<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">For me, it's normal that you are not
able to curl 169.254.169.254 from your compute and controller
nodes : Same thing on my side, but my VM get their metadata.<br>
<br>
Try to lunch an instance.<br>
<br>
JB<br>
<br>
<br>
On 02/17/2013 03:35 AM, Chathura M. Sarathchandra Magurawalage
wrote:<br>
</div>
<blockquote
cite="mid:CAHw8T_+g-Y1HaqvRo4hTpt8VjtNO0Dp1fWMaVhA1m=FOsTrJdA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>root@computernode:~# curl -v <a moz-do-not-send="true"
href="http://169.254.169.254">http://169.254.169.254</a></div>
<div>* About to connect() to 169.254.169.254 port 80 (#0)</div>
<div>* Trying 169.254.169.254... </div>
</div>
<div><br>
</div>
<div>
<div>root@controller:~# curl -v <a moz-do-not-send="true"
href="http://169.254.169.254">http://169.254.169.254</a></div>
<div>* About to connect() to 169.254.169.254 port 80 (#0)</div>
<div>* Trying 169.254.169.254... </div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>root@athena:~# iptables -L -n -v</div>
<div>Chain INPUT (policy ACCEPT 59009 packets, 22M bytes)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div>59493 22M quantum-l3-agent-INPUT all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div>59493 22M nova-api-INPUT all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 484 73533 ACCEPT 47 -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain FORWARD (policy ACCEPT 707 packets, 47819 bytes)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 707 47819 quantum-filter-top all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 707 47819 quantum-l3-agent-FORWARD all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 707 47819 nova-filter-top all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 707 47819 nova-api-FORWARD all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain OUTPUT (policy ACCEPT 56022 packets, 22M bytes)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div>56022 22M quantum-filter-top all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div>56022 22M quantum-l3-agent-OUTPUT all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div>56022 22M nova-filter-top all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div>56022 22M nova-api-OUTPUT all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain nova-api-FORWARD (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain nova-api-INPUT (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 0 0 ACCEPT tcp -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
192.168.2.225 tcp dpt:8775</div>
<div><br>
</div>
<div>Chain nova-api-OUTPUT (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain nova-api-local (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain nova-filter-top (2 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div>56729 22M nova-api-local all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain quantum-filter-top (2 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div>56729 22M quantum-l3-agent-local all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain quantum-l3-agent-FORWARD (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain quantum-l3-agent-INPUT (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 0 0 ACCEPT tcp -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
192.168.2.225 tcp dpt:8775</div>
<div><br>
</div>
<div>Chain quantum-l3-agent-OUTPUT (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain quantum-l3-agent-local (1 references)</div>
<div> pkts bytes target prot opt in out source
destination</div>
<div><br>
</div>
<div>
<div>root@athena:~# iptables -L -n -v -t nat</div>
<div>Chain PREROUTING (policy ACCEPT 3212 packets, 347K bytes)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 3212 347K quantum-l3-agent-PREROUTING all -- *
* <a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 3212 347K nova-api-PREROUTING all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain INPUT (policy ACCEPT 639 packets, 84948 bytes)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain OUTPUT (policy ACCEPT 3180 packets, 213K bytes)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 3180 213K quantum-l3-agent-OUTPUT all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 3180 213K nova-api-OUTPUT all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 3726 247K quantum-l3-agent-POSTROUTING all -- *
* <a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 0 0 nova-api-POSTROUTING all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 0 0 quantum-postrouting-bottom all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 0 0 nova-postrouting-bottom all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain nova-api-OUTPUT (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain nova-api-POSTROUTING (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain nova-api-PREROUTING (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain nova-api-float-snat (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain nova-api-snat (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 0 0 nova-api-float-snat all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain nova-postrouting-bottom (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 0 0 nova-api-snat all -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div><br>
</div>
<div>Chain quantum-l3-agent-OUTPUT (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain quantum-l3-agent-POSTROUTING (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 3726 247K ACCEPT all -- !qg-6f8374cb-cb
!qg-6f8374cb-cb <a moz-do-not-send="true"
href="http://0.0.0.0/0">0.0.0.0/0</a> <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
! ctstate DNAT</div>
<div> 0 0 ACCEPT all -- * * <a
moz-do-not-send="true" href="http://10.5.5.0/24">10.5.5.0/24</a>
192.168.2.225 </div>
<div><br>
</div>
<div>Chain quantum-l3-agent-PREROUTING (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 0 0 DNAT tcp -- * * <a
moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
169.254.169.254 tcp dpt:80 to:<a
moz-do-not-send="true" href="http://192.168.2.225:8775">192.168.2.225:8775</a></div>
<div><br>
</div>
<div>
Chain quantum-l3-agent-float-snat (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div><br>
</div>
<div>Chain quantum-l3-agent-snat (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 0 0 quantum-l3-agent-float-snat all -- *
* <a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
</div>
<div> 0 0 SNAT all -- * * <a
moz-do-not-send="true" href="http://10.5.5.0/24">10.5.5.0/24</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
to:192.168.2.151</div>
<div><br>
</div>
<div>Chain quantum-postrouting-bottom (1 references)</div>
<div> pkts bytes target prot opt in out source
destination </div>
<div> 0 0 quantum-l3-agent-snat all -- * *
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a> </div>
</div>
<div class="gmail_extra"><br>
thanks.</div>
<div class="gmail_extra"><br>
</div>
<div class="gmail_extra"><br>
</div>
<div class="gmail_extra">
<div class="gmail_quote">On 17 February 2013 02:25,
Jean-Baptiste RANSY <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:jean-baptiste.ransy@alyseo.com"
target="_blank">jean-baptiste.ransy@alyseo.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>Controller node :<br>
# iptables -L -n -v<br>
# iptables -L -n -v -t nat
<div class="im"><br>
<br>
<br>
On 02/17/2013 03:18 AM, Chathura M. Sarathchandra
Magurawalage wrote:<br>
</div>
</div>
<div class="im">
<blockquote type="cite">
<div>You should be able to curl 169.254.169.254 from
compute node, which I cant at the moment.</div>
<div><br>
</div>
<div>I have got the bridge set up in the <span
style="font-family:arial,sans-serif;font-size:13px">l3_agent.ini</span></div>
</blockquote>
<br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
<br>
</body>
</html>