Thanks for that - the namspace thing is starting to make sense.<br>So I see this rule in there now:<br><br>Chain quantum-l3-agent-PREROUTING (1 references)<br> pkts bytes target prot opt in out source destination <br>
62 3720 DNAT tcp -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> 169.254.169.254 tcp dpt:80 to:<a href="http://172.16.0.201:8775">172.16.0.201:8775</a><br><br>But I never see a connection being made when I spin up an instance. The instance reports no route to host.<br>
<br><br>My environment is a single server (its a VM under VirtualBox) - am I complicating things by having this as an all in one box - is the use_namespace option adding to my woes and is this just a scenario that doesn't make sense (although for someone investigating/learning OpenStack these single instance environments have been valuable).<br>
<br>Cheers,<br>Kev<br><div class="gmail_extra"><br><br><div class="gmail_quote">On 7 November 2012 18:21, Salvatore Orlando <span dir="ltr"><<a href="mailto:sorlando@nicira.com" target="_blank">sorlando@nicira.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Kevin is correct; as your're running IP namespaces, you'll need to look for iptables in that namespace.<div>The metadata settings however are visible in the log extract you posted.</div>
<div>It seems your metadata server is sitting at <span style="font-family:'Bitstream Vera Sans Mono',monospace;font-size:13px"><a href="http://172.16.0.201:8775" target="_blank">172.16.0.201:8775</a></span></div>
<div>I guess you've already ensured that endpoint is reachable from the router (a wget execute in the router namespace will prove that).</div><div><br></div><div>Also, metadata is one of those (few) features which in Quantum come with strings attached. You can find more info on this in the admin guide [1]. The link to the page where metadata are discussed reported below, just in case you haven't already seen it.</div>
<div><br></div><div>Salvatore</div><div><br></div><div><br></div><div>[1] <a href="http://docs.openstack.org/trunk/openstack-network/admin/content/adv_cfg_l3_agent_metadata.html" target="_blank">http://docs.openstack.org/trunk/openstack-network/admin/content/adv_cfg_l3_agent_metadata.html</a></div>
<div><br><div class="gmail_quote"><div><div class="h5">On 7 November 2012 19:00, Stephen Gran <span dir="ltr"><<a href="mailto:stephen.gran@guardian.co.uk" target="_blank">stephen.gran@guardian.co.uk</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">
<u></u>
<div><div>
On Wed, 2012-11-07 at 16:02 +0000, Kevin Jackson wrote:<br>
<blockquote type="CITE">
Heyup good folk of OpenStack,<br>
I'm having the same issue as Sina. My configuration seems to look OK (I have an instance, with IP that can ping its default route to on an internal network) but I get the failure to contact the metadata server with the explanation that Sina gave.<br>
<br>
In my /var/log/quantum/l3_agent.log I have the following: <a href="http://paste.openstack.org/show/24801/" target="_blank">http://paste.openstack.org/show/24801/</a><br>
There's also a paste of an iptables output that I would've expected to see the DNAT rules in.<br>
<br>
What am I missing?<br>
</blockquote>
<br></div>
You're not looking in the correct network namespace:<br>
<br>
ip netns exec qrouter-61245d6f-1195-4ca0-ba08-f0636f7d44c6 iptables -L -v -t nat<br>
ip netns exec qrouter-61245d6f-1195-4ca0-ba08-f0636f7d44c6 ip r<br>
<br>
Cheers,<br>
<table cellpadding="0" cellspacing="0" width="100%">
<tbody><tr>
<td>
<pre>--
Stephen Gran
Senior Systems Integrator - <a href="http://guardian.co.uk" target="_blank">guardian.co.uk</a>
</pre>
</td>
</tr>
</tbody></table>
</div>
<pre>Please consider the environment before printing this email.
------------------------------------------------------------------
Visit <a href="http://guardian.co.uk" target="_blank">guardian.co.uk</a> - website of the year
<a href="http://www.guardian.co.uk" target="_blank">www.guardian.co.uk</a> <a href="http://www.observer.co.uk" target="_blank">www.observer.co.uk</a> <a href="http://www.guardiannews.com" target="_blank">www.guardiannews.com</a>
On your mobile, visit <a href="http://m.guardian.co.uk" target="_blank">m.guardian.co.uk</a> or download the Guardian
iPhone app <a href="http://www.guardian.co.uk/iphone" target="_blank">www.guardian.co.uk/iphone</a> and iPad edition <a href="http://www.guardian.co.uk/iPad" target="_blank">www.guardian.co.uk/iPad</a>
Save up to 37% by subscribing to the Guardian and Observer - choose the papers you want and get full digital access.
Visit <a href="http://guardian.co.uk/subscribe" target="_blank">guardian.co.uk/subscribe</a>
---------------------------------------------------------------------
This e-mail and all attachments are confidential and may also
be privileged. If you are not the named recipient, please notify
the sender and delete the e-mail and all attachments immediately.
Do not disclose the contents to another person. You may not use
the information for any purpose, or store, or copy, it in any way.
Guardian News & Media Limited is not liable for any computer
viruses or other material transmitted with or as part of this
e-mail. You should employ virus checking software.
Guardian News & Media Limited
A member of Guardian Media Group plc
Registered Office
PO Box 68164
Kings Place
90 York Way
London
N1P 2AP
Registered in England Number 908396
</pre><br></div></div><div class="im">_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></div></blockquote></div><br></div>
<br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Kevin Jackson<br>@itarchitectkev<br>
</div>