[Openstack] [Quantum] Metadata service route from a VM

Sylvain Bauza sylvain.bauza at digimind.com
Mon Feb 25 16:36:36 UTC 2013


Yet no reply ?

I did the hack, I removed the 169.254.0.0/16 route from my images, but 
this is quite a ugly hack.
Could someone with OpenVswitch/GRE setup please confirm that there is no 
route to create for metadata ?

Thanks,
-Sylvain

Le 21/02/2013 11:33, Sylvain Bauza a écrit :
> Anyone ?
> I found the reason why a 'quantum-dhcp-agent restart' is fixing the 
> route, this is because the lease is DHCPNACK'd at next client refresh 
> and the VM is getting a fresh new configuration excluding 
> 169.254.0.0/16 route.
>
> Community, I beg you to confirm the 169.254.0.0/16 route should *not* 
> be pushed to VMs, and 169.254.169.254/32 should be sent thru the 
> default route (ie. provider router internal IP).
> If it's the case, I'll update all my images to remove that route. If 
> not, something is wrong with my Quantum setup that I should fix.
>
> Thanks,
> -Sylvain
>
> Le 20/02/2013 15:55, Sylvain Bauza a écrit :
>> Hi,
>>
>> Previously using nova-network, all my VMs were having :
>>  # route -n
>> Table de routage IP du noyau
>> Destination     Passerelle      Genmask         Indic Metric Ref Use 
>> Iface
>> 10.0.0.0        0.0.0.0         255.255.255.0   U     0 0 0 eth0
>> 169.254.0.0     0.0.0.0         255.255.0.0     U     1002 0        0 
>> eth0
>> 0.0.0.0         10.0.0.1        0.0.0.0         UG    0 0 0 eth0
>>
>> Now, this setup seems incorrect with Quantum, as the ARP query goes 
>> directly from the network node trying to resolve 169.254.169.254 :
>> [root at toto ~]# curl http://169.254.169.254/
>> curl: (7) couldn't connect to host
>>
>> sylvain at folsom02:~$ sudo tcpdump -i qr-f76e4668-fa -nn not ip6 and 
>> not udp and host 169.254.169.254 -e
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol 
>> decode
>> listening on qr-f76e4668-fa, link-type EN10MB (Ethernet), capture 
>> size 65535 bytes
>> 15:47:46.009548 fa:16:3e:bf:0b:f6 > ff:ff:ff:ff:ff:ff, ethertype ARP 
>> (0x0806), length 42: Request who-has 169.254.169.254 tell 10.0.0.5, 
>> length 28
>> 15:47:47.009076 fa:16:3e:bf:0b:f6 > ff:ff:ff:ff:ff:ff, ethertype ARP 
>> (0x0806), length 42: Request who-has 169.254.169.254 tell 10.0.0.5, 
>> length 28
>>
>> The only way for me to fix it is to remove the 169.254.0.0/16 route 
>> on the VM (or for some reason I doesn't understand, by restarting 
>> quantum-dhcp-agent on the network node) and then L3 routing is 
>> working correctly :
>>
>> [root at toto ~]# route del -net 169.254.0.0/16
>> [root at toto ~]# curl http://169.254.169.254/
>> 1.0
>> 2007-01-19
>> 2007-03-01
>> 2007-08-29
>> 2007-10-10
>> 2007-12-15
>> 2008-02-01
>> 2008-09-01
>> 2009-04-04
>>
>> sylvain at folsom02:~$ sudo tcpdump -i qg-f2397006-20 -nn not ip6 and 
>> not udp and host 10.0.0.5 and not port 22 -e
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol 
>> decode
>> listening on qg-f2397006-20, link-type EN10MB (Ethernet), capture 
>> size 65535 bytes
>> 15:52:58.479234 fa:16:3e:e1:95:20 > e0:46:9a:2c:f4:7d, ethertype IPv4 
>> (0x0800), length 74: 10.0.0.5.55428 > 192.168.1.71.8775: Flags [S], 
>> seq 3032859044, win 14600, options [mss 1460,sackOK,TS val 2548891 
>> ecr 0,nop,wscale 5], length 0
>> 15:52:58.480987 e0:46:9a:2c:f4:7d > fa:16:3e:e1:95:20, ethertype IPv4 
>> (0x0800), length 74: 192.168.1.71.8775 > 10.0.0.5.55428: Flags [S.], 
>> seq 3888257357, ack 3032859045, win 14480, options [mss 
>> 1460,sackOK,TS val 16404712 ecr 2548891,nop,wscale 7], length 0
>> 15:52:58.482211 fa:16:3e:e1:95:20 > e0:46:9a:2c:f4:7d, ethertype IPv4 
>> (0x0800), length 66: 10.0.0.5.55428 > 192.168.1.71.8775: Flags [.], 
>> ack 1, win 457, options [nop,nop,TS val 2548895 ecr 16404712], length 0
>>
>>
>> I can't understand what's wrong with my setup. Could you help me ? I 
>> would have to undergo a post-up statement for all my images... :(
>>
>> Thanks,
>> -Sylvain
>





More information about the Openstack mailing list