<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Dear all,<div class="">Hope this is the right ML for this question, otherwise please let me know.</div><div class=""><br class=""></div><div class="">I have setup an openstack-ansible based infrastructure (pike) with 3 controllers and 8 computes. Everything works fine except when i configure a dedicated IP to be shared between the ctrls.</div><div class=""><br class=""></div><div class="">There are several bridges, but the one involved here are:</div><div class=""><ul class="MailOutline"><li class="">br-public (bridge toward internet)</li><ul class=""><li class="">I have one public ip for each ctrl (x.x.x.1, x.x.x.2, x.x.x.3) configured on each bridge</li></ul><li class="">br-mgmt (default internal bridge for OS ansible setup)</li><ul class=""><li class="">I have one private ip for each ctrl (y.y.y.1, y.y.y.2, y.y.y.3) configured on each bridge</li></ul></ul><div class="">Then, I have configured the openstack-ansible files like:</div></div><div class=""><br class=""></div><div class=""><ul class="MailOutline"><li class="">/etc/openstack_deploy/openstack_user_config.yml</li><ul class=""><li class=""><li class=""> internal_lb_vip_address: y.y.y.1</li><ul class=""><li class="">I’m using the first ctrl ip for the internal network, but I’m not sure if it’s the right config</li></ul><li class=""> external_lb_vip_address: x.x.x.4</li><ul class=""><li class="">I’m using a free IP in the public network to be shared by the controllers</li></ul></li></ul><li class="">/etc/openstack_deploy/user_variables.yml</li><ul class=""><li class="">haproxy_keepalived_external_vip_cidr: "{{external_lb_vip_address}}/24”</li><ul class=""><li class="">Here do I have to put /32 (default) or /24 (mi CIDR)?</li></ul><li class="">haproxy_keepalived_internal_vip_cidr: "{{internal_lb_vip_address}}/24”</li><ul class=""><li class="">Here do I have to put /32 (default) or /24 (mi CIDR)?</li></ul><li class="">haproxy_keepalived_external_interface: br-public</li><li class="">haproxy_keepalived_internal_interface: br-mgmt</li></ul></ul><ul class="MailOutline"></ul><ul class="MailOutline"></ul><ul class="MailOutline"></ul></div><div class=""><br class=""></div><div class="">With netstat, I see HAProxy binding all the service ports in the ctrls, but I cannot ping (and access horizon or the other services) using the public ip x.x.x.4.</div><div class=""><br class=""></div><div class="">Any suggestion?</div><div class=""><br class=""></div><div class="">Thanks a lot,</div><div class="">Matteo</div><div class=""><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; border-spacing: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Matteo Gerola, Dott.</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Research Engineer</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">--------------------------------------------------------<br class=""></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">CREATE-NET Research Center<br class="">Fondazione Bruno Kessler (FBK)<br class="">via alla Cascata 56D<br class="">38123 Povo, Trento (Italy)<br class="">F: +39 0461 312425<br class="">e-mail: <a href="mailto:mgerola@fbk.eu" class="">mgerola@fbk.eu</a> <--- THIS HAS CHANGED!<br class="">www: <a href="http://create-net.fbk.eu" class="">http://create-net.fbk.eu</a></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">--------------------------------------------------------<br class="">The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited according to the Italian Law 196/2003 of the Legislature. If you received this in error, please contact the sender and delete the material from any computer.<br class="">Le informazioni contenute in questo messaggio di posta elettronica e nei file allegati sono da considerarsi strettamente riservate. Il loro utilizzo e' consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceveste questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla cancellazione del messaggio stesso dal Vostro sistema. Trattenere il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D. Lgs. 196/2003.<br class=""><br class=""></div></span></div></span></div></span></div></div></div></div>
</div>
<br class=""></div></body></html>