<html>
  <head>
    <meta content="text/html; charset=GB2312" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi, <br>
    <br>
    That's great. Is there any document where it explains it all?<br>
    <br>
    Then nat is done in L3Agent what's great. So I only have to
    configure static routes on the network config to let the instance
    flow throw external network. <br>
    <br>
    And external network should not be assigned to tenant project. It
    should remain under admin tenant control. right?<br>
    <br>
    It would be nice if someone writes a document about all this. Since
    we configure our networks more or less by inspiration and following
    install guides, but don't really much what we are doing...<br>
    <br>
    <br>
    <br>
    <br>
    <div class="moz-cite-prefix">El 10/12/13 10:09, ¹ùÁú²Ö escribi¨®:<br>
    </div>
    <blockquote
cite="mid:CACkq0K+1c2a1+GfyEJKO3UzEz7u72J1yQx5VzMw7arosS5zHOg@mail.gmail.com"
      type="cite">
      <div dir="ltr">floating ip is implemented through NAT ,  the l3
        agent is responsible for NAT.  
        <div>so , you cannot see the floating ip inside the instance .  </div>
        <div>Please refer to NAT technology.</div>
      </div>
      <div class="gmail_extra">
        <br>
        <br>
        <div class="gmail_quote">2013/12/10 Gonzalo Aguilar Delgado <span
            dir="ltr"><<a moz-do-not-send="true"
              href="mailto:gaguilar@aguilardelgado.com" target="_blank">gaguilar@aguilardelgado.com</a>></span><br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000"> Hi, <br>
              <br>
              But when I do this. It just don't work. Let me explain. <br>
              <br>
              That's what it says the documentation. I understood that
              the instance is created with a private ip, so I start it
              with just one network in it. The private one. <br>
              <br>
              And once it's started and working, I just assign it a
              public ( floating ) ip. Horizon let me select the private
              ip interface. <br>
              <br>
              When I reboot the instance it has two ip added but only
              one (the private one) is used in the instance. So where is
              the floating ip?<br>
              <br>
              I supposed that it should create a second interface in my
              external bridge. But it's not. So how he hell this
              floating ip is used?<br>
              <br>
              <br>
              Sencond way I supposed it to work is create an instance
              with two nics. One on the private network, one on the
              public network. Then a floating ip will be assigned to
              public nic. But this is what it fails. And why I wrote the
              e-mail. <br>
              <br>
              So if you can do both. What's the right way to do it. I
              suppose that both, but what I'm doing wrong?<br>
              <br>
              Best regards,<br>
              <br>
              <br>
              <br>
              <div>El 10/12/13 08:19, ¹ùÁú²Ö escribi¨®:<br>
              </div>
              <div>
                <div class="h5">
                  <blockquote type="cite">
                    <div dir="ltr">well , you cannot assign an external
                      ip to an instance directly without an private ip.
                        you must first assign an private ip to the
                      instance ,then if you wanna an external ip , you
                      can assign an floating ip to  it .</div>
                    <div class="gmail_extra"><br>
                      <br>
                      <div class="gmail_quote">2013/12/10 Gonzalo
                        Aguilar Delgado <span dir="ltr"><<a
                            moz-do-not-send="true"
                            href="mailto:gaguilar@aguilardelgado.com"
                            target="_blank">gaguilar@aguilardelgado.com</a>></span><br>
                        <blockquote class="gmail_quote" style="margin:0
                          0 0 .8ex;border-left:1px #ccc
                          solid;padding-left:1ex"> Hi,<br>
                          <br>
                          I cannot instanciate any machine with external
                          ip because it tells something failed but don't
                          know reason.<br>
                          <br>
                          <br>
                          I found this error in libvirtd<br>
                          <br>
                          2013-12-09 18:33:52.032+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          vm-ctx=libvirt-52af41df-5e9e-4470-86ff-ea274e18e08c
                          img-ctx=libvirt-52af41df-5e9e-4470-86ff-ea274e18e08c

                          model=apparmor: Operation not permitted<br>
                          2013-12-09 18:33:52.032+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          vm-ctx=128:123 img-ctx=128:123 model=dac:
                          Operation not permitted<br>
                          2013-12-09 18:33:52.168+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=net reason=open
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          net=fa:16:3e:27:7e:e0 path="/dev/net/tun"
                          rdev=0A:C8: Operation not permitted<br>
                          2013-12-09 18:33:52.700+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=net reason=open
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          net=fa:16:3e:27:7e:e0 path="/dev/vhost-net"
                          rdev=0A:EE: Operation not permitted<br>
                          2013-12-09 18:33:52.852+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=net reason=open
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          net=fa:16:3e:cc:2e:85 path="/dev/net/tun"
                          rdev=0A:C8: Operation not permitted<br>
                          2013-12-09 18:33:52.900+0000: 3650: error :
                          virNWFilterInstantiate:790 : internal error:
                          Cannot instantiate filter due to unresolvable
                          variables or unavailable list elements:
                          DHCPSERVER<br>
                          2013-12-09 18:33:53.597+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=disk reason=start
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          old-disk="?"
                          new-disk="/var/lib/nova/instances/52af41df-5e9e-4470-86ff-ea274e18e08c/disk":

                          Operation not permitted<br>
                          2013-12-09 18:33:53.598+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=net reason=start
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          old-net=? new-net=fa:16:3e:27:7e:e0: Operation
                          not permitted<br>
                          2013-12-09 18:33:53.598+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=net reason=start
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          old-net=? new-net=fa:16:3e:cc:2e:85: Operation
                          not permitted<br>
                          2013-12-09 18:33:53.598+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=mem reason=start
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          old-mem=0 new-mem=1572864: Operation not
                          permitted<br>
                          2013-12-09 18:33:53.598+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm resrc=vcpu reason=start
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          old-vcpu=0 new-vcpu=1: Operation not permitted<br>
                          2013-12-09 18:33:53.598+0000: 3650: warning :
                          virAuditSend:135 : Failed to send audit
                          message virt=kvm op=start reason=booted
                          vm="instance-0000002f"
                          uuid=52af41df-5e9e-4470-86ff-ea274e18e08c
                          vm-pid=-1: Operation not permitted<br>
                          <br>
                          <br>
                          I think cause can be:<br>
                          <br>
                          2013-12-09 18:33:52.900+0000: 3650: error :
                          virNWFilterInstantiate:790 : internal error:
                          Cannot instantiate filter due to unresolvable
                          variables or unavailable list elements:
                          DHCPSERVER<br>
                          <br>
                          What's this variable?<br>
                          <br>
                          <br>
                          Thank you in advance.<br>
                          <br>
                          <br>
                          <br>
_______________________________________________<br>
                          Mailing list: <a moz-do-not-send="true"
                            href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                            target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                          Post to     : <a moz-do-not-send="true"
                            href="mailto:openstack@lists.openstack.org"
                            target="_blank">openstack@lists.openstack.org</a><br>
                          Unsubscribe : <a moz-do-not-send="true"
                            href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                            target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                        </blockquote>
                      </div>
                      <br>
                    </div>
                  </blockquote>
                  <br>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
  </body>
</html>