<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
I'm running into troubles accessing my instances.<br>
I have 3 nodes:<br>
1. proxmox that virtualizes in KVM my controller node<br>
1.1 the controller node (10.10.200.50) runs keystone, nova-api,
network, scheduler, vncproxy and volumes but NOT compute as it is
already a VM<br>
2. glance in a physical node<br>
3. compute in a physical node<br>
<br>
my nova.conf network config is:<br>
<tt>--dhcpbridge_flagfile=/etc/nova/nova.conf<br>
--dhcpbridge=/usr/bin/nova-dhcpbridge<br>
--routing_source_ip=10.10.200.50<br>
--libvirt_use_virtio_for_bridges=true<br>
--network_manager=nova.network.manager.FlatDHCPManager<br>
--public_interface=eth0<br>
--flat_interface=eth1<br>
--flat_network_bridge=br100<br>
--fixed_range=192.168.200.0/24<br>
--floating_range=10.10.200.0/24 <br>
--network_size=256<br>
--flat_network_dhcp_start=192.168.200.5<br>
--flat_injected=False<br>
--force_dhcp_release<br>
--network_host=10.10.200.50</tt><br>
<br>
I even explicitly allows icmp and tcp port 22 traffic like this:<br>
<pre class="literallayout"><a id="enabling-access-to-vms-on-the-compute-node">euca-authorize -P icmp -t -1:-1 default
euca-authorize -P tcp -p 22 default
</a></pre>
<a id="enabling-access-to-vms-on-the-compute-node">before setting
these rules, I was getting 'Operation not permitted' when pinging
the VM from the compute node. After setting these, I just get no
output</a> at all (not even 'Destination Host Unreachable')<br>
<a id="enabling-access-to-vms-on-the-compute-node"><br>
<br>
The network was created like this:<br>
nova-manage network create private
--fixed_range_v4=192.168.200.0/24 --bridge=br100
--bridge_interface=eth1 --num_networks=1 --network_size=256<br>
<br>
However I cannot ping or ssh my instances once they're active. I
have already set up such an Essex environment but the controller
node was physical. Morevover, every examples in the doc presents a
controller node that runs nova-compute.<br>
<br>
So I'm wondering if either:<br>
- having the controller in a VM<br>
- or not running compute on the controller<br>
would prevent things to work properly.<br>
<br>
What can I check? iptables? is dnsmasq unable to give the VM an
address? <br>
<br>
I'm running out of ideas. Any suggestion would be highly
appreciated.<br>
<br>
Thank you,<br>
<br>
michaël<br>
</a><br>
<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Michaël Van de Borne
R&D Engineer, SOA team, CETIC
Phone: +32 (0)71 49 07 45 Mobile: +32 (0)472 69 57 16, Skype: mikemowgli
<a class="moz-txt-link-abbreviated" href="http://www.cetic.be">www.cetic.be</a>, rue des Frères Wright, 29/3, B-6041 Charleroi
</pre>
</body>
</html>