Skip to content

Instantly share code, notes, and snippets.

@fasaxc
Created June 6, 2017 10:02
Show Gist options
  • Save fasaxc/1bfe9cb6e4d95c620e8a51081b58139c to your computer and use it in GitHub Desktop.
Save fasaxc/1bfe9cb6e4d95c620e8a51081b58139c to your computer and use it in GitHub Desktop.
***** Start of errors in logs from /var/log/calico/felix/current on host1 *****
=== LOG 2017-06-06 09:20:15 ERROR [pid 314] ===
2017-06-06 09:20:15.949 [ERROR][314] ipsets.go 588: Failed to complete ipset restore, IP sets may be out-of-sync. closeErr=<nil> commitErr=<nil> family="inet6" flushErr=<nil> processErr=exit status 1 stderr="ipset v6.29: Error in line 4: Set cannot be destroyed: it is in use by a kernel component\n" stdout="" writeErr=<nil>
=== LOG 2017-06-06 09:20:15 ERROR [pid 314] ===
2017-06-06 09:20:15.949 [ERROR][314] ipsets.go 257: Failed to update IP sets. error=exit status 1 family="inet6"
****** End of errors in logs from /var/log/calico/felix/current on host1 ******
***** Start of context logs from /var/log/calico/felix/current on host1 *****
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 316: Parsed value for LogFilePath: (from config file)
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 280: Parsing value for DefaultEndpointToHostAction: RETURN (from datastore (per-host))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 316: Parsed value for DefaultEndpointToHostAction: RETURN (from datastore (per-host))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 280: Parsing value for ReportingIntervalSecs: 0 (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 316: Parsed value for ReportingIntervalSecs: 0 (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 280: Parsing value for LogSeverityScreen: info (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 316: Parsed value for LogSeverityScreen: INFO (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 280: Parsing value for UsageReportingEnabled: False (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 316: Parsed value for UsageReportingEnabled: false (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 280: Parsing value for ClusterGUID: 4b761b2f471043be8e96c0c7d793d2a8 (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 316: Parsed value for ClusterGUID: 4b761b2f471043be8e96c0c7d793d2a8 (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 280: Parsing value for IpInIpEnabled: true (from datastore (global))
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.750 [INFO][105] config_params.go 316: Parsed value for IpInIpEnabled: true (from datastore (global))
2017-06-06 09:20:13 WARNING 105 2017-06-06 09:20:13.750 [WARNING][105] event_sequencer.go 203: Config changed. Sending ConfigUpdate message. merged=map[string]string{"ReportingIntervalSecs":"0", "UsageReportingEnabled":"False", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "EtcdEndpoints":"http://192.168.122.40:2379", "LogSeveritySys":"None", "MetadataAddr":"None", "LogFilePath":"None", "DefaultEndpointToHostAction":"RETURN", "IpInIpEnabled":"true", "FelixHostname":"056fefe3c94d", "LogSeverityFile":"None", "LogSeverityScreen":"info"}
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.753 [INFO][105] felix.go 775: Possible config update new=map[string]string{"LogSeverityFile":"None", "LogSeverityScreen":"info", "FelixHostname":"056fefe3c94d", "LogSeveritySys":"None", "MetadataAddr":"None", "LogFilePath":"None", "DefaultEndpointToHostAction":"RETURN", "ReportingIntervalSecs":"0", "UsageReportingEnabled":"False", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "EtcdEndpoints":"http://192.168.122.40:2379", "IpInIpEnabled":"true"} old=map[string]string{"LogSeveritySys":"None", "MetadataAddr":"None", "LogSeverityScreen":"info", "ReportingIntervalSecs":"0", "FelixHostname":"056fefe3c94d", "LogSeverityFile":"None", "UsageReportingEnabled":"False", "EtcdEndpoints":"http://192.168.122.40:2379", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "LogFilePath":"None", "DefaultEndpointToHostAction":"RETURN"}
2017-06-06 09:20:13 WARNING 105 2017-06-06 09:20:13.753 [WARNING][105] felix.go 777: Felix configuration changed. Need to restart. new=map[string]string{"ReportingIntervalSecs":"0", "UsageReportingEnabled":"False", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "EtcdEndpoints":"http://192.168.122.40:2379", "LogSeveritySys":"None", "MetadataAddr":"None", "LogFilePath":"None", "DefaultEndpointToHostAction":"RETURN", "IpInIpEnabled":"true", "FelixHostname":"056fefe3c94d", "LogSeverityFile":"None", "LogSeverityScreen":"info"} old=map[string]string{"EtcdEndpoints":"http://192.168.122.40:2379", "LogSeveritySys":"None", "MetadataAddr":"None", "LogSeverityScreen":"info", "ReportingIntervalSecs":"0", "FelixHostname":"056fefe3c94d", "LogSeverityFile":"None", "UsageReportingEnabled":"False", "DefaultEndpointToHostAction":"RETURN", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "LogFilePath":"None"}
2017-06-06 09:20:13 WARNING 105 2017-06-06 09:20:13.753 [WARNING][105] felix.go 549: Felix is shutting down reason="config changed"
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.753 [INFO][105] felix.go 589: Shutdown wasn't caused by signal, pausing to avoid tight restart loop reason="config changed"
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.754 [INFO][105] table.go 416: Loading current iptables state and checking it is correct. ipVersion=0x4 table="nat"
2017-06-06 09:20:13 INFO 105 2017-06-06 09:20:13.756 [INFO][105] int_dataplane.go 599: Finished applying updates to dataplane. msecToApply=18.949873999999998
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.705 [INFO][105] int_dataplane.go 584: Applying dataplane updates
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.705 [INFO][105] table.go 632: Invalidating dataplane cache ipVersion=0x6 reason="post update" table="filter"
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.705 [INFO][105] table.go 416: Loading current iptables state and checking it is correct. ipVersion=0x6 table="filter"
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.707 [INFO][105] int_dataplane.go 599: Finished applying updates to dataplane. msecToApply=1.876263
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.708 [INFO][105] int_dataplane.go 584: Applying dataplane updates
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.708 [INFO][105] table.go 632: Invalidating dataplane cache ipVersion=0x4 reason="post update" table="filter"
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.708 [INFO][105] table.go 416: Loading current iptables state and checking it is correct. ipVersion=0x4 table="filter"
2017-06-06 09:20:14 INFO 105 2017-06-06 09:20:14.709 [INFO][105] int_dataplane.go 599: Finished applying updates to dataplane. msecToApply=1.539145
2017-06-06 09:20:15 FATAL 105 2017-06-06 09:20:15.754 [FATAL][105] felix.go 592: Exiting. reason="config changed"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.838 [INFO][314] felix.go 227: Successfully loaded configuration. GOMAXPROCS=4 buildDate="2017-06-06T08:48:04+0000" config=&config.Config{UseInternalDataplaneDriver:true, DataplaneDriver:"calico-iptables-plugin", DatastoreType:"etcdv2", FelixHostname:"056fefe3c94d", EtcdAddr:"127.0.0.1:2379", EtcdScheme:"http", EtcdKeyFile:"", EtcdCertFile:"", EtcdCaFile:"", EtcdEndpoints:[]string{"http://192.168.122.40:2379/"}, TyphaAddr:"", TyphaK8sServiceName:"", TyphaK8sNamespace:"kube-system", Ipv6Support:true, IgnoreLooseRPF:false, IptablesRefreshInterval:10, MetadataAddr:"", MetadataPort:8775, InterfacePrefix:"cali", ChainInsertMode:"insert", DefaultEndpointToHostAction:"RETURN", LogPrefix:"calico-packet", LogFilePath:"", LogSeverityFile:"", LogSeverityScreen:"INFO", LogSeveritySys:"", IpInIpEnabled:true, IpInIpMtu:1440, IpInIpTunnelAddr:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xc0, 0xa8, 0x19, 0x41}, ReportingIntervalSecs:0, ReportingTTLSecs:90, EndpointReportingEnabled:false, EndpointReportingDelaySecs:1, MaxIpsetSize:1048576, IptablesMarkMask:0xff000000, DisableConntrackInvalidCheck:false, PrometheusMetricsEnabled:false, PrometheusMetricsPort:9091, PrometheusGoMetricsEnabled:true, PrometheusProcessMetricsEnabled:true, FailsafeInboundHostPorts:[]config.ProtoPort{config.ProtoPort{Protocol:"tcp", Port:0x16}, config.ProtoPort{Protocol:"udp", Port:0x44}}, FailsafeOutboundHostPorts:[]config.ProtoPort{config.ProtoPort{Protocol:"tcp", Port:0x94b}, config.ProtoPort{Protocol:"tcp", Port:0x94c}, config.ProtoPort{Protocol:"tcp", Port:0xfa1}, config.ProtoPort{Protocol:"tcp", Port:0x1b59}, config.ProtoPort{Protocol:"udp", Port:0x35}, config.ProtoPort{Protocol:"udp", Port:0x43}}, UsageReportingEnabled:false, ClusterGUID:"4b761b2f471043be8e96c0c7d793d2a8", ClusterType:"", DebugMemoryProfilePath:"", DebugDisableLogDropping:false, sourceToRawConfig:map[config.Source]map[string]string{0x4:map[string]string{"etcdendpoints":"http://192.168.122.40:2379", "felixhostname":"056fefe3c94d"}, 0x3:map[string]string{"LogSeveritySys":"None", "MetadataAddr":"None", "LogFilePath":"None", "LogSeverityFile":"None"}, 0x1:map[string]string{"ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "IpInIpEnabled":"true", "LogSeverityScreen":"info", "ReportingIntervalSecs":"0", "UsageReportingEnabled":"False"}, 0x2:map[string]string{"DefaultEndpointToHostAction":"RETURN", "IpInIpTunnelAddr":"192.168.25.65"}}, rawValues:map[string]string{"UsageReportingEnabled":"False", "LogSeverityScreen":"info", "LogSeveritySys":"None", "IpInIpTunnelAddr":"192.168.25.65", "MetadataAddr":"None", "LogFilePath":"None", "LogSeverityFile":"None", "DefaultEndpointToHostAction":"RETURN", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "IpInIpEnabled":"true", "EtcdEndpoints":"http://192.168.122.40:2379", "FelixHostname":"056fefe3c94d", "ReportingIntervalSecs":"0"}, Err:error(nil), numIptablesBitsAllocated:0} gitCommit="803a8189fab4dee6fcd2ccd4ba1d1a75f7aec98c" version="2.3.0-rc.1"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.838 [INFO][314] felix.go 234: Using internal dataplane driver.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.838 [INFO][314] felix.go 242: Calculated iptables mark bits acceptMark=0x1000000 passMark=0x2000000 workloadMark=0x4000000
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.838 [INFO][314] int_dataplane.go 176: Creating internal dataplane driver. config=intdataplane.Config{IPv6Enabled:true, RuleRendererOverride:rules.RuleRenderer(nil), IPIPMTU:1440, IgnoreLooseRPF:false, MaxIPSetSize:1048576, IptablesRefreshInterval:10000000000, IptablesInsertMode:"insert", RulesConfig:rules.Config{IPSetConfigV4:(*ipsets.IPVersionConfig)(0xc42012cf50), IPSetConfigV6:(*ipsets.IPVersionConfig)(0xc42012d0e0), WorkloadIfacePrefixes:[]string{"cali"}, IptablesMarkAccept:0x1000000, IptablesMarkPass:0x2000000, IptablesMarkFromWorkload:0x4000000, OpenStackMetadataIP:net.IP(nil), OpenStackMetadataPort:0x2247, OpenStackSpecialCasesEnabled:true, IPIPEnabled:true, IPIPTunnelAddress:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xc0, 0xa8, 0x19, 0x41}, IptablesLogPrefix:"calico-packet", EndpointToHostAction:"RETURN", FailsafeInboundHostPorts:[]config.ProtoPort{config.ProtoPort{Protocol:"tcp", Port:0x16}, config.ProtoPort{Protocol:"udp", Port:0x44}}, FailsafeOutboundHostPorts:[]config.ProtoPort{config.ProtoPort{Protocol:"tcp", Port:0x94b}, config.ProtoPort{Protocol:"tcp", Port:0x94c}, config.ProtoPort{Protocol:"tcp", Port:0xfa1}, config.ProtoPort{Protocol:"tcp", Port:0x1b59}, config.ProtoPort{Protocol:"udp", Port:0x35}, config.ProtoPort{Protocol:"udp", Port:0x43}}, DisableConntrackInvalid:false}, StatusReportingInterval:0, PostInSyncCallback:(func())(0x13a85d0)}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.838 [INFO][314] rule_defs.go 203: Creating rule renderer. config=rules.Config{IPSetConfigV4:(*ipsets.IPVersionConfig)(0xc42012cf50), IPSetConfigV6:(*ipsets.IPVersionConfig)(0xc42012d0e0), WorkloadIfacePrefixes:[]string{"cali"}, IptablesMarkAccept:0x1000000, IptablesMarkPass:0x2000000, IptablesMarkFromWorkload:0x4000000, OpenStackMetadataIP:net.IP(nil), OpenStackMetadataPort:0x2247, OpenStackSpecialCasesEnabled:true, IPIPEnabled:true, IPIPTunnelAddress:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xc0, 0xa8, 0x19, 0x41}, IptablesLogPrefix:"calico-packet", EndpointToHostAction:"RETURN", FailsafeInboundHostPorts:[]config.ProtoPort{config.ProtoPort{Protocol:"tcp", Port:0x16}, config.ProtoPort{Protocol:"udp", Port:0x44}}, FailsafeOutboundHostPorts:[]config.ProtoPort{config.ProtoPort{Protocol:"tcp", Port:0x94b}, config.ProtoPort{Protocol:"tcp", Port:0x94c}, config.ProtoPort{Protocol:"tcp", Port:0xfa1}, config.ProtoPort{Protocol:"tcp", Port:0x1b59}, config.ProtoPort{Protocol:"udp", Port:0x35}, config.ProtoPort{Protocol:"udp", Port:0x43}}, DisableConntrackInvalid:false}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.838 [INFO][314] rule_defs.go 215: Workload to host packets will be returned to INPUT chain.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] route_table.go 99: Calculated interface name regexp regex="^cali.*"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] ipsets.go 106: Queueing IP set for creation family="inet" setID="all-ipam-pools" setType="hash:net"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] ipsets.go 106: Queueing IP set for creation family="inet" setID="masq-ipam-pools" setType="hash:net"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] route_table.go 99: Calculated interface name regexp regex="^cali.*"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] ipsets.go 106: Queueing IP set for creation family="inet6" setID="all-ipam-pools" setType="hash:net"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] ipsets.go 106: Queueing IP set for creation family="inet6" setID="masq-ipam-pools" setType="hash:net"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-in" ipVersion=0x4 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-out" ipVersion=0x4 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-PREROUTING" ipVersion=0x4 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x4 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-in" ipVersion=0x6 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-out" ipVersion=0x6 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-PREROUTING" ipVersion=0x6 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x6 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] static.go 132: Adding OpenStack special-case rules.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-FORWARD" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-INPUT" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-wl-to-host" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-in" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-out" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] static.go 132: Adding OpenStack special-case rules.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-FORWARD" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-INPUT" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-wl-to-host" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-in" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-failsafe-out" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] int_dataplane.go 432: IPIP enabled, starting thread to keep tunnel configuration in sync.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-PREROUTING" ipVersion=0x4 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-POSTROUTING" ipVersion=0x4 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x4 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-PREROUTING" ipVersion=0x6 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-POSTROUTING" ipVersion=0x6 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x6 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] felix.go 300: Connect to the dataplane driver.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] felix.go 336: Created Syncer syncer=&etcd.etcdSyncer{callbacks:(*calc.SyncerCallbacksDecoupler)(0xc42000c1f0), keysAPI:(*client.httpKeysAPI)(0xc4204f7980), OneShot:false}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] calc_graph.go 87: Creating calculation graph, filtered to hostname 056fefe3c94d
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x12ea170)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x12ea170)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x12ea230)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x12ea230)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x12ea060)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x12ea060)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.PolicyKey: (dispatcher.UpdateHandler)(0x12ea060)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.ProfileRulesKey: (dispatcher.UpdateHandler)(0x12ea060)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.ProfileLabelsKey: (dispatcher.UpdateHandler)(0x12ea060)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.ProfileTagsKey: (dispatcher.UpdateHandler)(0x12ea060)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.ProfileTagsKey: (dispatcher.UpdateHandler)(0x11d4ac0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.ProfileLabelsKey: (dispatcher.UpdateHandler)(0x11d4ac0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x11d4ac0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.839 [INFO][314] dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x11d4ac0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x12ea420)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x12ea420)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.PolicyKey: (dispatcher.UpdateHandler)(0x12ea490)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x12ea490)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x12ea490)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.HostIPKey: (dispatcher.UpdateHandler)(0x12ea360)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.IPPoolKey: (dispatcher.UpdateHandler)(0x12ea360)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.GlobalConfigKey: (dispatcher.UpdateHandler)(0x12ea2a0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.HostConfigKey: (dispatcher.UpdateHandler)(0x12ea2a0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.ReadyFlagKey: (dispatcher.UpdateHandler)(0x12ea2a0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.HostIPKey: (dispatcher.UpdateHandler)(0x12ea5c0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x12ea5c0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x12ea5c0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] dispatcher.go 68: Registering listener for type model.HostConfigKey: (dispatcher.UpdateHandler)(0x12ea5c0)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] felix.go 399: Starting the datastore Syncer/processing graph
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.840 [INFO][314] syncer.go 132: Starting etcd Syncer
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] syncer.go 149: Syncer not in one-shot mode, starting watcher thread
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] async_calc_graph.go 189: Starting AsyncCalcGraph
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] iface_monitor.go 73: Interface monitoring thread started.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] iface_monitor.go 80: Subscribed to netlink updates.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] int_dataplane.go 355: Linux interface state changed. ifaceName="lo" state="up"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] int_dataplane.go 373: Linux interface addrs changed. addrs=set.mapSet{"127.0.0.1":set.empty{}, "::1":set.empty{}} ifaceName="lo"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] int_dataplane.go 373: Linux interface addrs changed. addrs=set.mapSet{} ifaceName="tunl0"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] int_dataplane.go 373: Linux interface addrs changed. addrs=set.mapSet{"172.18.0.1":set.empty{}} ifaceName="docker0"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] int_dataplane.go 355: Linux interface state changed. ifaceName="cali1ed4936440e" state="up"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] int_dataplane.go 373: Linux interface addrs changed. addrs=set.mapSet{"fe80::940b:6bff:fe13:30fc":set.empty{}} ifaceName="cali1ed4936440e"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] int_dataplane.go 355: Linux interface state changed. ifaceName="eth0" state="up"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] int_dataplane.go 373: Linux interface addrs changed. addrs=set.mapSet{"fe80::42:acff:fe11:2":set.empty{}, "172.17.0.2":set.empty{}} ifaceName="eth0"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.841 [INFO][314] felix.go 403: Started the datastore Syncer/processing graph
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] felix.go 692: Reading from dataplane driver pipe...
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] async_calc_graph.go 114: AsyncCalcGraph running
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] felix.go 775: Possible config update new=map[string]string{"IpInIpEnabled":"true", "EtcdEndpoints":"http://192.168.122.40:2379", "FelixHostname":"056fefe3c94d", "MetadataAddr":"None", "LogFilePath":"None", "LogSeverityFile":"None", "DefaultEndpointToHostAction":"RETURN", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "ReportingIntervalSecs":"0", "LogSeveritySys":"None", "IpInIpTunnelAddr":"192.168.25.65", "UsageReportingEnabled":"False", "LogSeverityScreen":"info"} old=map[string]string(nil)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] felix.go 780: Config resolved. new=map[string]string{"LogSeveritySys":"None", "IpInIpTunnelAddr":"192.168.25.65", "UsageReportingEnabled":"False", "LogSeverityScreen":"info", "DefaultEndpointToHostAction":"RETURN", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8", "IpInIpEnabled":"true", "EtcdEndpoints":"http://192.168.122.40:2379", "FelixHostname":"056fefe3c94d", "MetadataAddr":"None", "LogFilePath":"None", "LogSeverityFile":"None", "ReportingIntervalSecs":"0"} old=map[string]string(nil)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] syncer.go 170: Syncer snapshot-reading thread started
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] felix.go 527: No driver process to monitor
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] syncer.go 247: etcd watch thread started.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.842 [INFO][314] syncer.go 366: Cluster ID poll thread started
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.843 [INFO][314] ipip_mgr.go 77: IPIP thread started.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.843 [INFO][314] int_dataplane.go 456: Started internal iptables dataplane driver loop
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.843 [INFO][314] ipip_mgr.go 117: Tunnel device MTU needs to be updated mtu=1440 oldMTU=1480 tunnelAddr=192.168.25.65
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.843 [INFO][314] int_dataplane.go 502: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"lo", Addrs:set.mapSet{"127.0.0.1":set.empty{}, "::1":set.empty{}}}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.843 [INFO][314] ipip_mgr.go 122: Updated tunnel MTU mtu=1440 tunnelAddr=192.168.25.65
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.843 [INFO][314] int_dataplane.go 502: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{}}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] syncer.go 377: etcd cluster ID now known clusterID="cdf818194e3a8c32"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] int_dataplane.go 502: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"docker0", Addrs:set.mapSet{"172.18.0.1":set.empty{}}}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] int_dataplane.go 807: Started internal status report thread
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] int_dataplane.go 809: Process status reports disabled
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] int_dataplane.go 502: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"cali1ed4936440e", Addrs:set.mapSet{"fe80::940b:6bff:fe13:30fc":set.empty{}}}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] int_dataplane.go 502: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"eth0", Addrs:set.mapSet{"fe80::42:acff:fe11:2":set.empty{}, "172.17.0.2":set.empty{}}}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.843 [INFO][314] ipip_mgr.go 125: Tunnel wasn't admin up, enabling it flags=0 mtu=1440 tunnelAddr=192.168.25.65
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] ipip_mgr.go 130: Set tunnel admin up mtu=1440 tunnelAddr=192.168.25.65
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] ipip_mgr.go 175: Address wasn't present, adding it. addr=192.168.25.65 link="tunl0"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] int_dataplane.go 478: Received *proto.ConfigUpdate update from calculation graph msg=config:<key:"ClusterGUID" value:"4b761b2f471043be8e96c0c7d793d2a8" > config:<key:"DefaultEndpointToHostAction" value:"RETURN" > config:<key:"EtcdEndpoints" value:"http://192.168.122.40:2379" > config:<key:"FelixHostname" value:"056fefe3c94d" > config:<key:"IpInIpEnabled" value:"true" > config:<key:"IpInIpTunnelAddr" value:"192.168.25.65" > config:<key:"LogFilePath" value:"None" > config:<key:"LogSeverityFile" value:"None" > config:<key:"LogSeverityScreen" value:"info" > config:<key:"LogSeveritySys" value:"None" > config:<key:"MetadataAddr" value:"None" > config:<key:"ReportingIntervalSecs" value:"0" > config:<key:"UsageReportingEnabled" value:"False" >
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.844 [INFO][314] int_dataplane.go 492: Received interface update msg=&intdataplane.ifaceUpdate{Name:"lo", State:"up"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] int_dataplane.go 492: Received interface update msg=&intdataplane.ifaceUpdate{Name:"cali1ed4936440e", State:"up"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] int_dataplane.go 492: Received interface update msg=&intdataplane.ifaceUpdate{Name:"eth0", State:"up"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] iface_monitor.go 143: Netlink address update. addr="192.168.25.65" exists=true ifIndex=2
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] int_dataplane.go 373: Linux interface addrs changed. addrs=set.mapSet{"192.168.25.65":set.empty{}} ifaceName="tunl0"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] int_dataplane.go 355: Linux interface state changed. ifaceName="tunl0" state="up"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] int_dataplane.go 502: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{"192.168.25.65":set.empty{}}}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] int_dataplane.go 492: Received interface update msg=&intdataplane.ifaceUpdate{Name:"tunl0", State:"up"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] syncer.go 262: Polled etcd for initial watch index. index=0x339
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] syncer.go 469: Watcher out-of-sync, starting to track deletions
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] syncer.go 508: Watcher is out-of-sync but no snapshot in progress, starting one.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] syncer.go 179: Asked for new snapshot newMinIndex=0x339
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.845 [INFO][314] syncer.go 188: Newest snapshot is too stale, loading a new one currentIdx=0x0 requiredIdx=0x339
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.846 [INFO][314] syncer.go 473: Started receiving snapshot snapshotIndex=0x339
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.847 [INFO][314] calc_graph.go 213: Local endpoint updated id=WorkloadEndpoint(node=056fefe3c94d, orchestrator=libnetwork, workload=libnetwork, name=1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.847 [INFO][314] config_batcher.go 60: Host config update for this host: {{HostConfig(node=056fefe3c94d,name=DefaultEndpointToHostAction) RETURN 771 0s} 1}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.849 [INFO][314] config_batcher.go 60: Host config update for this host: {{HostConfig(node=056fefe3c94d,name=IpInIpTunnelAddr) 192.168.25.65 822 0s} 1}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.850 [INFO][314] calc_graph.go 133: Selector has(subnet1) now active
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.850 [INFO][314] label_inheritance_index.go 193: Updating selector s:mHDOqpY19uvpC-3qX-0xeq2L0X-6-k7U9f8YHA
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.850 [INFO][314] syncer.go 482: Finished receiving snapshot, cleaning up old keys. minSnapshotIndex=0x339 snapshotIndex=0x339
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.850 [INFO][314] config_batcher.go 70: Global config update: {{GlobalConfig(name=ClusterGUID) 4b761b2f471043be8e96c0c7d793d2a8 761 0s} 1}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.850 [INFO][314] config_batcher.go 70: Global config update: {{GlobalConfig(name=ReportingIntervalSecs) 0 769 0s} 1}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.850 [INFO][314] config_batcher.go 70: Global config update: {{GlobalConfig(name=LogSeverityScreen) info 770 0s} 1}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] syncer.go 487: Deleted old keys that weren't seen in snapshot. minSnapshotIndex=0x339 numDeletedKeys=0 snapshotIndex=0x339
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] syncer.go 495: Snapshot brought us into sync. minSnapshotIndex=0x339 snapshotIndex=0x339
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_batcher.go 70: Global config update: {{GlobalConfig(name=IpInIpEnabled) true 824 0s} 1}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_batcher.go 70: Global config update: {{GlobalConfig(name=UsageReportingEnabled) False 757 0s} 1}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_batcher.go 97: Datamodel in sync, flushing config update
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_batcher.go 108: Sending config update global: map[IpInIpEnabled:true UsageReportingEnabled:False ClusterGUID:4b761b2f471043be8e96c0c7d793d2a8 ReportingIntervalSecs:0 LogSeverityScreen:info], host: map[IpInIpTunnelAddr:192.168.25.65 DefaultEndpointToHostAction:RETURN].
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] async_calc_graph.go 138: First time we've been in sync
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] event_sequencer.go 192: Possible config update. global=map[string]string{"ReportingIntervalSecs":"0", "LogSeverityScreen":"info", "IpInIpEnabled":"true", "UsageReportingEnabled":"False", "ClusterGUID":"4b761b2f471043be8e96c0c7d793d2a8"} host=map[string]string{"DefaultEndpointToHostAction":"RETURN", "IpInIpTunnelAddr":"192.168.25.65"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 179: Merging in config from datastore (global): map[UsageReportingEnabled:False ClusterGUID:4b761b2f471043be8e96c0c7d793d2a8 ReportingIntervalSecs:0 LogSeverityScreen:info IpInIpEnabled:true]
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for EtcdEndpoints: http://192.168.122.40:2379 (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for EtcdEndpoints: [http://192.168.122.40:2379/] (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for FelixHostname: 056fefe3c94d (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for FelixHostname: 056fefe3c94d (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for LogSeveritySys: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for LogSeveritySys: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for MetadataAddr: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for MetadataAddr: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for LogFilePath: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for LogFilePath: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for LogSeverityFile: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for LogSeverityFile: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for DefaultEndpointToHostAction: RETURN (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for DefaultEndpointToHostAction: RETURN (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for IpInIpTunnelAddr: 192.168.25.65 (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for IpInIpTunnelAddr: 192.168.25.65 (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for ClusterGUID: 4b761b2f471043be8e96c0c7d793d2a8 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 316: Parsed value for ClusterGUID: 4b761b2f471043be8e96c0c7d793d2a8 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.851 [INFO][314] config_params.go 280: Parsing value for ReportingIntervalSecs: 0 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for ReportingIntervalSecs: 0 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for LogSeverityScreen: info (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for LogSeverityScreen: INFO (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for IpInIpEnabled: true (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for IpInIpEnabled: true (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for UsageReportingEnabled: False (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for UsageReportingEnabled: false (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 179: Merging in config from datastore (per-host): map[DefaultEndpointToHostAction:RETURN IpInIpTunnelAddr:192.168.25.65]
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for EtcdEndpoints: http://192.168.122.40:2379 (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for EtcdEndpoints: [http://192.168.122.40:2379/] (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for FelixHostname: 056fefe3c94d (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for FelixHostname: 056fefe3c94d (from environment variable)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for MetadataAddr: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for MetadataAddr: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for LogFilePath: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for LogFilePath: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for LogSeverityFile: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for LogSeverityFile: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for LogSeveritySys: None (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 297: Value set to 'none', replacing with zero-value: "".
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for LogSeveritySys: (from config file)
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for DefaultEndpointToHostAction: RETURN (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for DefaultEndpointToHostAction: RETURN (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for IpInIpTunnelAddr: 192.168.25.65 (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for IpInIpTunnelAddr: 192.168.25.65 (from datastore (per-host))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for LogSeverityScreen: info (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for LogSeverityScreen: INFO (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for IpInIpEnabled: true (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for IpInIpEnabled: true (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for UsageReportingEnabled: False (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for UsageReportingEnabled: false (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for ClusterGUID: 4b761b2f471043be8e96c0c7d793d2a8 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for ClusterGUID: 4b761b2f471043be8e96c0c7d793d2a8 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 280: Parsing value for ReportingIntervalSecs: 0 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.852 [INFO][314] config_params.go 316: Parsed value for ReportingIntervalSecs: 0 (from datastore (global))
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] int_dataplane.go 478: Received *proto.IPSetUpdate update from calculation graph msg=id:"s:mHDOqpY19uvpC-3qX-0xeq2L0X-6-k7U9f8YHA" members:"192.168.25.64" members:"192.168.101.192"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] ipsets.go 106: Queueing IP set for creation family="inet" setID="s:mHDOqpY19uvpC-3qX-0xeq2L0X-6-k7U9f8YHA" setType="hash:ip"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] ipsets.go 106: Queueing IP set for creation family="inet6" setID="s:mHDOqpY19uvpC-3qX-0xeq2L0X-6-k7U9f8YHA" setType="hash:ip"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] async_calc_graph.go 171: First flush after becoming in sync, sending InSync message.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] felix.go 764: Datastore now in sync.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] felix.go 766: Datastore in sync for first time, sending message to status reporter.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] int_dataplane.go 478: Received *proto.ActiveProfileUpdate update from calculation graph msg=id:<name:"subnet1" > profile:<inbound_rules:<action:"allow" src_ip_set_ids:"s:mHDOqpY19uvpC-3qX-0xeq2L0X-6-k7U9f8YHA" rule_id:"BVHfZid6jZgIrP6p" > outbound_rules:<action:"allow" rule_id:"sVb-cNX8FcAzBQ1S" > >
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-pri-subnet1" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-pro-subnet1" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-pri-subnet1" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-pro-subnet1" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.853 [INFO][314] int_dataplane.go 478: Received *proto.WorkloadEndpointUpdate update from calculation graph msg=id:<orchestrator_id:"libnetwork" workload_id:"libnetwork" endpoint_id:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3" > endpoint:<state:"active" name:"cali1ed4936440e" mac:"ee:ee:ee:ee:ee:ee" profile_ids:"subnet1" ipv4_nets:"192.168.25.64/32" >
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 478: Received *proto.HostMetadataUpdate update from calculation graph msg=hostname:"056fefe3c94d" ipv4_addr:"172.17.0.2"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 478: Received *proto.HostMetadataUpdate update from calculation graph msg=hostname:"56cf59f3c330" ipv4_addr:"172.17.0.3"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 478: Received *proto.IPAMPoolUpdate update from calculation graph msg=id:"192.168.0.0-16" pool:<cidr:"192.168.0.0/16" masquerade:true >
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 478: Received *proto.IPAMPoolUpdate update from calculation graph msg=id:"fd80:24e2:f998:72d6::-64" pool:<cidr:"fd80:24e2:f998:72d6::/64" masquerade:true >
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 478: Received *proto.InSync update from calculation graph msg=
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 486: Datastore in sync, flushing the dataplane for the first time... timeSinceStart=22.853172ms
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 602: Dataplane updates throttled
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.854 [INFO][314] int_dataplane.go 609: Completed first update to dataplane. secsSinceStart=0.022884166
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] int_dataplane.go 584: Applying dataplane updates
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] endpoint_mgr.go 231: Workload interface came up, marking for reconfiguration. ifaceName="cali1ed4936440e"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] endpoint_mgr.go 380: Updating per-endpoint chains. id=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-tw-cali1ed4936440e" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-fw-cali1ed4936440e" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] endpoint_mgr.go 403: Updating endpoint routes. id=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-from-wl-dispatch" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-to-wl-dispatch" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.944 [INFO][314] endpoint_mgr.go 714: Applying /proc/sys configuration to interface. ifaceName="cali1ed4936440e"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-from-host-endpoint" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-to-host-endpoint" ipVersion=0x4 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-from-host-endpoint" ipVersion=0x4 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-to-host-endpoint" ipVersion=0x4 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] endpoint_mgr.go 322: Re-evaluated workload endpoint status adminUp=true failed=false known=true operUp=true status="up" workloadEndpointID=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] status_combiner.go 58: Storing endpoint status update ipVersion=0x4 status="up" workload=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-fip-dnat" ipVersion=0x4 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-fip-snat" ipVersion=0x4 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.945 [INFO][314] masq_mgr.go 144: IPAM pools updated, refreshing iptables rule ipVersion=0x4
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-nat-outgoing" ipVersion=0x4 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] ipip_mgr.go 214: All-hosts IP set out-of sync, refreshing it.
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] ipsets.go 106: Queueing IP set for creation family="inet" setID="all-hosts" setType="hash:ip"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] endpoint_mgr.go 231: Workload interface came up, marking for reconfiguration. ifaceName="cali1ed4936440e"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] endpoint_mgr.go 380: Updating per-endpoint chains. id=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-tw-cali1ed4936440e" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-fw-cali1ed4936440e" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] endpoint_mgr.go 403: Updating endpoint routes. id=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-from-wl-dispatch" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.946 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-to-wl-dispatch" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] endpoint_mgr.go 714: Applying /proc/sys configuration to interface. ifaceName="cali1ed4936440e"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-from-host-endpoint" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-to-host-endpoint" ipVersion=0x6 table="filter"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-from-host-endpoint" ipVersion=0x6 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-to-host-endpoint" ipVersion=0x6 table="raw"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] endpoint_mgr.go 322: Re-evaluated workload endpoint status adminUp=true failed=false known=true operUp=true status="up" workloadEndpointID=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] status_combiner.go 58: Storing endpoint status update ipVersion=0x6 status="up" workload=proto.WorkloadEndpointID{OrchestratorId:"libnetwork", WorkloadId:"libnetwork", EndpointId:"1ed4936440e5786283a680e1f22a0d9b951a384d14beefd7a40a26f3d3294cc3"}
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-fip-dnat" ipVersion=0x6 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-fip-snat" ipVersion=0x6 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] masq_mgr.go 144: IPAM pools updated, refreshing iptables rule ipVersion=0x6
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] table.go 376: Queueing update of chain. chainName="cali-nat-outgoing" ipVersion=0x6 table="nat"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] ipsets.go 242: Resyncing ipsets with dataplane. family="inet6"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.947 [INFO][314] ipsets.go 242: Resyncing ipsets with dataplane. family="inet"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.948 [INFO][314] ipsets.go 283: Finished resync family="inet6" numInconsistenciesFound=0 resyncDuration=749.433µs
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.948 [INFO][314] ipsets.go 652: Doing full IP set rewrite family="inet6" numMembersInPendingReplace=1 setID="all-ipam-pools"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.948 [INFO][314] ipsets.go 652: Doing full IP set rewrite family="inet6" numMembersInPendingReplace=1 setID="masq-ipam-pools"
2017-06-06 09:20:15 INFO 314 2017-06-06 09:20:15.948 [INFO][314] ipsets.go 652: Doing full IP set rewrite family="inet6" numMembersInPendingReplace=0 setID="s:mHDOqpY19uvpC-3qX-0xeq2L0X-6-k7U9f8YHA"
2017-06-06 09:20:15 ERROR 314 2017-06-06 09:20:15.949 [ERROR][314] ipsets.go 588: Failed to complete ipset restore, IP sets may be out-of-sync. closeErr=<nil> commitErr=<nil> family="inet6" flushErr=<nil> processErr=exit status 1 stderr="ipset v6.29: Error in line 4: Set cannot be destroyed: it is in use by a kernel component\n" stdout="" writeErr=<nil>
...
2017-06-06 09:20:15 ERROR 314 2017-06-06 09:20:15.949 [ERROR][314] ipsets.go 257: Failed to update IP sets. error=exit status 1 family="inet6"
****** End of context logs from /var/log/calico/felix/current on host1 ******
docker exec -it host1 sh -c 'ip route'
# default via 172.17.0.1 dev eth0
# 172.17.0.1 dev eth0 scope link
# 172.18.0.0/16 dev docker0 proto kernel scope link src 172.18.0.1
# 192.168.25.64 dev cali1ed4936440e scope link
# blackhole 192.168.25.64/26 proto bird
# 192.168.101.192/26 via 172.17.0.1 dev eth0 proto bird
docker exec -it host1 sh -c 'iptables-save'
# # Generated by iptables-save v1.6.0 on Tue Jun 6 09:20:45 2017
# *raw
# :PREROUTING ACCEPT [677:265608]
# :OUTPUT ACCEPT [820:111827]
# :cali-OUTPUT - [0:0]
# :cali-PREROUTING - [0:0]
# :cali-failsafe-in - [0:0]
# :cali-failsafe-out - [0:0]
# :cali-from-host-endpoint - [0:0]
# :cali-to-host-endpoint - [0:0]
# -A PREROUTING -m comment --comment "cali:6gwbT8clXdHdC1b1" -j cali-PREROUTING
# -A OUTPUT -m comment --comment "cali:tVnHkvAo15HuiPy0" -j cali-OUTPUT
# -A cali-OUTPUT -m comment --comment "cali:38nOqDjL6rORZtSl" -j MARK --set-xmark 0x0/0x7000000
# -A cali-OUTPUT -m comment --comment "cali:mDDUhMDnNdaIUtPr" -j cali-to-host-endpoint
# -A cali-OUTPUT -m comment --comment "cali:qxtWla1G8uqJMI9B" -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-PREROUTING -m comment --comment "cali:x4XbVMc5P_kNXnTy" -j MARK --set-xmark 0x0/0x7000000
# -A cali-PREROUTING -i cali+ -m comment --comment "cali:fQeZek80kVOPa0xO" -j MARK --set-xmark 0x4000000/0x4000000
# -A cali-PREROUTING -m comment --comment "cali:xp3NolkIpulCQL_G" -m mark --mark 0x0/0x4000000 -j cali-from-host-endpoint
# -A cali-PREROUTING -m comment --comment "cali:fbdE50A0BiINbNiA" -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-failsafe-in -p tcp -m comment --comment "cali:wWFQM43tJU7wwnFZ" -m multiport --dports 22 -j ACCEPT
# -A cali-failsafe-in -p udp -m comment --comment "cali:LwNV--R8MjeUYacw" -m multiport --dports 68 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:73bZKoyDfOpFwC2T" -m multiport --dports 2379 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:QMFuWo6o-d9yOpNm" -m multiport --dports 2380 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:Kup7QkrsdmfGX0uL" -m multiport --dports 4001 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:xYYr5PEqDf_Pqfkv" -m multiport --dports 7001 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:nbWBvu4OtudVY60Q" -m multiport --dports 53 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:UxFu5cDK5En6dT3Y" -m multiport --dports 67 -j ACCEPT
# COMMIT
# # Completed on Tue Jun 6 09:20:45 2017
# # Generated by iptables-save v1.6.0 on Tue Jun 6 09:20:45 2017
# *nat
# :PREROUTING ACCEPT [0:0]
# :INPUT ACCEPT [0:0]
# :OUTPUT ACCEPT [1:60]
# :POSTROUTING ACCEPT [1:60]
# :cali-OUTPUT - [0:0]
# :cali-POSTROUTING - [0:0]
# :cali-PREROUTING - [0:0]
# :cali-fip-dnat - [0:0]
# :cali-fip-snat - [0:0]
# :cali-nat-outgoing - [0:0]
# -A PREROUTING -m comment --comment "cali:6gwbT8clXdHdC1b1" -j cali-PREROUTING
# -A OUTPUT -m comment --comment "cali:tVnHkvAo15HuiPy0" -j cali-OUTPUT
# -A POSTROUTING -m comment --comment "cali:O3lYWMrLQYEMJtB5" -j cali-POSTROUTING
# -A cali-OUTPUT -m comment --comment "cali:GBTAv2p5CwevEyJm" -j cali-fip-dnat
# -A cali-POSTROUTING -m comment --comment "cali:Z-c7XtVd2Bq7s_hA" -j cali-fip-snat
# -A cali-POSTROUTING -m comment --comment "cali:nYKhEzDlr11Jccal" -j cali-nat-outgoing
# -A cali-PREROUTING -m comment --comment "cali:r6XmIziWUJsdOK6Z" -j cali-fip-dnat
# -A cali-nat-outgoing -m comment --comment "cali:Wd76s91357Uv7N3v" -m set --match-set cali4-masq-ipam-pools src -m set ! --match-set cali4-all-ipam-pools dst -j MASQUERADE
# COMMIT
# # Completed on Tue Jun 6 09:20:45 2017
# # Generated by iptables-save v1.6.0 on Tue Jun 6 09:20:45 2017
# *filter
# :INPUT ACCEPT [145:54202]
# :FORWARD ACCEPT [0:0]
# :OUTPUT ACCEPT [174:20558]
# :cali-FORWARD - [0:0]
# :cali-INPUT - [0:0]
# :cali-OUTPUT - [0:0]
# :cali-failsafe-in - [0:0]
# :cali-failsafe-out - [0:0]
# :cali-from-host-endpoint - [0:0]
# :cali-from-wl-dispatch - [0:0]
# :cali-fw-cali1ed4936440e - [0:0]
# :cali-pri-subnet1 - [0:0]
# :cali-pro-subnet1 - [0:0]
# :cali-to-host-endpoint - [0:0]
# :cali-to-wl-dispatch - [0:0]
# :cali-tw-cali1ed4936440e - [0:0]
# :cali-wl-to-host - [0:0]
# -A INPUT -m comment --comment "cali:Cz_u1IQiXIMmKD4c" -j cali-INPUT
# -A FORWARD -m comment --comment "cali:wUHhoiAYhphO9Mso" -j cali-FORWARD
# -A OUTPUT -m comment --comment "cali:tVnHkvAo15HuiPy0" -j cali-OUTPUT
# -A cali-FORWARD -m comment --comment "cali:jxvuJjmmRV135nVu" -m mark --mark 0x1000000/0x1000000 -m conntrack --ctstate UNTRACKED -j ACCEPT
# -A cali-FORWARD -i cali+ -m comment --comment "cali:nu_3aWP3DUkeeFF6" -j cali-from-wl-dispatch
# -A cali-FORWARD -o cali+ -m comment --comment "cali:DjrV_uMYqr-g4joA" -j cali-to-wl-dispatch
# -A cali-FORWARD -i cali+ -m comment --comment "cali:Hl34eZwIcbzmic3y" -j ACCEPT
# -A cali-FORWARD -o cali+ -m comment --comment "cali:O17zRKq2dvqwJKGA" -j ACCEPT
# -A cali-FORWARD -m comment --comment "cali:aTQofb9V5IPBvpDr" -j MARK --set-xmark 0x0/0x7000000
# -A cali-FORWARD -m comment --comment "cali:yl6jfcAHxkOSlAV7" -j cali-from-host-endpoint
# -A cali-FORWARD -m comment --comment "cali:zA6HyaP1JlANkvKN" -j cali-to-host-endpoint
# -A cali-FORWARD -m comment --comment "cali:xYGCuGpZAkaFt1KN" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-INPUT -m comment --comment "cali:46gVAqzWLjH8U4O2" -m mark --mark 0x1000000/0x1000000 -m conntrack --ctstate UNTRACKED -j ACCEPT
# -A cali-INPUT -p ipencap -m comment --comment "cali:aR-jVK2O7VHKhzJt" -m comment --comment "Drop IPIP packets from non-Calico hosts" -m set ! --match-set cali4-all-hosts src -j DROP
# -A cali-INPUT -i cali+ -m comment --comment "cali:gVjPMLEBhhpD4I0U" -g cali-wl-to-host
# -A cali-INPUT -m comment --comment "cali:THWbvZjtqLQwsqiH" -j MARK --set-xmark 0x0/0x7000000
# -A cali-INPUT -m comment --comment "cali:6wnP2LUCc7lG2gnl" -j cali-from-host-endpoint
# -A cali-INPUT -m comment --comment "cali:I3YjhDkapGtZ-w-C" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-OUTPUT -m comment --comment "cali:FwFFCT8uDthhfgS7" -m mark --mark 0x1000000/0x1000000 -m conntrack --ctstate UNTRACKED -j ACCEPT
# -A cali-OUTPUT -o cali+ -m comment --comment "cali:lE9pRQNw1a_fJ2-L" -j RETURN
# -A cali-OUTPUT -m comment --comment "cali:kXSia9_8D_I9Mx8M" -j MARK --set-xmark 0x0/0x7000000
# -A cali-OUTPUT -m comment --comment "cali:xuyU_DgoL_xoueJt" -j cali-to-host-endpoint
# -A cali-OUTPUT -m comment --comment "cali:-KZpg9OTpqQcNRfw" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-failsafe-in -p tcp -m comment --comment "cali:wWFQM43tJU7wwnFZ" -m multiport --dports 22 -j ACCEPT
# -A cali-failsafe-in -p udp -m comment --comment "cali:LwNV--R8MjeUYacw" -m multiport --dports 68 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:73bZKoyDfOpFwC2T" -m multiport --dports 2379 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:QMFuWo6o-d9yOpNm" -m multiport --dports 2380 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:Kup7QkrsdmfGX0uL" -m multiport --dports 4001 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:xYYr5PEqDf_Pqfkv" -m multiport --dports 7001 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:nbWBvu4OtudVY60Q" -m multiport --dports 53 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:UxFu5cDK5En6dT3Y" -m multiport --dports 67 -j ACCEPT
# -A cali-from-wl-dispatch -i cali1ed4936440e -m comment --comment "cali:mTKQ07NhL6fUx-_A" -g cali-fw-cali1ed4936440e
# -A cali-from-wl-dispatch -m comment --comment "cali:L4Re7WPPxQwqbkQy" -m comment --comment "Unknown interface" -j DROP
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:5-A1gf0TPZCh9hXx" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:Q6C3xFIVfmTU4Pu5" -m conntrack --ctstate INVALID -j DROP
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:P2JMhFFZCiOyA_RI" -j MARK --set-xmark 0x0/0x1000000
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:0nbdBuQNKXNA6Rv6" -j cali-pro-subnet1
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:aOR2fPC7AiXUdwZ1" -m comment --comment "Return if profile accepted" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:iUR5_u-50HjH_y15" -m comment --comment "Drop if no profiles matched" -j DROP
# -A cali-pri-subnet1 -m comment --comment "cali:rU6Uoz9Ep_TkJP3o" -m set --match-set cali4-s:mHDOqpY19uvpC-3qX-0xeq2 src -j MARK --set-xmark 0x1000000/0x1000000
# -A cali-pri-subnet1 -m comment --comment "cali:BKTXHoctVWErd5f7" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-pro-subnet1 -m comment --comment "cali:eFqU4iaF5F8uheeT" -j MARK --set-xmark 0x1000000/0x1000000
# -A cali-pro-subnet1 -m comment --comment "cali:I0b7RCkGcJGM2v0x" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-to-wl-dispatch -o cali1ed4936440e -m comment --comment "cali:UVTwRwPS0k-PCh9y" -g cali-tw-cali1ed4936440e
# -A cali-to-wl-dispatch -m comment --comment "cali:Bmoyw2lU5iFhS5va" -m comment --comment "Unknown interface" -j DROP
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:yTts0X-abf7qbm94" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:in3BAIEfNdEdrHQY" -m conntrack --ctstate INVALID -j DROP
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:R1hGuZtrAIJ1g0d2" -j MARK --set-xmark 0x0/0x1000000
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:nn0XKZw6EQg-169q" -j cali-pri-subnet1
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:BkIo4t_kWsPLVbLj" -m comment --comment "Return if profile accepted" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:dIfXVvK5pNc0Y0KA" -m comment --comment "Drop if no profiles matched" -j DROP
# -A cali-wl-to-host -p udp -m comment --comment "cali:aEOMPPLgak2S0Lxs" -m multiport --sports 68 -m multiport --dports 67 -j ACCEPT
# -A cali-wl-to-host -p udp -m comment --comment "cali:SzR8ejPiuXtFMS8B" -m multiport --dports 53 -j ACCEPT
# -A cali-wl-to-host -m comment --comment "cali:MEmlbCdco0Fefcrw" -j cali-from-wl-dispatch
# -A cali-wl-to-host -m comment --comment "cali:Q2b2iY2M-vmds5iY" -m comment --comment "Configured DefaultEndpointToHostAction" -j RETURN
# COMMIT
# # Completed on Tue Jun 6 09:20:45 2017
docker exec -it host1 sh -c 'ip6tables-save'
# # Generated by ip6tables-save v1.6.0 on Tue Jun 6 09:20:45 2017
# *nat
# :PREROUTING ACCEPT [0:0]
# :INPUT ACCEPT [0:0]
# :OUTPUT ACCEPT [0:0]
# :POSTROUTING ACCEPT [0:0]
# :cali-OUTPUT - [0:0]
# :cali-POSTROUTING - [0:0]
# :cali-PREROUTING - [0:0]
# :cali-fip-dnat - [0:0]
# :cali-fip-snat - [0:0]
# :cali-nat-outgoing - [0:0]
# -A PREROUTING -m comment --comment "cali:6gwbT8clXdHdC1b1" -j cali-PREROUTING
# -A OUTPUT -m comment --comment "cali:tVnHkvAo15HuiPy0" -j cali-OUTPUT
# -A POSTROUTING -m comment --comment "cali:O3lYWMrLQYEMJtB5" -j cali-POSTROUTING
# -A cali-OUTPUT -m comment --comment "cali:GBTAv2p5CwevEyJm" -j cali-fip-dnat
# -A cali-POSTROUTING -m comment --comment "cali:Z-c7XtVd2Bq7s_hA" -j cali-fip-snat
# -A cali-POSTROUTING -m comment --comment "cali:nYKhEzDlr11Jccal" -j cali-nat-outgoing
# -A cali-PREROUTING -m comment --comment "cali:r6XmIziWUJsdOK6Z" -j cali-fip-dnat
# -A cali-nat-outgoing -m comment --comment "cali:bJ93DIu4uwL0hICK" -m set --match-set cali6-masq-ipam-pools src -m set ! --match-set cali6-all-ipam-pools dst -j MASQUERADE
# COMMIT
# # Completed on Tue Jun 6 09:20:45 2017
# # Generated by ip6tables-save v1.6.0 on Tue Jun 6 09:20:45 2017
# *filter
# :INPUT ACCEPT [0:0]
# :FORWARD ACCEPT [0:0]
# :OUTPUT ACCEPT [7:640]
# :cali-FORWARD - [0:0]
# :cali-INPUT - [0:0]
# :cali-OUTPUT - [0:0]
# :cali-failsafe-in - [0:0]
# :cali-failsafe-out - [0:0]
# :cali-from-host-endpoint - [0:0]
# :cali-from-wl-dispatch - [0:0]
# :cali-fw-cali1ed4936440e - [0:0]
# :cali-pri-subnet1 - [0:0]
# :cali-pro-subnet1 - [0:0]
# :cali-to-host-endpoint - [0:0]
# :cali-to-wl-dispatch - [0:0]
# :cali-tw-cali1ed4936440e - [0:0]
# :cali-wl-to-host - [0:0]
# -A INPUT -m comment --comment "cali:Cz_u1IQiXIMmKD4c" -j cali-INPUT
# -A FORWARD -m comment --comment "cali:wUHhoiAYhphO9Mso" -j cali-FORWARD
# -A OUTPUT -m comment --comment "cali:tVnHkvAo15HuiPy0" -j cali-OUTPUT
# -A cali-FORWARD -m comment --comment "cali:jxvuJjmmRV135nVu" -m mark --mark 0x1000000/0x1000000 -m conntrack --ctstate UNTRACKED -j ACCEPT
# -A cali-FORWARD -i cali+ -m comment --comment "cali:nu_3aWP3DUkeeFF6" -j cali-from-wl-dispatch
# -A cali-FORWARD -o cali+ -m comment --comment "cali:DjrV_uMYqr-g4joA" -j cali-to-wl-dispatch
# -A cali-FORWARD -i cali+ -m comment --comment "cali:Hl34eZwIcbzmic3y" -j ACCEPT
# -A cali-FORWARD -o cali+ -m comment --comment "cali:O17zRKq2dvqwJKGA" -j ACCEPT
# -A cali-FORWARD -m comment --comment "cali:aTQofb9V5IPBvpDr" -j MARK --set-xmark 0x0/0x7000000
# -A cali-FORWARD -m comment --comment "cali:yl6jfcAHxkOSlAV7" -j cali-from-host-endpoint
# -A cali-FORWARD -m comment --comment "cali:zA6HyaP1JlANkvKN" -j cali-to-host-endpoint
# -A cali-FORWARD -m comment --comment "cali:xYGCuGpZAkaFt1KN" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-INPUT -m comment --comment "cali:46gVAqzWLjH8U4O2" -m mark --mark 0x1000000/0x1000000 -m conntrack --ctstate UNTRACKED -j ACCEPT
# -A cali-INPUT -i cali+ -m comment --comment "cali:yb_wYwqOAlwJU5gw" -g cali-wl-to-host
# -A cali-INPUT -m comment --comment "cali:2cs1o_c3IGSHt8wF" -j MARK --set-xmark 0x0/0x7000000
# -A cali-INPUT -m comment --comment "cali:kYbxo4ThzIDv5Tbk" -j cali-from-host-endpoint
# -A cali-INPUT -m comment --comment "cali:T-myOFrvU8AM3EEU" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-OUTPUT -m comment --comment "cali:FwFFCT8uDthhfgS7" -m mark --mark 0x1000000/0x1000000 -m conntrack --ctstate UNTRACKED -j ACCEPT
# -A cali-OUTPUT -o cali+ -m comment --comment "cali:lE9pRQNw1a_fJ2-L" -j RETURN
# -A cali-OUTPUT -m comment --comment "cali:kXSia9_8D_I9Mx8M" -j MARK --set-xmark 0x0/0x7000000
# -A cali-OUTPUT -m comment --comment "cali:xuyU_DgoL_xoueJt" -j cali-to-host-endpoint
# -A cali-OUTPUT -m comment --comment "cali:-KZpg9OTpqQcNRfw" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-failsafe-in -p tcp -m comment --comment "cali:wWFQM43tJU7wwnFZ" -m multiport --dports 22 -j ACCEPT
# -A cali-failsafe-in -p udp -m comment --comment "cali:LwNV--R8MjeUYacw" -m multiport --dports 68 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:73bZKoyDfOpFwC2T" -m multiport --dports 2379 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:QMFuWo6o-d9yOpNm" -m multiport --dports 2380 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:Kup7QkrsdmfGX0uL" -m multiport --dports 4001 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:xYYr5PEqDf_Pqfkv" -m multiport --dports 7001 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:nbWBvu4OtudVY60Q" -m multiport --dports 53 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:UxFu5cDK5En6dT3Y" -m multiport --dports 67 -j ACCEPT
# -A cali-from-wl-dispatch -i cali1ed4936440e -m comment --comment "cali:mTKQ07NhL6fUx-_A" -g cali-fw-cali1ed4936440e
# -A cali-from-wl-dispatch -m comment --comment "cali:L4Re7WPPxQwqbkQy" -m comment --comment "Unknown interface" -j DROP
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:5-A1gf0TPZCh9hXx" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:Q6C3xFIVfmTU4Pu5" -m conntrack --ctstate INVALID -j DROP
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:P2JMhFFZCiOyA_RI" -j MARK --set-xmark 0x0/0x1000000
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:0nbdBuQNKXNA6Rv6" -j cali-pro-subnet1
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:aOR2fPC7AiXUdwZ1" -m comment --comment "Return if profile accepted" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-fw-cali1ed4936440e -m comment --comment "cali:iUR5_u-50HjH_y15" -m comment --comment "Drop if no profiles matched" -j DROP
# -A cali-pri-subnet1 -m comment --comment "cali:qS22BTgP9xEOlLHf" -m set --match-set cali6-s:mHDOqpY19uvpC-3qX-0xeq2 src -j MARK --set-xmark 0x1000000/0x1000000
# -A cali-pri-subnet1 -m comment --comment "cali:n-UN78a15woSczYi" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-pro-subnet1 -m comment --comment "cali:eFqU4iaF5F8uheeT" -j MARK --set-xmark 0x1000000/0x1000000
# -A cali-pro-subnet1 -m comment --comment "cali:I0b7RCkGcJGM2v0x" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-to-wl-dispatch -o cali1ed4936440e -m comment --comment "cali:UVTwRwPS0k-PCh9y" -g cali-tw-cali1ed4936440e
# -A cali-to-wl-dispatch -m comment --comment "cali:Bmoyw2lU5iFhS5va" -m comment --comment "Unknown interface" -j DROP
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:yTts0X-abf7qbm94" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:in3BAIEfNdEdrHQY" -m conntrack --ctstate INVALID -j DROP
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:R1hGuZtrAIJ1g0d2" -j MARK --set-xmark 0x0/0x1000000
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:nn0XKZw6EQg-169q" -j cali-pri-subnet1
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:BkIo4t_kWsPLVbLj" -m comment --comment "Return if profile accepted" -m mark --mark 0x1000000/0x1000000 -j RETURN
# -A cali-tw-cali1ed4936440e -m comment --comment "cali:dIfXVvK5pNc0Y0KA" -m comment --comment "Drop if no profiles matched" -j DROP
# -A cali-wl-to-host -p ipv6-icmp -m comment --comment "cali:TYeA_BqDrPHaAt6E" -m icmp6 --icmpv6-type 130 -j ACCEPT
# -A cali-wl-to-host -p ipv6-icmp -m comment --comment "cali:5ugan8LfmJg_BiJc" -m icmp6 --icmpv6-type 131 -j ACCEPT
# -A cali-wl-to-host -p ipv6-icmp -m comment --comment "cali:Fl5LHxdlOnUNgCc4" -m icmp6 --icmpv6-type 132 -j ACCEPT
# -A cali-wl-to-host -p ipv6-icmp -m comment --comment "cali:tNvzCkGVISJ3ZXdS" -m icmp6 --icmpv6-type 133 -j ACCEPT
# -A cali-wl-to-host -p ipv6-icmp -m comment --comment "cali:86e1wB5w3SEOMrZb" -m icmp6 --icmpv6-type 135 -j ACCEPT
# -A cali-wl-to-host -p ipv6-icmp -m comment --comment "cali:kCq3XXx0yCb5mSXt" -m icmp6 --icmpv6-type 136 -j ACCEPT
# -A cali-wl-to-host -p udp -m comment --comment "cali:I9wK88Kjm45AlXoa" -m multiport --sports 546 -m multiport --dports 547 -j ACCEPT
# -A cali-wl-to-host -p udp -m comment --comment "cali:vr_cSvrSw0NyT9oV" -m multiport --dports 53 -j ACCEPT
# -A cali-wl-to-host -m comment --comment "cali:oLhausk4lM72Gf_c" -j cali-from-wl-dispatch
# -A cali-wl-to-host -m comment --comment "cali:Q5wulY37W3njF8vR" -m comment --comment "Configured DefaultEndpointToHostAction" -j RETURN
# COMMIT
# # Completed on Tue Jun 6 09:20:45 2017
# # Generated by ip6tables-save v1.6.0 on Tue Jun 6 09:20:45 2017
# *raw
# :PREROUTING ACCEPT [1:116]
# :OUTPUT ACCEPT [7:640]
# :cali-OUTPUT - [0:0]
# :cali-PREROUTING - [0:0]
# :cali-failsafe-in - [0:0]
# :cali-failsafe-out - [0:0]
# :cali-from-host-endpoint - [0:0]
# :cali-to-host-endpoint - [0:0]
# -A PREROUTING -m comment --comment "cali:6gwbT8clXdHdC1b1" -j cali-PREROUTING
# -A OUTPUT -m comment --comment "cali:tVnHkvAo15HuiPy0" -j cali-OUTPUT
# -A cali-OUTPUT -m comment --comment "cali:38nOqDjL6rORZtSl" -j MARK --set-xmark 0x0/0x7000000
# -A cali-OUTPUT -m comment --comment "cali:mDDUhMDnNdaIUtPr" -j cali-to-host-endpoint
# -A cali-OUTPUT -m comment --comment "cali:qxtWla1G8uqJMI9B" -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-PREROUTING -m comment --comment "cali:x4XbVMc5P_kNXnTy" -j MARK --set-xmark 0x0/0x7000000
# -A cali-PREROUTING -i cali+ -m comment --comment "cali:fQeZek80kVOPa0xO" -j MARK --set-xmark 0x4000000/0x4000000
# -A cali-PREROUTING -m comment --comment "cali:3R1fcvbw1gbVIfEz" -m mark --mark 0x4000000/0x4000000 -m rpfilter --invert -j DROP
# -A cali-PREROUTING -m comment --comment "cali:9CH1Qv6LALKSIEl_" -m mark --mark 0x0/0x4000000 -j cali-from-host-endpoint
# -A cali-PREROUTING -m comment --comment "cali:RMyTRBHEYPS7dKy6" -m mark --mark 0x1000000/0x1000000 -j ACCEPT
# -A cali-failsafe-in -p tcp -m comment --comment "cali:wWFQM43tJU7wwnFZ" -m multiport --dports 22 -j ACCEPT
# -A cali-failsafe-in -p udp -m comment --comment "cali:LwNV--R8MjeUYacw" -m multiport --dports 68 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:73bZKoyDfOpFwC2T" -m multiport --dports 2379 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:QMFuWo6o-d9yOpNm" -m multiport --dports 2380 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:Kup7QkrsdmfGX0uL" -m multiport --dports 4001 -j ACCEPT
# -A cali-failsafe-out -p tcp -m comment --comment "cali:xYYr5PEqDf_Pqfkv" -m multiport --dports 7001 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:nbWBvu4OtudVY60Q" -m multiport --dports 53 -j ACCEPT
# -A cali-failsafe-out -p udp -m comment --comment "cali:UxFu5cDK5En6dT3Y" -m multiport --dports 67 -j ACCEPT
# COMMIT
# # Completed on Tue Jun 6 09:20:45 2017
docker exec -it host1 sh -c 'ipset save'
# create cali4-all-ipam-pools hash:net family inet hashsize 1024 maxelem 1048576
# add cali4-all-ipam-pools 192.168.0.0/16
# create cali4-masq-ipam-pools hash:net family inet hashsize 1024 maxelem 1048576
# add cali4-masq-ipam-pools 192.168.0.0/16
# create cali6-all-ipam-pools hash:net family inet6 hashsize 1024 maxelem 1048576
# add cali6-all-ipam-pools fd80:24e2:f998:72d6::/64
# create cali6-masq-ipam-pools hash:net family inet6 hashsize 1024 maxelem 1048576
# add cali6-masq-ipam-pools fd80:24e2:f998:72d6::/64
# create cali6-s:mHDOqpY19uvpC-3qX-0xeq2 hash:ip family inet6 hashsize 1024 maxelem 1048576
# create cali4-s:mHDOqpY19uvpC-3qX-0xeq2 hash:ip family inet hashsize 1024 maxelem 1048576
# add cali4-s:mHDOqpY19uvpC-3qX-0xeq2 192.168.25.64
# create cali4-all-hosts hash:ip family inet hashsize 1024 maxelem 1048576
# add cali4-all-hosts 172.17.0.2
# add cali4-all-hosts 172.17.0.3
# Cleaning up host host1
docker exec -it host1 sh -c 'docker rm -f workload1'
# workload1
docker exec -it host1 sh -c 'docker network rm subnet1'
# subnet1
docker exec -it host1 sh -c 'docker rm -f $(docker ps -qa)'
# d2324aa8eb00
docker exec -it host1 sh -c 'docker rmi $(docker images -qa)'
# Untagged: calico/node:latest
# Deleted: sha256:fb69be882eb4fb39d07d6a04c66308a0a237b4cda7180c190153c8c81f313a38
# Deleted: sha256:0a83f8fd4c31575f313a3418b7eae37c986b3686d631620f5ef93f56d785b1c8
# Deleted: sha256:6a1a8e7f6915b47618eb03d4e14bf4a744d7e161e332dfd2db8dc9dce0dfead5
# Deleted: sha256:14e499e3bf3a56f9ac9cca084cb25c28127b289be66ac553dd300864eee59f5e
# Deleted: sha256:1b1ca2d34a450c7285f1047f767b0789f04eb4a64cfd1c164d50e48ec27017dc
# Deleted: sha256:8539d1fe4fab528abb5f7094dd8892f8b0b1ed94f0dde79aa292b456df7b6995
# Untagged: busybox:latest
# Deleted: sha256:c75bebcdd211f41b3a460c7bf82970ed6c75acaab9cd4c9a4e125b03ca113798
# Deleted: sha256:4ac76077f2c741c856a2419dfdb0804b18e48d2e1a9ce9c6a3f0605a2078caba
docker rm -f host1 || true
# host1
FAIL
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment