Openstack Octavia错误：警告Octavia.amphorae.drivers.haproxy.rest_api_驱动程序[-]无法连接到实例

我是研究和实现Openstack Victoria的最后一名学生。在多节点CentOS8上配置Project:Octavia-Loadbalancer时，我遇到了一个问题。似乎octavia.amphorae.drivers.haproxy.rest_api_驱动程序无法连接到Amphora实例，并且端口9443没有在我的网络节点aka octavia api上运行。在控制器节点中，amphora实例仍在正常运行。我按照配置我的实验室。这是我下面的cfg文件，请帮我弄清楚。问候

我在vxlan和lb secgroup类型中创建了lb_网络，当我使用命令创建lb时，它仍然挂起创建：

[root@controller ~(keystone)]# openstack loadbalancer --name lb01 --vip-subnet-id subnet1
[root@controller ~(keystone)]# openstack loadbalancer list
+--------------------------------------+------+----------------------------------+---------------+---------------------+------------------+----------+
| id                                   | name | project_id                       | vip_address   | provisioning_status | operating_status | provider |
+--------------------------------------+------+----------------------------------+---------------+---------------------+------------------+----------+
| 96c355b4-cc6e-4e7f-b393-8139602ae0e6 | lb01 | 16b44a414c0e4884a819f0de4e86fa28 | 172.16.10.98  | ERROR               | OFFLINE          | amphora  |
| 10eaed08-9512-4362-b60e-f07351136909 | lb02 | 16b44a414c0e4884a819f0de4e86fa28 | 172.16.10.96  | ERROR               | OFFLINE          | amphora  |
| 3543f208-2b6b-4c41-99d6-13d7056d9966 | lb03 | 16b44a414c0e4884a819f0de4e86fa28 | 172.16.10.32  | ERROR               | OFFLINE          | amphora  |
| e6349a0c-c146-4d1e-abd9-39320ef482f0 | lb04 | 16b44a414c0e4884a819f0de4e86fa28 | 172.16.10.82  | ERROR               | OFFLINE          | amphora  |
| 5f116527-d089-41ce-9491-b8f0fca32f79 | lb05 | 16b44a414c0e4884a819f0de4e86fa28 | 172.16.10.195 | PENDING_CREATE      | OFFLINE          | amphora  |
+--------------------------------------+------+----------------------------------+---------------+---------------------+------------------+----------+

amphora跑步

 [root@controller ~]# openstack server list --all
    +--------------------------------------+----------------------------------------------+---------+--------------------------------------+---------+----------+
    | ID                                   | Name                                         | Status  | Networks                             | Image   | Flavor   |
    +--------------------------------------+----------------------------------------------+---------+--------------------------------------+---------+----------+
    | 83e113e6-061e-4e41-8ef0-d6c42f80a35c | amphora-611f3678-fb15-428a-88ac-8d34ab6f61e1 | ACTIVE  | lb-mgmt-net=172.16.1.208             | Amphora | amphora  |
    | 7770c395-a24c-49ee-aed1-b483fa0dea08 | CentOS_8                                     | SHUTOFF | int_net=172.16.10.139, 192.168.1.236 | CentOS8 | m1.small |
    +--------------------------------------+----------------------------------------------+---------+--------------------------------------+---------+----------+

我的octavia工作日志：

2021-05-07 01:34:52.401 41977 INFO octavia.controller.queue.v1.consumer [-] Starting consumer...
2021-05-07 01:34:52.416 41980 INFO octavia.controller.queue.v2.consumer [-] Starting V2 consumer...
2021-05-07 01:35:05.409 41977 INFO octavia.controller.queue.v1.endpoints [-] Creating load balancer '5f116527-d089-41ce-9491-b8f0fca32f79'...
2021-05-07 01:35:06.662 41977 INFO octavia.network.drivers.neutron.allowed_address_pairs [-] Port 7a0025b4-5ce6-4664-a451-caef1aac1ce3 already exists. Nothing to be done.
2021-05-07 01:35:07.416 41977 INFO octavia.controller.worker.v1.tasks.database_tasks [-] Created Amphora in DB with id 611f3678-fb15-428a-88ac-8d34ab6f61e1
2021-05-07 01:35:07.580 41977 INFO octavia.certificates.generator.local [-] Signing a certificate request using OpenSSL locally.
2021-05-07 01:35:07.581 41977 INFO octavia.certificates.generator.local [-] Using CA Certificate from config.
2021-05-07 01:35:07.581 41977 INFO octavia.certificates.generator.local [-] Using CA Private Key from config.
2021-05-07 01:35:07.581 41977 INFO octavia.certificates.generator.local [-] Using CA Private Key Passphrase from config.
2021-05-07 01:35:55.495 41977 WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.: requests.exceptions.ConnectTimeout: HTTPSConnectionPool(host='172.16.1.208', port=9443): Max retries exceeded with url: // (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f1e74584f28>, 'Connection to 172.16.1.208 timed out. (connect timeout=10.0)'))
2021-05-07 01:36:10.516 41977 WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.: requests.exceptions.ConnectTimeout: HTTPSConnectionPool(host='172.16.1.208', port=9443): Max retries exceeded with url: // (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f1e74584ef0>, 'Connection to 172.16.1.208 timed out. (connect timeout=10.0)'))
2021-05-07 01:36:25.531 41977 WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.: requests.exceptions.ConnectTimeout: HTTPSConnectionPool(host='172.16.1.208', port=9443): Max retries exceeded with url: // (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f1e745913c8>, 'Connection to 172.16.1.208 timed out. (connect timeout=10.0)'))
2021-05-07 01:36:40.539 41977 WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.: requests.exceptions.ConnectTimeout: HTTPSConnectionPool(host='172.16.1.208', port=9443): Max retries exceeded with url: // (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f1e74591358>, 'Connection to 172.16.1.208 timed out. (connect timeout=10.0)'))
2021-05-07 01:36:55.555 41977 WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.: requests.exceptions.ConnectTimeout: HTTPSConnectionPool(host='172.16.1.208', port=9443): Max retries exceeded with url: // (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f1e745916a0>, 'Connection to 172.16.1.208 timed out. (connect timeout=10.0)'))

vim/etc/octavia/octavia.conf

[DEFAULT]
transport_url = rabbit://openstack:password@10.200.0.4

[api_settings]
bind_host = 10.200.0.41
bind_port = 9876
auth_strategy = keystone
api_base_uri = http://10.200.0.41:9876

[database]
connection = mysql+pymysql://octavia:password@10.200.0.4/octavia

[health_manager]
bind_ip = 0.0.0.0
bind_port = 5555

[keystone_authtoken]
www_authenticate_uri = http://10.200.0.4:5000
auth_url = http://10.200.0.4:5000
memcached_servers = 10.200.0.4:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = octavia
password = servicepassword

[certificates]
ca_private_key = /etc/octavia/certs/private/server_ca.key.pem
ca_certificate = /etc/octavia/certs/server_ca.cert.pem
server_certs_key_passphrase = insecure-key-do-not-use-this-key
ca_private_key_passphrase = not-secure-passphrase

[haproxy_amphora]
bind_host = 10.200.0.41
bind_port = 9443
server_ca = /etc/octavia/certs/server_ca-chain.cert.pem
client_cert = /etc/octavia/certs/private/client.cert-and-key.pem

[controller_worker]
client_ca = /etc/octavia/certs/client_ca.cert.pem
amp_image_tag = Amphora
# specify [flavor] ID for Amphora instance
amp_flavor_id = 100
# specify security group ID Amphora instance
amp_secgroup_list = b02c2f59-9fff-4428-accc-2bd9a7a337e5
# specify network ID to boot Amphora instance 
amp_boot_network_list = e05c8fe4-9a6d-4192-b9b5-7d7a2ba11df8
network_driver = allowed_address_pairs_driver
compute_driver = compute_nova_driver
amphora_driver = amphora_haproxy_rest_driver

[oslo_messaging]
topic = octavia_prov

[service_auth]
auth_url = http://10.200.0.4:5000
memcached_servers = 10.200.0.4:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = octavia
password = servicepassword

我在amphora实例上登录用户root并检查端口9443，它运行良好

root@amphora-f36ed983-6d14-46a6-b686-8942379f2580:netstat -lntp | grep ":9443"
    tcp      0       0  controller-ip:9443       0.0.0.0:*     LISTEN     697/gunicorn: maste

然后在控制器节点上尝试netstat-plane | grep:“9443”（我不知道这个命令是什么意思，我在其他组中看到了它）

---

在octavia.cfg中，我没有使用health_manager服务，所以我将bind_host设置为0.0.0.0。另一方面，我忽略了在中创建OCTAVIA_MGMT_PORT_IP（步骤7-8）。我做错了吗？

好的，我的问题已经解决了。Octavia api节点无法连接到amphorae实例，因为它们不匹配相同的网络类型（节点-LAN和amphorae-VXLAN）。因此，我在一个节点上创建了一个桥接接口，将vxlan转换为lan can connect（）

致以最崇高的敬意

求你了。编辑问题并用错误文本替换图像。话虽如此，您所说的“9443端口未运行”是什么意思？在任何情况下，我都会使用。

root@amphora-f36ed983-6d14-46a6-b686-8942379f2580:netstat -lntp | grep ":9443"
    tcp      0       0  controller-ip:9443       0.0.0.0:*     LISTEN     697/gunicorn: maste

[root@controller ~(keystone)]# netstat -plane | grep ":9443"
tcp        0      1 192.168.1.3:54416       172.16.1.100:9443       SYN_SENT    966        108134     2773/octavia-worker