<div><div>It seems that configs are OK. </div><div><br></div><div>If you use dig from the controller, could resolv names? I'm asking because can be case that packets arrive from VMs to controller but couldn't go to Internet. </div>
<div><br></div><div>Another thing you can check. Although the resolv.conf of VMs are set with 10.0.1.1, there are a lot of iptables rules. I was using Cactus and I noticed that. If you type nova-manage network list you will see the networks and you can see a DNS collumn. The default was 8.8.4.4 but when I started instances this values changed to 10.0.2.1 or something like that! My concern is about what address nova uses to create rules!! Maybe all services are OK but a wrong iptables rule is dropping packets!</div>
<div><br></div><div>iptables -n -L</div><div>iptables -n -L -t nat</div><div><br></div><div>Check if you have some rule permitting udp 53 to be forward/accepted (ie, not dropped). </div><div><br></div><div>As a debug option, you can run tcpdump on the controller interface and see what are happening with the packets.</div>
<div><br></div><div>tcpdump -n -i <interface> port 53</div><div><br></div><div>:)</div><br><div class="gmail_quote">On Fri, Oct 7, 2011 at 2:51 PM, Sharif Islam <span dir="ltr"><<a href="mailto:islamsh@indiana.edu">islamsh@indiana.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
</div><div class="im">On 10/07/2011 01:44 PM, Jorge Luiz Correa wrote:<br>
> Check if you have a dnsmasq running on host that runs nova-network. It's<br>
> necessary a DNS service on 10.0.1.1.<br>
><br>
> On the nova-network host:<br>
><br>
> $ ps aux | grep dns<br>
><br>
<br>
</div># ps aux|grep dnsmasq<br>
nobody 11879 0.0 0.0 12872 652 ? S 10:15 0:01 dnsmasq<br>
- --strict-order --bind-interfaces --conf-file= --domain=novalocal<br>
- --pid-file=/local/nova/networks/nova-br100.pid --listen-address=10.0.1.1<br>
- --except-interface=lo --dhcp-range=10.0.1.2,static,120s<br>
- --dhcp-lease-max=256<br>
- --dhcp-hostsfile=/local/nova/networks/nova-br100.conf<br>
- --dhcp-script=/usr/bin/nova-dhcpbridge --leasefile-ro<br>
root 11880 0.0 0.0 12872 212 ? S 10:15 0:00 dnsmasq<br>
- --strict-order --bind-interfaces --conf-file= --domain=novalocal<br>
- --pid-file=/local/nova/networks/nova-br100.pid --listen-address=10.0.1.1<br>
- --except-interface=lo --dhcp-range=10.0.1.2,static,120s<br>
- --dhcp-lease-max=256<br>
- --dhcp-hostsfile=/local/nova/networks/nova-br100.conf<br>
- --dhcp-script=/usr/bin/nova-dhcpbridge --leasefile-ro<br>
<div class="im"><br>
<br>
<br>
<br>
<br>
><br>
> $ netstat -tupan | grep 53<br>
<br>
</div>tcp 0 0 <a href="http://10.0.1.1:53" target="_blank">10.0.1.1:53</a> 0.0.0.0:*<br>
LISTEN 11879/dnsmasq<br>
udp 0 0 <a href="http://10.0.1.1:53" target="_blank">10.0.1.1:53</a> 0.0.0.0:*<br>
11879/dnsmasq<br>
<br>
<br>
i also tried killall dnsmasq and restarting nova-network. I haven't<br>
deleting the network and recreating it yet.<br>
<br>
route table in the controller:<br>
<div class="im"><br>
# route -n<br>
Kernel IP routing table<br>
Destination Gateway Genmask Flags Metric Ref Use<br>
Iface<br>
10.0.1.0 0.0.0.0 255.255.255.0 U 0 0 0<br>
</div>br100<br>
xxx.xx.xx.xxx 0.0.0.0 255.255.255.0 U 0 0 0 eth1<br>
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0<br>
virbr0<br>
172.29.200.0 0.0.0.0 255.255.252.0 U 0 0 0<br>
br100<br>
169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 eth1<br>
0.0.0.0 149.165.146.254 0.0.0.0 UG 0 0 0 eth1<br>
<br>
<br>
- --sharif<br>
<div class="im"><br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.10 (GNU/Linux)<br>
Comment: Using GnuPG with Mozilla - <a href="http://enigmail.mozdev.org/" target="_blank">http://enigmail.mozdev.org/</a><br>
<br>
</div>iQEcBAEBAgAGBQJOjzwLAAoJEACffes9SivFOcUH/0fof22U+ljTaYIUYOXEwi/c<br>
XkPT013viREcZoZW64m9isywhjV12RTKrMVaNtesqXtOwgYITn26gwceNLAvCXA0<br>
xwFK455UkKheLobyzD7RuYX1Y9sXww3of9lAaTp5RSumFJHB5ttiWir1Rc9gaxnd<br>
o6rwmtWpwMkHbXHsheQSGw2WLGwrpUinijsN27LqoFZmQocY7h1uFdfAMaJepFNs<br>
4MgE0ZPUBobGF2JtvoeD9h1d+klYF+SdQ0UquMvGTrEHeRkL4pb7yQzMoNt/2NUP<br>
oNf/YRm0ShJW1+sRjaMtA/KCml+ldpb0FEIqYx/jP2Az9mJ+Eg7TsKlY8idzlNw=<br>
=q3sv<br>
<div><div></div><div class="h5">-----END PGP SIGNATURE-----<br>
<br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>- MSc. Correa, J.L.<br><br>
</div>