[OpenStack-fr] can connect to vm (ssh it is ok) from the outside but my vm cannot get http ou https

[Stéphane Delmotte]

Hi,

There is my configuration in OCATA

2 tenants

146cf744-5cc2-4a2a-b67b-52c6e0222d6b | public01    | 
78c4021e-420f-4acc-a3d4-60232116281d |
| 904be46c-1949-47c3-bc4c-eb61227ff178 | selfservice | 
a026ebbe-6836-4f0a-8b5b-00f670687ac9 |

there is my provider network

network show public01
+---------------------------+--------------------------------------+
| Field                     | Value |
+---------------------------+--------------------------------------+
| admin_state_up            | UP |
| availability_zone_hints   | |
| availability_zones        | nova |
| created_at                | 2017-09-18T14:20:12Z |
| description               | |
| dns_domain                | None |
| id                        | 146cf744-5cc2-4a2a-b67b-52c6e0222d6b |
| ipv4_address_scope        | None |
| ipv6_address_scope        | None |
| is_default                | False |
| mtu                       | 9000 |
| name                      | public01 |
| port_security_enabled     | False |
| project_id                | 7a8caa84511d41a291f7b67ae8750eb6 |
| provider:network_type     | flat |
| provider:physical_network | extnet |
| provider:segmentation_id  | None |
| qos_policy_id             | None |
| revision_number           | 12 |
| router:external           | External |
| segments                  | None |
| shared                    | True |
| status                    | ACTIVE |
| subnets                   | 78c4021e-420f-4acc-a3d4-60232116281d |
| updated_at                | 2017-09-20T12:23:03Z |
+---------------------------+--------------------------------------+


1 router

  router list
+--------------------------------------+---------+--------+-------+-------------+-------+----------------------------------+
| ID                                   | Name    | Status | State | 
Distributed | HA    | Project                          |
+--------------------------------------+---------+--------+-------+-------------+-------+----------------------------------+
| a9f248e8-a8be-49a2-93c9-d9e779ae4d1f | router1 | ACTIVE | UP | 
False       | False | 7a8caa84511d41a291f7b67ae8750eb6 |
+--------------------------------------+---------+--------+-------+-------------+-------+----------------------------------+

router show  router1
+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field                   | Value |
+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| admin_state_up          | UP |
| availability_zone_hints | |
| availability_zones      | nova |
| created_at              | 2017-09-21T17:54:39Z |
| description | |
| distributed             | False |
| external_gateway_info   | {"network_id": 
"146cf744-5cc2-4a2a-b67b-52c6e0222d6b", "enable_snat": true, 
"external_fixed_ips": [{"subnet_id": 
"78c4021e-420f-4acc-a3d4-60232116281d", "ip_address": "134.214.34.141"}]} |
| flavor_id               | None |
| ha                      | False |
| id                      | a9f248e8-a8be-49a2-93c9-d9e779ae4d1f |
| name                    | router1 |
| project_id              | 7a8caa84511d41a291f7b67ae8750eb6 |
| revision_number         | 7 |
| routes | |
| status                  | ACTIVE |
| updated_at              | 2017-09-21T17:56:19Z |
+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+


Now my problem:

I can connect to my VM (using my local network selfservice)

but from the VM  i can't connect to http ou https.(so apt-get or yum 
does not work)

but i can ping anything machine it's work

in my vm :

ping www.google.fr
PING www.google.fr (172.217.23.99) 56(84) bytes of data.
64 bytes from mil04s23-in-f3.1e100.net (172.217.23.99): icmp_seq=1 
ttl=50 time=18.2 ms

it is ok it can ping.

wget http://www.meteofrance.com/accueil
--2017-09-22 11:16:20--  http://www.meteofrance.com/accueil
Resolving www.meteofrance.com (www.meteofrance.com)... 160.92.49.14
Connecting to www.meteofrance.com 
(www.meteofrance.com)|160.92.49.14|:80... connected.
HTTP request sent, awaiting response...

and nothing more

it is look like my nat (snat) is not working fine


please help me :-)

thanks you

Stéphane




-- 
Delmotte Stéphane
UMR CNRS 5558 Biometrie et Biologie Evolutive
Bat 711                            |
Universite Claude Bernard - Lyon I | Tel : +33 04 72 43 11 68
43, Bd du 11 Novembre 1918         | Fax : 04 72 43 13 88
69622 Villeurbanne cedex FRANCE