<html><head></head><body><div class="ydp8f529232yahoo-style-wrap" style="font-family: Helvetica Neue, Helvetica, Arial, sans-serif; font-size: 13px;"><div></div>
<div dir="ltr" data-setdir="false"><div>Hi,<br>I can ssh into the instance now but I noticed the VM does not have any external network access (internet).<br>Before I dig any deeper into that problem, does anyone know what configuration i need to set up for that ?<br>I already added 2 new security rules to make sure I can access HTTP and HTTPS ports (80 and 443), in vain :<br>Ingress IPv4 TCP 80 (HTTP) 0.0.0.0/0 <br>Ingress IPv4 TCP 443 (HTTPS) 0.0.0.0/0 <br><br><br></div><div dir="ltr" data-setdir="false">Thanks.<br></div></div><div><br></div>
</div><div id="ydp935b9b66yahoo_quoted_2857954946" class="ydp935b9b66yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Saturday, January 15, 2022, 12:29:40 AM GMT+1, Celinio Fernandes <cel975@yahoo.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="ydp935b9b66yiv6089010300"><div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;" class="ydp935b9b66yiv6089010300ydpc1a4d01ayahoo-style-wrap"><div></div>
<div dir="ltr"><div>Thanks very much for your help.<br clear="none">Before you replied, I tried what you wrote but on the wrong interfaces :<br clear="none">enp0s3 and virbr0.<br clear="none">I had no idea I needed to add the IP address from the public network's subnet on the br-ex interface.<br clear="none">So to ping/ssh the floating IP this is what I did :<br clear="none">ip link set dev br-ex up<br clear="none">ip link set dev br-ex state up<br clear="none">sudo ip addr add 172.24.4.254/24 dev br-ex <br clear="none">And then I can finally ping the floating IP :<br clear="none">ping 172.24.4.133<br clear="none">And I can also ssh into the VM :<br clear="none">ssh cirros@172.24.4.133<br clear="none"><br clear="none">Thanks again :)<br clear="none"><br clear="none"></div><div><br clear="none"></div></div><div><br clear="none"></div>
</div><div id="ydp935b9b66yiv6089010300yqt03893" class="ydp935b9b66yiv6089010300yqt1080941928"><div id="ydp935b9b66yiv6089010300ydp46e3e80eyahoo_quoted_3125542193" class="ydp935b9b66yiv6089010300ydp46e3e80eyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Sunday, January 9, 2022, 08:21:18 PM GMT+1, Slawek Kaplonski <skaplons@redhat.com> wrote:
</div>
<div><br clear="none"></div>
<div><br clear="none"></div>
<div><div dir="ltr">Hi,<br clear="none"><div id="ydp935b9b66yiv6089010300ydp46e3e80eyqtfd12716" class="ydp935b9b66yiv6089010300ydp46e3e80eyqt6568448788"><br clear="none">On niedziela, 9 stycznia 2022 09:17:18 CET Celinio Fernandes wrote:<br clear="none">> Hi,<br clear="none">> I am running Ubuntu Server 20.04 LTS on Virtualbox. I installed OpenStack<br clear="none">> (Xena release) through Devstack. Here is the content of my<br clear="none">> /opt/stack/devstack/local.conf file :<br clear="none">> [[local|localrc]]<br clear="none">> ADMIN_PASSWORD=secret<br clear="none">> DATABASE_PASSWORD=$ADMIN_PASSWORD<br clear="none">> RABBIT_PASSWORD=$ADMIN_PASSWORD<br clear="none">> SERVICE_PASSWORD=$ADMIN_PASSWORD<br clear="none">> HOST_IP=10.0.2.15<br clear="none">> <br clear="none">> <br clear="none">> I created an instance through Horizon. The security group contains the<br clear="none">> 2 rules needed (one to be able to ping and one to be able to ssh the<br clear="none">> instance). I also allocated and associated a floating IP address. And a ssh<br clear="none">> key pair.<br clear="none">> <br clear="none">> Here is the configuration :<br clear="none">> openstack server list<br clear="none">> ---------------------------------+--------------------------+---------+<br clear="none">> <br clear="none">> | ID | Name | Status | Networks | Image | Flavor |<br clear="none">> <br clear="none">> ---------------------------------+--------------------------+---------+<br clear="none">> <br clear="none">> | f5f0fdd5-298b-4fa3-9ee9-e6e4288f4327 | InstanceJanvier | ACTIVE |<br clear="none">> | shared=172.24.4.133, 192.168.233.165 | cirros-0.5.2-x86_64-disk | m1.nano<br clear="none">> | |<br clear="none">> ------------------------------------------------------+<br clear="none">> <br clear="none">> <br clear="none">> openstack network list :<br clear="none">> ------------------------------------------------------+<br clear="none">> <br clear="none">> | ID | Name | Subnets |<br clear="none">> <br clear="none">> ------------------------------------------------------+<br clear="none">> <br clear="none">> | 96a04799-7fc7-4525-b05c-ad57261aed38 | public |<br clear="none">> | 07ce42db-6f3f-4135-ace7-2fc104ea62a0, 6dba13fc-b10c-48b1-b1b4-e1f1afe25b53<br clear="none">> | | c42638dc-fa56-4644-ad34-295fce4811d2 | shared |<br clear="none">> | a4e2d8cc-02b2-42e2-a525-e0eebbb08980 <br clear="none">> | | ffb8a527-266e-4e96-ad60-f7e9aba8f0c1 | private |<br clear="none">> | 42e36677-cf3c-4df4-88a1-8cf79b9d6060, e507e6dd-132a-4249-96b1-83761562dd73<br clear="none">> | |<br clear="none">> ------------------------------------------------------+<br clear="none">> <br clear="none">> openstack router list :<br clear="none">> +--------------------------------------+----------------+--------+------<br clear="none">> <br clear="none">> | ID | Name | Status | State | Project |<br clear="none">> <br clear="none">> +--------------------------------------+----------------+--------+------<br clear="none">> <br clear="none">> | b9a15051-a532-4c93-95ad-53c057720c62 | Virtual_router | ACTIVE | UP |<br clear="none">> | 6556c02dd88f4c45b535c2dbb8ba1a04 |<br clear="none">> +--------------------------------------+----------------+--------+------<br clear="none">> <br clear="none">> <br clear="none">> I cannot ping/ssh neither the fixed IP address or the floating IP address :<br clear="none">> ping -c 3 172.24.4.133<br clear="none">> PING 172.24.4.133 (172.24.4.133) 56(84) bytes of data.<br clear="none">> --- 172.24.4.133 ping statistics ---<br clear="none">> 3 packets transmitted, 0 received, 100% packet loss, time 2035ms<br clear="none">> <br clear="none">> ping -c 3 192.168.233.165<br clear="none">> PING 192.168.233.165 (192.168.233.165) 56(84) bytes of data.<br clear="none">> --- 192.168.233.165 ping statistics ---<br clear="none">> 3 packets transmitted, 0 received, 100% packet loss, time 2035ms<br clear="none">> <br clear="none">> Maybe that has something to do with the network namespaces configuration on<br clear="none">> Ubuntu. Does anyone know what could go wrong or what is missing ?<br clear="none">> Thanks for helping.</div><br clear="none"><br clear="none">If You are trying to ping Floating IP directly from the host where devstack is <br clear="none">installed (Virtualbox VM in Your case IIUC) then You should first have those <br clear="none">floating IP addresses somehow reachable on the host, otherwise traffic is <br clear="none">probably going through default gateway so is going outside the VM.<br clear="none">If You are using ML2/OVN (default in Devstack) or ML2/OVS You probably have in <br clear="none">the openvswitch bridge called br-ex which is used to send external network <br clear="none">traffic from the OpenStack networks in Devstack. In such case You can e.g. add <br clear="none">some IP address from the public network's subnet on the br-ex interface, like <br clear="none">192.168.233.254/24 - that will tell Your OS to reach that subnet through br-<br clear="none">ex, so traffic will be able to go "into" the OVS managed by Neutron.<br clear="none"><br clear="none">-- <br clear="none">Slawek Kaplonski<br clear="none">Principal Software Engineer<br clear="none">Red Hat</div></div>
</div>
</div></div></div></div></div>
</div>
</div></body></html>