[Openstack] Duplicate ICMP due to public interface bridge being placed in promiscus mode

Vishvananda Ishaya vishvananda at gmail.com
Fri Oct 14 16:02:25 UTC 2011


Strange, I haven't seen this.  It sounds like maybe you have a mac address conflict somehow.  The only time I've seen duplicate icmp responses is when I was running inside of virtualbox and due to the way vagrant was setting up vms, I had multiple vms with same mac.

Vish

On Oct 14, 2011, at 5:59 AM, Shyam Kaushik wrote:

> Hi Vish,
>  
> In our openstack deployment we observe this:
>  
> Since linux_net.py/initialize_gateway_device() does this
>     # NOTE(vish): If the public interface is the same as the
>     #             bridge, then the bridge has to be in promiscuous
>     #             to forward packets properly.
>     if(FLAGS.public_interface == dev):
>         _execute('ip', 'link', 'set',
>                      'dev', dev, 'promisc', 'on', run_as_root=True)
>  
>  
> Any VM spawned on the cloud controller node if it sends an ICMP ping to an external network gets duplicate replies (i.e. there are 2 replies for the same ICMP request). For VM’s spawned on any other non-cloud controller this doesn’t happen.
>  
> If we turn of promiscus mode on the bridge, the VM on cloud controller doesn’t see the duplicate replies, but VM’s on non-cloud controller cannot reach external network.
>  
> Question to you is, is this duplicate ICMP replies expected for VM’s running on cloud controller due to above logic?
>  
> --Shyam
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20111014/f952f633/attachment.html>


More information about the Openstack mailing list