<div dir="ltr"><div><div><div><div><div><div><div><div><div>Hi chaps,<br><br>I have Openstack working quite nicely now, however I have one small oddity.<br><br></div>I'm using nova networking still and I have 3 tenants.<br>
</div><br></div>Currently anything to 10/8 isn't being natted, which is fine and good.<br><br></div>One of the tenants does the right thing when going to something other than 10/8, it NATs out eth0 correctly.<br><br>The other two NAT out on eth3, using the correct address, but the wrong interface.<br>
<br></div>So, my question is twofold.<br><br></div>1. How can I correct it so they all NAT out on eth0<br><br>OR<br><br></div>2. Is there a way to tell openstack to never NAT anything?<br><br></div><div>Kind regards<br><br>
</div><div> -- joe.<br><br></div>Relevant networky things:<br><br>mysql> select cidr,netmask,bridge,gateway,broadcast,bridge_interface from networks;<br>+--------------+---------------+--------+-----------+-------------+------------------+<br>
| cidr | netmask | bridge | gateway | broadcast | bridge_interface |<br>+--------------+---------------+--------+-----------+-------------+------------------+<br>| <a href="http://10.0.21.0/24">10.0.21.0/24</a> | 255.255.255.0 | br21 | 10.0.21.1 | 10.0.21.255 | eth3 |<br>
| <a href="http://10.0.41.0/24">10.0.41.0/24</a> | 255.255.255.0 | br41 | 10.0.41.1 | 10.0.41.255 | eth3 |<br>| <a href="http://10.0.33.0/24">10.0.33.0/24</a> | 255.255.255.0 | br33 | 10.0.33.1 | 10.0.33.255 | eth3 |<br>
+--------------+---------------+--------+-----------+-------------+------------------+<br><br></div>nova.conf:<br><br><div>--dhcpbridge_flagfile=/etc/nova/nova.conf<br>--dhcpbridge=/usr/bin/nova-dhcpbridge<br>--dnsmasq_config_file=/etc/dnsmasq-nova.conf<br>
--max_cores=24<br>--logdir=/var/log/nova<br>--state_path=/var/lib/nova<br>--lock_path=/var/lock/nova<br>--force_dhcp_release<br>--iscsi_helper=tgtadm<br>--libvirt_use_virtio_for_bridges<br>--connection_type=libvirt<br>--root_helper=sudo nova-rootwrap<br>
--verbose<br>--ec2_private_dns_show_ip<br>--allow_admin_api=true<br>--use_deprecated_auth=false<br>--auth_strategy=keystone<br>--scheduler_driver=nova.scheduler.simple.SimpleScheduler<br>--s3_host=10.0.80.10<br>--ec2_host=10.0.80.10<br>
--rabbit_host=10.0.80.10<br>--cc_host=10.0.80.10<br>--nova_url=<a href="http://10.0.80.10:8774/v1.1/">http://10.0.80.10:8774/v1.1/</a><br>#--routing_source_ip=10.0.40.250<br>--glance_api_servers=<a href="http://10.0.80.10:9292">10.0.80.10:9292</a><br>
--image_service=nova.image.glance.GlanceImageService<br>--sql_connection=mysql://<a href="http://novadbadmin:champagnesupernova@10.0.80.10/nova">novadbadmin:champagnesupernova@10.0.80.10/nova</a><br>--ec2_url=<a href="http://10.0.80.10:8773/services/Cloud">http://10.0.80.10:8773/services/Cloud</a><br>
--keystone_ec2_url=<a href="http://10.0.80.10:5000/v2.0/ec2tokens">http://10.0.80.10:5000/v2.0/ec2tokens</a><br>--api_paste_config=/etc/nova/api-paste.ini<br>--libvirt_type=kvm<br>--libvirt_use_virtio_for_bridges=true<br>
--start_guests_on_host_boot=true<br>--resume_guests_state_on_host_boot=true<br># vnc specific configuration<br>--novnc_enabled=true<br>--novncproxy_base_url=<a href="http://10.0.40.250:6080/vnc_auto.html">http://10.0.40.250:6080/vnc_auto.html</a><br>
--xvpvncproxy_base_url=<a href="http://10.0.40.250:6081/console">http://10.0.40.250:6081/console</a><br>--vncserver_proxyclient_address=10.0.40.250<br>--vncserver_listen=10.0.40.250<br>#--fixed_range=<a href="http://10.0.41.0/24">10.0.41.0/24</a><br>
# network specific settings<br>--network_manager=nova.network.manager.VlanManager<br>--multi_host=true<br>--enabled_apis=metadata,ec2,osapi_compute,osapi_volume<br>--public_interface=eth0<br>#--flat_interface=bond0<br>--flat_injected=False<br>
--force_dhcp_release<br>--iscsi_helper=tgtadm<br>--connection_type=libvirt<br>--root_helper=sudo nova-rootwrap<br>--verbose<br><br></div></div>