |
Diplomat | Well, I don't know much sense it would make for most people, but I'm sure there are people who would be interested in it | 14:33 |
*** nyechiel has quit IRC | 14:42 | |
*** nyechiel has joined #openstack-dns | 14:42 | |
en_austin | mugsie: well, i've already solved this :) now i have an another questiion - how can I upgrade from Kilo to Liberty? | 14:44 |
en_austin | what steps should I do? | 14:44 |
mugsie | should be shutdown services, run migrations, restart services with new code, and start the new zone manager service | 14:45 |
en_austin | what is "new zone manager service"? | 14:49 |
en_austin | e.g from Liberty there is a 5 services - API, Central, mDNS, PoolManager and that new service? | 14:49 |
*** ducttape_ has joined #openstack-dns | 14:57 | |
*** ducttape_ has quit IRC | 15:00 | |
*** ducttape_ has joined #openstack-dns | 15:00 | |
mugsie | en_austin: yup, there is a new "designate-zone-manager" service | 15:02 |
*** pglass has joined #openstack-dns | 15:08 | |
*** _ducttape_ has joined #openstack-dns | 15:09 | |
*** ducttape_ has quit IRC | 15:11 | |
*** openstackgerrit has quit IRC | 15:17 | |
*** openstackgerrit has joined #openstack-dns | 15:17 | |
*** ChanServ sets mode: +v openstackgerrit | 15:17 | |
en_austin | mugsie: can you give a link to this service FAQ or write some lines here? | 15:18 |
en_austin | to let me know what that new service is running for? | 15:18 |
mugsie | sure - it does periodic tasks that relate to zones. (e.g. it checks secondary zones SOA records to make sure we didnt miss a NOTIFY, it clears out zones that are in a "deleted" state, it sends periodic "Exists" events for celiometer) | 15:19 |
en_austin | btw, i'm experiencing now some problems with actual DNS provisioning (designate stable/kilo, bind9 backend) - delay from actual API call and actual record provisioning sometimes (not always, of course) is 10+ minutes (while API reports this record as ACTIVE) | 15:19 |
en_austin | maybe, upgrading to Liberty will solve this... | 15:20 |
mugsie | it sould | 15:20 |
mugsie | there was some wierdness around updates in Kilo | 15:20 |
en_austin | it's solved in L? :-) | 15:20 |
mugsie | we certainly hope so | 15:21 |
en_austin | Well, I'll upgrade a production Designate and will report here :D | 15:21 |
mugsie | do you have a non default threshold set in the pool manager config file? | 15:21 |
en_austin | nope. what threshold you are talking abt? | 15:22 |
en_austin | actually, I have only pool_id in my PoolManager service config section. | 15:23 |
en_austin | (and cache_driver=noop) | 15:23 |
mugsie | ah | 15:23 |
mugsie | that could be it | 15:23 |
en_austin | hm | 15:23 |
en_austin | but why? | 15:23 |
mugsie | we need a place to store what servers have the zone active | 15:24 |
mugsie | and the code that tries to do that without a cache is interesting | 15:25 |
mugsie | you can just use another DB on the same servers | 15:25 |
mugsie | or if you have memcached for anything, you can use that | 15:25 |
en_austin | well, I can run memcached for this | 15:26 |
en_austin | but how? :) | 15:26 |
en_austin | or use mysql db (btw, i have one created, but it's unused) | 15:27 |
timsim | Install memecached somewhere. Change this line https://github.com/openstack/designate/blob/master/etc/designate/designate.conf.sample#L289 Add this section: https://github.com/openstack/designate/blob/master/etc/designate/designate.conf.sample#L306-L311 replace memcached servers to "127.0.0.1:11211" or something en_austin | 15:28 |
*** csoukup has joined #openstack-dns | 15:30 | |
en_austin | so, you think, that cache can help to resolve an issue with non-provisioned records I've described above? | 15:32 |
*** ducttape_ has joined #openstack-dns | 15:32 | |
mugsie | en_austin: it might | 15:34 |
timsim | It should if you've got more than one nameserver (and probably will even if you don't). | 15:34 |
mugsie | I know we saw weird stuff using the fake cache driver | 15:34 |
timsim | The Pool Manager or MiniDNS logs should have more information as to why you're failing, if that cache driver isn't it. | 15:34 |
*** _ducttape_ has quit IRC | 15:35 | |
*** jmcbride has joined #openstack-dns | 15:39 | |
en_austin | yep, i have 2 NS running | 15:39 |
en_austin | there is no "ERROR: xxx" logs in mdns/pm, I've checked :( | 15:39 |
*** Diplomat has quit IRC | 15:40 | |
*** Diplomat has joined #openstack-dns | 15:44 | |
*** jmcbride has quit IRC | 15:46 | |
*** Jezogwza_ has joined #openstack-dns | 15:47 | |
*** jmcbride has joined #openstack-dns | 15:47 | |
timsim | Yeah it might not be logged ERROR :/ | 15:50 |
*** rudrajit has quit IRC | 15:53 | |
openstackgerrit | Merged openstack/designate: Use oslo_config PortOpt type for port options https://review.openstack.org/241257 | 15:53 |
openstackgerrit | Merged openstack/python-designateclient: Add functional tests for tlds https://review.openstack.org/228509 | 15:54 |
openstackgerrit | Merged openstack/python-designateclient: Add functional tests for blacklists https://review.openstack.org/228616 | 15:54 |
en_austin | :( | 15:55 |
en_austin | well, will try it anyway. | 15:55 |
en_austin | btw, are there a correct way to RENAME a designate-handled zone? | 15:55 |
en_austin | e.g - i'm running xxx.zone in Designate, and I want to rename it to yyy.zone (with all its records, of course) | 15:56 |
en_austin | are there another way except of export - rename $ORIGIN - import again ? | 15:56 |
timsim | Nope. Name is immutable. | 15:56 |
en_austin | so, import/export is the only way? | 15:58 |
timsim | Yep, I believe so | 15:58 |
*** mlavalle has joined #openstack-dns | 16:00 | |
*** jordanP has quit IRC | 16:01 | |
*** rsyed is now known as rsyed_away | 16:17 | |
*** ccneill_ has joined #openstack-dns | 16:18 | |
*** ccneill_ is now known as ccneill | 16:19 | |
*** rudrajit has joined #openstack-dns | 16:19 | |
*** rudrajit has quit IRC | 16:23 | |
en_austin | 2015-11-09 19:31:25.944 2052 ERROR designate DbMigrationError: Storage requires its own database. Please check your config file. | 16:31 |
en_austin | it's after designate-admin database sync | 16:31 |
openstackgerrit | Merged openstack/python-designateclient: Fix support for --os-endpoint https://review.openstack.org/241941 | 16:32 |
openstackgerrit | Merged openstack/python-designateclient: Fix support for --os-endpoint https://review.openstack.org/241941 | 16:32 |
en_austin | timsimL it's some new entries in config, I suppose? | 16:32 |
en_austin | timsim: ^ * | 16:32 |
timsim | Where do you see that error en_austin? mdns? | 16:34 |
timsim | That should be the `connection` field in the storage:sqlalchemy section. | 16:34 |
en_austin | aaawh, it's my fault, sorry :( i've misplaced an my old designate config file (and tried to run database-sync on clear github installation) :) | 16:35 |
en_austin | PM throws: | 16:36 |
en_austin | 2015-11-09 19:35:58.119 2235 WARNING designate.coordination [-] No coordination backend configured, assuming we are the leader. Please configure a coordination backend | 16:36 |
en_austin | What he is expecting here? | 16:36 |
en_austin | (same for zone-manager) | 16:36 |
timsim | It's using the openstack tooz library to provide some coordination services. Namely, pool-manager leader election (to ensure that only one instance runs periodic sync jobs) and zone sharding (zone-manager). So you need one of the drivers that tooz offers. I believe it's supposed to work with memecached, but the recommended path is to run Apache Zookeeper. However, if you've just got a small deployment, memecached ought to | 16:41 |
timsim | work. | 16:41 |
timsim | The config section you need is here: https://github.com/openstack/designate/blob/master/etc/designate/designate.conf.sample#L419 | 16:41 |
timsim | So if you were going to use memecached, you would put backend_url=memecached://127.0.0.1:11211 or whatever. | 16:42 |
en_austin | I'm going to use memcached as cache server for pool manager. What do you mean under "small deployment" ? :) | 16:47 |
timsim | You can use it for both the pool manager cache, and this coordination backend. | 16:48 |
timsim | If you only have one pool manager instance, one zone-manager instance, the coordination driver you choose won't have much effect. | 16:48 |
timsim | But if you've got 20, you might want to look into zookeepr. | 16:49 |
en_austin | I'm running now with 4 APIs, 4 Central's and 4 mDNS's. | 16:49 |
timsim | pool-managers? | 16:50 |
en_austin | now 1 only | 16:50 |
mugsie | then without a co-ordination backend will be fine | 16:50 |
timsim | Are those all separate VMs running one process each? | 16:50 |
en_austin | but if I'll upgrade Designate to Liberty and run 4 ZF and 4 PMs with memcached - will i have a degradated performance? | 16:50 |
en_austin | nope, that's all a single OpenVZ container | 16:50 |
mugsie | not sure how it will perform to be honest | 16:51 |
timsim | And you're starting 4 processes of each one separately, or using the inbuilt worker processes? | 16:51 |
en_austin | inbuilt workers | 16:51 |
timsim | What kind of performance are you building for? What's ideal for you? | 16:52 |
*** Jaan_ has joined #openstack-dns | 16:55 | |
en_austin | main goal of our designate deployment is to provide a records to clients asap (we're using in another openstack infrastructure) | 16:55 |
*** Diplomat has quit IRC | 16:55 | |
*** Jaan_ is now known as Diplomat | 16:56 | |
en_austin | and we're expecting a 30sec...1min delay between API call (post v2/zones/.../recordsets) and actually record resolving | 16:56 |
en_austin | that's why I'm taking care about even several 10min delays between api call and records delivery - each of 'em is very important :( | 16:58 |
timsim | Well, I would try just using memecached for the coordination, but if you're set on having four processes, you might need to install zookeeper and use the "kazoo" backend, that's the only one I've seen work consistently. | 16:58 |
timsim | 10 minute delays means there is a big problem. That's not regular behavior at all. We've got designate pushing across the pacific ocean much faster than that at pretty high rates. | 16:59 |
timsim | s/much faster/under 10 seconds | 17:00 |
en_austin | some debugging shows that all of backends (bind9's) responds with SOA instead of xxxxxxx A 127.0.0.1 (that means that record wasn't delivered yet - that's why I've asked for record delivery issues in this chat above) :) | 17:04 |
en_austin | I hope that upgrading to Liberty and setting up a cache backend will help. | 17:05 |
timsim | There has to be something in that log. | 17:06 |
timsim | If you had those handy to paste, we might be able to help more. | 17:06 |
en_austin | I'll try to find it out - too much logs :(( | 17:06 |
timsim | Better than not enough ;) | 17:06 |
*** nkinder has joined #openstack-dns | 17:13 | |
mugsie | timsim: Kiall federico3 elarson ekarlso updated the designate dashboard - graham.hayes.ie/designate/dashboard is a redirect | 17:19 |
timsim | :fire: | 17:19 |
elarson | :badoosh: :docker: :+1: | 17:20 |
en_austin | timsim: well, right 15min ago i've fired again this issue with non-delivered domain, so I can find a logs :) | 17:21 |
en_austin | which logs I should paste? All (api, central, PM, mDNS) ? | 17:21 |
*** nyechiel has quit IRC | 17:23 | |
timsim | PM / mdns | 17:24 |
en_austin | well, I've found a big time spread in PM logs... | 17:27 |
en_austin | will now paste it. | 17:27 |
en_austin | http://paste.openstack.org/show/vkoT73o4m3C4nU7f5xsJ/ | 17:28 |
en_austin | awh, mdns logs are not for this record (while poolmanager is exactly for that rec - i've grep'd by zoneid) | 17:30 |
*** Jezogwza_ is now known as Jezogwza | 17:32 | |
openstackgerrit | Graham Hayes proposed openstack/designate: Added HTTP_X_FORWARDED_PROTO support to API https://review.openstack.org/241727 | 17:38 |
en_austin | http://paste.openstack.org/show/9S6Pi7RdTvnAYVBtAifG/ | 17:39 |
en_austin | here is correct paste (and I've found here some warning timeouts...) | 17:39 |
en_austin | timsim: is it a helpful logs? :) | 17:40 |
timsim | `mdns.log.1:Got Timeout while trying to send 'SOA' for 'aps.sw.ru.' to '10.28.0.18:53'. Timeout='30' seconds. Retry='2'` | 17:40 |
timsim | That means the mdns server is having trouble talking to '10.28.0.18:53' | 17:40 |
en_austin | Well, but API received this record in 19:54:49.xxx, and mDNS tried to push it at 20:06:35... | 17:41 |
en_austin | why so? | 17:41 |
timsim | It looks like it was successful at 19:54:52.9 in mdns | 17:42 |
en_austin | but it wasn't present at bind zonefile (i've grep'd it at 20+ hrs when i was notified about dns failure) | 17:43 |
en_austin | that's the problem... | 17:43 |
en_austin | btw, i'm running two NSs (and Timeout connection problem is only for one of them) | 17:44 |
timsim | update_status: Calling pool manager for aps.sw.ru. : UPDATE : SUCCESS : 1447088089 on nameserver means that mdns saw it land. meaning it was propagated. | 17:44 |
timsim | It looks like the lack of a cache driver may have actually slowed that down. Because that message would have been received by the pool manager, but then it had to "get_serial_number" on those servers, which we see, and that's where it ran into connectivity issues. | 17:45 |
en_austin | But actually, how the cache is engaged into this mDNS<->backend conversation? | 17:46 |
en_austin | Will now enable it and check it out - maybe, it will help... | 17:46 |
en_austin | and, if mDNS successfully pushed it on backends - why it was missing in slave.xxxxxxxx file at backend (bind9) | 17:48 |
en_austin | That's the question... | 17:48 |
timsim | When mdns does that report to say "Calling pool manager for aps.sw.ru. : UPDATE : SUCCESS : 1447088089" pool manager stores that, so that when the second one reports back, it knows that the state was active on the other server, so it now knows it's active on both and the domain can be active. | 17:48 |
timsim | When it goes "ACTIVE" in the API, it means it's resolving. It might be doing something different than you're expecting on the bind server, but ACTIVE status means designate did a dns query and successfully resolved. | 17:49 |
*** jmcbride has quit IRC | 17:52 | |
*** jmcbride has joined #openstack-dns | 17:52 | |
*** Diplomat has quit IRC | 17:57 | |
*** jmcbride1 has joined #openstack-dns | 18:01 | |
en_austin | I understand - but it switched to ACTIVE without actually being pushed to backends. In approx 20:25 +/- it appeared at bind's zonefile (and, of course, started to resolve) | 18:03 |
*** jmcbride has quit IRC | 18:03 | |
en_austin | Or - there was some black magic that I don't understand :( | 18:03 |
*** jmcbride has joined #openstack-dns | 18:04 | |
*** jmcbride2 has joined #openstack-dns | 18:04 | |
*** jmcbride1 has quit IRC | 18:05 | |
en_austin | When this problem appeared, I've grep'd by zonefile - and there wasn't this record at that moment. | 18:05 |
en_austin | Later (~5-7min) it appeared into zonefile - and all is OK for now. | 18:06 |
mugsie | en_austin: I may be wrong ( timsim can correct me) but I don;t think bind rights to the file straight away on a zone transfer in | 18:08 |
mugsie | it keeps it in memory AFAIK, but it should be resolving | 18:08 |
*** jmcbride has quit IRC | 18:09 | |
mugsie | ACTIVE says that designate has queried the 2 Bind servers and gotten the correct serial back from both | 18:09 |
en_austin | ookay, but... i've dig'd it two times with 10min delay - first query - "SOA .......", second - correct A record :( | 18:10 |
en_austin | some strange problem, I don't know what to do with it :( | 18:10 |
en_austin | btw! i have an dig output stored (when it's not resolved) | 18:11 |
en_austin | aaand... here is an equal SOA with PoolManaager and mDNS's logs! | 18:12 |
en_austin | http://paste.openstack.org/show/RyAas5EuDuL1oqiJoDGV/ -- SOA serial is 1447088089 - which is the same as in logs I've showed you above - maybe, here is a problem root? | 18:14 |
*** jmcbride2 has quit IRC | 18:21 | |
*** jmcbride has joined #openstack-dns | 18:21 | |
openstackgerrit | Merged openstack/designate: remove default=None for config options https://review.openstack.org/242835 | 18:25 |
en_austin | mugsie: any ideas? | 18:32 |
mugsie | humm... it should be serving the right data if there is the same serial... when there is a change does the zone serial match the SOA serial when it is marked as active, but not returning the right record data? | 18:33 |
*** rsyed_away is now known as rsyed | 18:35 | |
en_austin | > it should be serving the right data if there is the same serial. | 18:36 |
en_austin | maybe, there is some communication problems or smth else... that Designate pushes a SOA update to backend without data (for example, I just assume) | 18:36 |
en_austin | and, actual data become pushed to backend only at next SOA update | 18:36 |
en_austin | I don't know if it is even possible - but... | 18:37 |
mugsie | what is the layout of your deployment? | 18:38 |
en_austin | 3 VMs (1 for Designate api+central+mdns+PM+RabbitMQ) and two for BINDs | 18:38 |
mugsie | 2 Bind servers + Designate ? (i.e. is there anything else in front of those Bind servers? ) and are they both set up as pool_nameservers in the designate.conf filke? | 18:39 |
openstackgerrit | Merged openstack/designate: Switch to oslo.reports https://review.openstack.org/241684 | 18:39 |
openstackgerrit | Merged openstack/designate: Fix argument order in assertEqual to (expect, obs) https://review.openstack.org/239400 | 18:40 |
en_austin | they are both set up as pool_nameservers, yep | 18:40 |
mugsie | designate pushes a NOTIFY to the bind servers, which should trigger them to get the new data from the miniDNS servers. | 18:42 |
*** Jezogwza has quit IRC | 18:42 | |
mugsie | the serial BIND serves should not change until the new data is on the bind server | 18:42 |
*** jasonsb has quit IRC | 18:45 | |
timsim | also, what version of BIND is that? | 18:50 |
openstackgerrit | Merged openstack/designate: Add functional tests for TLDs https://review.openstack.org/183522 | 18:54 |
*** ccneill_ has joined #openstack-dns | 18:54 | |
en_austin | BIND 9.9.4-RedHat-9.9.4-18.el7_1.5 (Extended Support Version) | 18:55 |
*** ccneill__ has joined #openstack-dns | 18:55 | |
*** ccneill has quit IRC | 18:56 | |
en_austin | btw the problem is float (e.g some instability issue) - it fires twice a day, approximately | 18:56 |
en_austin | or, once on weekend :( | 18:56 |
*** ccneill_ has quit IRC | 18:59 | |
timsim | I think the cache driver will help, but it looks like there might be network instability. Also I have no idea why the A record wouldn't be there if bind was returning the right serial o.O | 18:59 |
en_austin | Well... I'll try to upgrade Designate from Kilo to Liberty and we'll see - will it helps... | 18:59 |
en_austin | and will enable a cache driver. | 19:00 |
en_austin | will you be here for approx in half an hour? (I am going to update my production designate) :)) | 19:00 |
*** ducttape_ has quit IRC | 19:04 | |
timsim | Yep, I'll be around. | 19:06 |
openstackgerrit | Tim Simmons proposed openstack/designate: Handle NO_DOMAIN status https://review.openstack.org/230770 | 19:08 |
timsim | Kiall mugsie rebased ^ | 19:08 |
mugsie | timsim: can you check about travel to Ireland for mid cycle - I need to make a proposal to get office space etc soon enough. cc/ jmcbride ;) | 19:11 |
timsim | Sure | 19:12 |
mugsie | sweet | 19:12 |
mugsie | http://gph.is/1guxtqM | 19:14 |
*** ducttape_ has joined #openstack-dns | 19:26 | |
en_austin | Well, seems I've migrated from Kilo to Liberty :) | 19:28 |
*** jasonsb has joined #openstack-dns | 19:28 | |
en_austin | So, now... Cache, Coordination backend.. Yep? timsim | 19:28 |
en_austin | and, how to change "127.0.0.1" to actual hostname in "links.self" response? :) | 19:28 |
timsim | Yep, that should work. | 19:29 |
timsim | There's a config option for the base uri to build them from, and also a config option to use host headers to build that. | 19:29 |
timsim | Host headers: https://github.com/openstack/designate/blob/master/etc/designate/designate.conf.sample#L88 | 19:30 |
*** jasonsb has quit IRC | 19:30 | |
timsim | api base uri https://github.com/openstack/designate/blob/master/etc/designate/designate.conf.sample#L91 | 19:30 |
*** james_li has joined #openstack-dns | 19:31 | |
openstackgerrit | Merged openstack/designate: Removes zone files when a zone is deleted https://review.openstack.org/236662 | 19:32 |
en_austin | timsim: i'm receiving a "got lower serial for xxxxx, expected: ..., got: .....' in mdns logs.. how i can return it to in-sync state? | 19:38 |
mugsie | en_austin: it should do it itself | 19:39 |
en_austin | i dont' understand which serials it's talking about ('cause in logs: 'Expected:'1447097385'. Got:'1447097196'), in bind - SOA is 1447096663 | 19:39 |
en_austin | o.O | 19:39 |
jmcbride | oooh! I'd love to… I mean, we need to attend the 2016 mid-cycle in Ireland. Thanks for the invite mugsie, we'll keep you posted. | 19:40 |
en_austin | 2015-11-09 22:42:31.643 2064 WARNING designate.mdns.notify [req-013170d5-c331-4ba5-a9db-6969e421e05d noauth-user noauth-project - - -] Got Timeout while trying to send 'NOTIFY' for 'xxx.xx.xx' to '127.0.0.1:53'. Timeout='30' seconds. Retry='3' | 19:43 |
en_austin | but mDNS is running.... | 19:43 |
timsim | Isn't your dns server on 10.something. It looks like it's trying to notify 127.0.0.1 | 19:44 |
timsim | Paste your whole config :) | 19:44 |
en_austin | http://paste.openstack.org/show/bA5MkZ7bp1LXHtWiqPIM/ | 19:46 |
*** jasonsb has joined #openstack-dns | 19:46 | |
timsim | Move the host/port things in the target sections into the csv of options. | 19:47 |
timsim | That's why it's notifying 127.0.0.1 | 19:47 |
timsim | We're working on fixing that, sorry :/ | 19:47 |
mugsie | jmcbride: cool. I am trying to sync on 2 mid cycles, so its a bit hectic | 19:50 |
en_austin | update_status: Calling central's update_status for cf5c1b26-a945-449d-890e-0a1db5a2f339 : SUCCESS | 19:51 |
en_austin | nice! | 19:51 |
en_austin | timsim: are there any changelogs (for issues like this)? :) | 19:51 |
timsim | I wouldn't think that would have changed from kilo->liberty | 19:52 |
*** jmcbride1 has joined #openstack-dns | 19:52 | |
*** jmcbride has quit IRC | 19:53 | |
en_austin | but it changed and there is no any comments etc even in sample config :( | 19:55 |
en_austin | ok, seems it's stable (create/delete works ok) | 19:56 |
timsim | It seems like it was options: host/port in this doc at least http://docs.openstack.org/developer/designate/install/ubuntu-kilo.html but there really should be upgrade docs, sorry mate. | 19:59 |
mugsie | FYI - http://lists.openstack.org/pipermail/openstack-dev/2015-October/077442.html kicks in tomorrow. cc/ timsim elarson ekarlso federico3 Kiall pglass | 20:00 |
ekarlso | mugsie: who's doing le grand rename | 20:01 |
mugsie | ekarlso: I am going to start it tomorrow, but I think it may end up being multiple patches | 20:02 |
mugsie | we shall see as the week progresses | 20:02 |
*** jmcbride1 has quit IRC | 20:02 | |
*** jasonsb has quit IRC | 20:04 | |
en_austin | timsim: so, how to enable cache via memcached? | 20:05 |
en_austin | https://github.com/openstack/designate/blob/master/etc/designate/designate.conf.sample#L306-L311 only this? | 20:06 |
en_austin | or I should specify smth in [service:pool_manager] block (in cache_driver option, for example) | 20:06 |
timsim | Yeah, and https://github.com/openstack/designate/blob/master/etc/designate/designate.conf.sample#L289 | 20:06 |
en_austin | expiration=3600 ? | 20:08 |
en_austin | (as in default config) | 20:08 |
en_austin | and what does this 1 hour means? zones will update in 1 hour? :)) | 20:08 |
timsim | Probably that cache entries expire in memecahed in an hour :P | 20:08 |
en_austin | okaaaay, but what info this cache stores? | 20:09 |
timsim | Status of zones on nameservers. | 20:09 |
en_austin | and - are there any log entries that shows a successful cache connection? | 20:09 |
en_austin | > Status of zones | 20:10 |
en_austin | They will update once an hour? :O | 20:10 |
timsim | No. | 20:10 |
timsim | The status entry for a zone at a specific serial number will expire from memecached in an hour. | 20:10 |
en_austin | I don't understand what's this cache for (which role it's playing in whole Designate infrastructure) | 20:10 |
timsim | It's just a semi-persistent store of the ACTUAL state of the zone (is it resolving) at a specific serial number on a specific nameserver. | 20:10 |
timsim | So that the pool manager can quickly calculate if a zone is live everywhere it needs to be to be considered active for a serial number. | 20:11 |
en_austin | okay :) | 20:12 |
en_austin | will Designate report it's using a memcached (or another cache)? there is no any log entries for "cache" or ":11211" :( | 20:13 |
timsim | I'm not sure. | 20:13 |
en_austin | Should it fail if it's not able to connect to cache? :) | 20:14 |
*** ccneill has joined #openstack-dns | 20:15 | |
* timsim sighs | 20:16 | |
en_austin | (answering: or smth went wrong, or it's not using a config params - i've specified an invalid parameters and it's just bypassed) | 20:16 |
timsim | i don't think it does squawk if it can't connect. | 20:16 |
en_austin | I just want to assume it's going well and using cache :) | 20:17 |
*** ccneill__ has quit IRC | 20:17 | |
*** jmcbride has joined #openstack-dns | 20:17 | |
timsim | Seems legit | 20:18 |
timsim | You should be able to telnet into memecached and see if there are keys getting created. | 20:18 |
timsim | Or if you have --debug on in pool manager there should be some logs saying "cache hit" "cache miss" etc | 20:19 |
*** james_li has quit IRC | 20:22 | |
en_austin | 2015-11-09 23:25:42.477 4418 DEBUG oslo_service.service [req-e7cfb1d6-3397-4bd5-919e-addf3d8424b5 - - - - -] memcached_servers = None log_opt_values /usr/lib/python2.7/site-packages/oslo_config/cfg.py:2260 | 20:26 |
en_austin | are you sure that parameter should be stored in [pool_manager_cache:memcache] memcached_servers ? | 20:26 |
timsim | Pretty sure. | 20:27 |
en_austin | Well. | 20:28 |
en_austin | 2015-11-09 23:28:01.582 4487 DEBUG designate.pool_manager.service [req-23a5cb47-2d4d-4d43-afce-5b25e0649943 noauth-user noauth-project - - -] For domain XXXXX. : UPDATE on nameserver 10.28.0.18:53 the cache serial is 0 and the actual serial is 1447100861. update_status /opt/designate/designate/pool_manager/service.py:490 | 20:28 |
en_austin | 2015-11-09 23:28:01.584 4487 DEBUG designate.pool_manager.service [req-23a5cb47-2d4d-4d43-afce-5b25e0649943 noauth-user noauth-project - - -] Cache miss! Did not retrieve status and serial for domain XXXXXX. on nameserver 10.28.0.17:53 with action UPDATE from the cache. Getting it from the server. _retrieve_statuses | 20:28 |
timsim | pool_manager_cache:memcache.memcached_servers = ['127.0.0.1:11211'] | 20:30 |
en_austin | Awh... | 20:30 |
timsim | Is what I see in my debug logs | 20:30 |
*** james_li has joined #openstack-dns | 20:30 | |
en_austin | [root@designate designate]# cat designate.conf | grep memcached | 20:30 |
en_austin | memcached_servers = 127.0.0.1:11211 | 20:30 |
en_austin | here should be exact Python list (in config), am I right? | 20:30 |
timsim | That should be fine. What section is it in? | 20:30 |
en_austin | [pool_manager_cache:memcache] | 20:31 |
timsim | And you don't see pool_manager_cache:memcache.memcached_servers = ['127.0.0.1:11211'] when you start pool-manager with debug? | 20:31 |
en_austin | http://paste.openstack.org/show/478385/ | 20:31 |
en_austin | I see it, it's OK here | 20:32 |
*** ducttape_ has quit IRC | 20:32 | |
en_austin | now the question is - why there are only 'cache miss' in logs? | 20:32 |
timsim | Cache misses are expected at first, until you see those update status SUCCESS logs i mdns | 20:32 |
timsim | in mdns | 20:32 |
en_austin | Well, will now restart all services (not PM only), will see. | 20:33 |
en_austin | No effect - still "cache miss" for every call. | 20:35 |
en_austin | Awh. It was (memcached) not running - and Designate silently bypassed it. Sorry :) | 20:37 |
timsim | What do the mdns logs look like? | 20:37 |
timsim | lol, that'd explain it | 20:38 |
en_austin | now "cache hit!" logs are here :) | 20:38 |
timsim | w00t | 20:38 |
mugsie | timsim / Kiall: the message we should be using on patches we are -2'ing from tomorrow is here - http://graham.hayes.ie/posts/the-big-rename/ (at the bottom) | 20:39 |
timsim | http://replygif.net/i/241.gif | 20:41 |
*** ducttape_ has joined #openstack-dns | 20:43 | |
en_austin | well, seems it's working | 20:43 |
en_austin | I really appreciate your help, timsim | 20:44 |
en_austin | thank you :) | 20:44 |
en_austin | it's 11:44PM, time to drive home... | 20:44 |
mugsie | timsim: http://replygif.net/1341 | 20:44 |
timsim | You're welcome en_austin | 20:45 |
en_austin | I'll come back again tomorrow with ZooKeeper & Designate :) | 20:45 |
en_austin | and couple of more questions... :) | 20:46 |
mugsie | good - I am taking notes so I know what is wrong with our docs | 20:46 |
en_austin | btw I've enabled a debug mode on prod to show you more logs about non-provisioned records | 20:46 |
en_austin | but to tell the truth, I hope that Kilo-Liberty upgrade and cache enabling should help :) | 20:46 |
en_austin | Designate is missing a some step-by-step upgrade FAQ | 20:47 |
en_austin | for example, Kilo-Liberty upgrade FAQ should contain an info about zone-manager, breaking change in backends config, whatever | 20:48 |
mugsie | ++ | 20:48 |
*** jmcbride has quit IRC | 20:52 | |
*** csoukup has quit IRC | 20:52 | |
*** jmcbride has joined #openstack-dns | 20:52 | |
*** jasonsb has joined #openstack-dns | 20:53 | |
openstackgerrit | Eric Larson proposed openstack/designate-specs: Alias Records Spec https://review.openstack.org/214788 | 20:58 |
*** jasonsb has quit IRC | 21:00 | |
en_austin | have a good day, thanks again | 21:00 |
en_austin | see you soon )) | 21:00 |
*** en_austin has quit IRC | 21:01 | |
*** jasonsb has joined #openstack-dns | 21:02 | |
*** ducttape_ has quit IRC | 21:10 | |
*** jmcbride has quit IRC | 21:12 | |
*** jmcbride has joined #openstack-dns | 21:15 | |
*** ducttape_ has joined #openstack-dns | 21:23 | |
*** jasonsb_ has joined #openstack-dns | 21:27 | |
timsim | Kiall: Can I get a procedural +A on this sometime before we freeze: https://review.openstack.org/#/c/230770/ | 21:28 |
*** jasonsb has quit IRC | 21:30 | |
*** pglbutt has joined #openstack-dns | 21:36 | |
*** pglass has quit IRC | 21:39 | |
*** mwagner has quit IRC | 21:42 | |
*** rudrajit has joined #openstack-dns | 21:52 | |
*** rudrajit has quit IRC | 21:52 | |
*** rudrajit has joined #openstack-dns | 21:53 | |
openstackgerrit | Tim Simmons proposed openstack/designate-specs: Incremental Zone Transfer (IXFR) Support https://review.openstack.org/132638 | 21:54 |
*** jasonsb has joined #openstack-dns | 21:55 | |
*** jasonsb_ has quit IRC | 21:59 | |
openstackgerrit | Tim Simmons proposed openstack/designate-specs: Incremental Zone Transfer (IXFR) Support https://review.openstack.org/132638 | 22:02 |
*** pglass has joined #openstack-dns | 22:31 | |
*** pglbutt has quit IRC | 22:35 | |
*** rsyed is now known as rsyed_away | 22:35 | |
*** rsyed_away is now known as rsyed | 22:36 | |
*** jmcbride has quit IRC | 22:45 | |
*** km has joined #openstack-dns | 22:49 | |
*** km is now known as Guest33023 | 22:49 | |
*** jmcbride has joined #openstack-dns | 22:52 | |
*** csoukup has joined #openstack-dns | 22:53 | |
*** jmcbride1 has joined #openstack-dns | 22:55 | |
*** jmcbride has quit IRC | 22:57 | |
*** mwagner has joined #openstack-dns | 22:58 | |
*** jmcbride1 has quit IRC | 23:01 | |
*** Jet has joined #openstack-dns | 23:02 | |
*** csoukup has quit IRC | 23:06 | |
*** csoukup has joined #openstack-dns | 23:10 | |
*** kei_yama has joined #openstack-dns | 23:24 | |
*** jasonsb has quit IRC | 23:25 | |
*** pglass has quit IRC | 23:31 | |
*** ducttape_ has quit IRC | 23:32 | |
*** jmcbride has joined #openstack-dns | 23:39 | |
*** boris-42 has quit IRC | 23:58 | |
*** mlavalle has quit IRC | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!