<div dir="ltr"><div><div>root@computernode:~# curl -v <a href="http://169.254.169.254">http://169.254.169.254</a></div><div>* About to connect() to 169.254.169.254 port 80 (#0)</div><div>* Trying 169.254.169.254... </div>
</div><div><br></div><div><div>root@controller:~# curl -v <a href="http://169.254.169.254">http://169.254.169.254</a></div><div>* About to connect() to 169.254.169.254 port 80 (#0)</div><div>* Trying 169.254.169.254... </div>
</div><div><br></div><div><br></div><div>root@athena:~# iptables -L -n -v</div><div>Chain INPUT (policy ACCEPT 59009 packets, 22M bytes)</div><div> pkts bytes target prot opt in out source destination </div>
<div>59493 22M quantum-l3-agent-INPUT all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div>59493 22M nova-api-INPUT all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div> 484 73533 ACCEPT 47 -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div><br></div><div>Chain FORWARD (policy ACCEPT 707 packets, 47819 bytes)</div>
<div> pkts bytes target prot opt in out source destination </div><div> 707 47819 quantum-filter-top all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div> 707 47819 quantum-l3-agent-FORWARD all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div> 707 47819 nova-filter-top all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div> 707 47819 nova-api-FORWARD all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div><br></div><div>Chain OUTPUT (policy ACCEPT 56022 packets, 22M bytes)</div>
<div> pkts bytes target prot opt in out source destination </div><div>56022 22M quantum-filter-top all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div>56022 22M quantum-l3-agent-OUTPUT all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div>56022 22M nova-filter-top all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div>56022 22M nova-api-OUTPUT all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div><br></div><div>Chain nova-api-FORWARD (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain nova-api-INPUT (1 references)</div><div> pkts bytes target prot opt in out source destination </div>
<div> 0 0 ACCEPT tcp -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> 192.168.2.225 tcp dpt:8775</div><div><br></div><div>Chain nova-api-OUTPUT (1 references)</div><div> pkts bytes target prot opt in out source destination </div>
<div><br></div><div>Chain nova-api-local (1 references)</div><div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain nova-filter-top (2 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div>56729 22M nova-api-local all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div><br></div><div>Chain quantum-filter-top (2 references)</div><div> pkts bytes target prot opt in out source destination </div><div>56729 22M quantum-l3-agent-local all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div><br></div><div>Chain quantum-l3-agent-FORWARD (1 references)</div><div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain quantum-l3-agent-INPUT (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div> 0 0 ACCEPT tcp -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> 192.168.2.225 tcp dpt:8775</div>
<div><br></div><div>Chain quantum-l3-agent-OUTPUT (1 references)</div><div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain quantum-l3-agent-local (1 references)</div>
<div> pkts bytes target prot opt in out source destination</div><div><br></div><div><div>root@athena:~# iptables -L -n -v -t nat</div><div>Chain PREROUTING (policy ACCEPT 3212 packets, 347K bytes)</div>
<div> pkts bytes target prot opt in out source destination </div><div> 3212 347K quantum-l3-agent-PREROUTING all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div> 3212 347K nova-api-PREROUTING all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div><br></div><div>Chain INPUT (policy ACCEPT 639 packets, 84948 bytes)</div>
<div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain OUTPUT (policy ACCEPT 3180 packets, 213K bytes)</div><div> pkts bytes target prot opt in out source destination </div>
<div> 3180 213K quantum-l3-agent-OUTPUT all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div> 3180 213K nova-api-OUTPUT all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div><br></div><div>Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)</div><div> pkts bytes target prot opt in out source destination </div><div> 3726 247K quantum-l3-agent-POSTROUTING all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div> 0 0 nova-api-POSTROUTING all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div> 0 0 quantum-postrouting-bottom all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div> 0 0 nova-postrouting-bottom all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div><br></div><div>Chain nova-api-OUTPUT (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain nova-api-POSTROUTING (1 references)</div><div> pkts bytes target prot opt in out source destination </div>
<div><br></div><div>Chain nova-api-PREROUTING (1 references)</div><div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain nova-api-float-snat (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain nova-api-snat (1 references)</div><div> pkts bytes target prot opt in out source destination </div>
<div> 0 0 nova-api-float-snat all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div><div><br></div><div>Chain nova-postrouting-bottom (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div> 0 0 nova-api-snat all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div><br></div><div>Chain quantum-l3-agent-OUTPUT (1 references)</div><div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain quantum-l3-agent-POSTROUTING (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div> 3726 247K ACCEPT all -- !qg-6f8374cb-cb !qg-6f8374cb-cb <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> ! ctstate DNAT</div>
<div> 0 0 ACCEPT all -- * * <a href="http://10.5.5.0/24">10.5.5.0/24</a> 192.168.2.225 </div><div><br></div><div>Chain quantum-l3-agent-PREROUTING (1 references)</div><div> pkts bytes target prot opt in out source destination </div>
<div> 0 0 DNAT tcp -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> 169.254.169.254 tcp dpt:80 to:<a href="http://192.168.2.225:8775">192.168.2.225:8775</a></div><div><br></div><div>
Chain quantum-l3-agent-float-snat (1 references)</div><div> pkts bytes target prot opt in out source destination </div><div><br></div><div>Chain quantum-l3-agent-snat (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div> 0 0 quantum-l3-agent-float-snat all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
<div> 0 0 SNAT all -- * * <a href="http://10.5.5.0/24">10.5.5.0/24</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> to:192.168.2.151</div><div><br></div><div>Chain quantum-postrouting-bottom (1 references)</div>
<div> pkts bytes target prot opt in out source destination </div><div> 0 0 quantum-l3-agent-snat all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
</div><div class="gmail_extra"><br>thanks.</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><div class="gmail_quote">On 17 February 2013 02:25, Jean-Baptiste RANSY <span dir="ltr"><<a href="mailto:jean-baptiste.ransy@alyseo.com" target="_blank">jean-baptiste.ransy@alyseo.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>Controller node :<br>
# iptables -L -n -v<br>
# iptables -L -n -v -t nat<div class="im"><br>
<br>
<br>
On 02/17/2013 03:18 AM, Chathura M. Sarathchandra Magurawalage
wrote:<br>
</div></div><div class="im">
<blockquote type="cite">
<div>You should be able to curl 169.254.169.254 from
compute node, which I cant at the moment.</div>
<div><br>
</div>
<div>I have got the bridge set up in the <span style="font-family:arial,sans-serif;font-size:13px">l3_agent.ini</span></div>
</blockquote>
<br>
</div></div>
</blockquote></div><br></div></div>