<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Jun 17, 2013 at 5:13 PM, Dmitry Makovey <span dir="ltr"><<a href="mailto:dmitry@athabascau.ca" target="_blank">dmitry@athabascau.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><br>
Hi,<br>
<br>
for a while now we've been trying to get a firm grip on networking<br>
options with as simple configuration as possible. We have ended<br>
selecting nova-network with FlatDHCP manager. It sounded simple on paper<br>
and conceptually it seemed to do what we need. But we can't bolt it<br>
together so far.<br>
<br>
In our case we have dual-nic machines pressed into service for OpenStack<br>
needs, and nic's assigned as such:<br>
<br>
* management network (a.k.a. private network), say <a href="http://172.1.1.0/24" target="_blank">172.1.1.0/24</a><br>
* client network (a.k.a. public network) <a href="http://192.168.1.0/24" target="_blank">192.168.1.0/24</a><br>
<br>
We also plan on running multiple nova-compute nodes, and have a back-end<br>
cinder and glance nodes.<br>
<br>
We do not intend exposing management network to our users so having it<br>
exposed to the VMs is not an option.<br>
<br>
we have added VM private netowrk via:<br>
<br>
# nova-manage network create privatenet <a href="http://10.0.0.0/24" target="_blank">10.0.0.0/24</a> 1 256 --bridge=privbr0<br>
<br>
that we hoped we can bridge into with the FlatDHCP setup. So far all of<br>
our attempts failed either due to misunderstanding of requirements for<br>
such implementation or due to misconfiguration. We can add a pool of<br>
"public IPs", we can assign it, but the traffic is not reaching VMs (or<br>
out of VMs):<br>
<br>
# nova-manage network create public --fixed_range_v4=<a href="http://192.168.1.0/24
--dns1=192.168.2.1" target="_blank">192.168.1.0/24<br>
--dns1=192.168.2.1</a> --dns2=192.168.2.3 --bridge=br1<br>
<br>
# nova secgroup-add-rule default icmp -1 -1 <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a><br>
# nova secgroup-add-rule default tcp 22 22 <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a><br>
<br>
# nova-manage floating create --ip_range=<a href="http://192.168.1.0/24" target="_blank">192.168.1.0/24</a><br>
# nova add-floating-ip 972b73d2-0e4b-4f61-907a-f0aeb5d5f974 192.168.1.3<br>
# nova list<br>
+--------------------------------------+------------+--------+------------------------------------+<br>
| ID | Name | Status | Networks<br>
|<br>
+--------------------------------------+------------+--------+------------------------------------+<br>
| 972b73d2-0e4b-4f61-907a-f0aeb5d5f974 | demorhel67 | ACTIVE |<br>
privatenet=10.0.0.4, 192.168.1.3 |<br>
...<br>
<br>
Is there some reasonably thorough walk-through on FlatDHCP setup for a<br>
similar scenario?<br>
<span class=""><font color="#888888"><br></font></span></blockquote><div><br></div><div style>This looks a lot like the example architecture in the Operations Guide at <a href="http://docs.openstack.org/trunk/openstack-ops/content/example_architecture.html">http://docs.openstack.org/trunk/openstack-ops/content/example_architecture.html</a>. </div>
<div style><br></div><div style>I'd highly recommend <a href="http://docs.openstack.org/trunk/openstack-ops/content/network_troubleshooting.html">http://docs.openstack.org/trunk/openstack-ops/content/network_troubleshooting.html</a>. Let us know how it goes. A few Canadians wrote a bunch of that!</div>
<div style><br></div><div style>Anne</div><div style><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<span class=""><font color="#888888">
--<br>
Dmitry Makovey<br>
Web Systems Administrator<br>
Athabasca University<br>
<a href="tel:%28780%29%20675-6245" value="+17806756245">(780) 675-6245</a><br>
---<br>
Confidence is what you have before you understand the problem<br>
Woody Allen<br>
<br>
When in trouble when in doubt run in circles scream and shout<br>
<a href="http://www.wordwizard.com/phpbb3/viewtopic.php?f=16&t=19330" target="_blank">http://www.wordwizard.com/phpbb3/viewtopic.php?f=16&t=19330</a><br>
<br>
</font></span><br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div></div>