VPC vRouter creation times out because the VPC management network cannot reach the management node on TCP port 8080

Environment

• Product: ZStack Cloud
• Version: All versions that deploy a VPC vRouter image as a customized VM.
• Component: VPC vRouter, VPC management network, ZStack management node on port 8080, and the security policy or firewall between the management networks.
• Trigger/Condition: VPC vRouter creation consistently times out, and zvr.log reports that the VPC vRouter cannot reach the management node on port 8080.

Symptoms

• VPC vRouter creation in the UI times out.
• TCP ports 22 and 7272 between the management node and the VPC vRouter management IP are reachable.
• zvr.log on the VPC vRouter reports that the VPC vRouter cannot connect to the management node on port 8080.

Diagnosis