[openstack-dev] [Openstack][nova][Neutron] Launch VM with multiple Ethernet interfaces with I.P. of single subnet.

Carl Baldwin carl at ecbaldwin.net
Thu Apr 17 20:51:44 UTC 2014


This review seems to suggest that it can be done:

https://review.openstack.org/#/c/85432

I was not able to reproduce this in devstack.  How does this work?  My
nova command to add an IP return success but didn't seem to actually
add an IP address to the instance and did not show in neutron
port-show.

Carl

On Thu, Apr 17, 2014 at 12:29 PM, Carl Baldwin <carl at ecbaldwin.net> wrote:
> I don't see any indication that a floating ip can be associated with
> any of the secondary addresses.  Can this be done?
>
> If not, then multiple addresses are not useful if a floating ip is
> required to make the server public facing.
>
> Carl
>
> On Wed, Apr 16, 2014 at 10:46 PM, Aaron Rosen <aaronorosen at gmail.com> wrote:
>> The allowed-address-pair extension that was added here
>> (https://review.openstack.org/#/c/38230/) allows us to add arbitrary ips to
>> an interface to allow them. This is useful if you want to run something like
>> VRRP between two instances.
>>
>>
>> On Wed, Apr 16, 2014 at 9:39 PM, Kevin Benton <blak111 at gmail.com> wrote:
>>>
>>> I was under the impression that the security group rules blocked addresses
>>> not assigned by neutron[1].
>>>
>>>
>>> 1.https://github.com/openstack/neutron/blob/master/neutron/agent/linux/iptables_firewall.py#L188
>>>
>>>
>>> On Wed, Apr 16, 2014 at 9:20 PM, Aaron Rosen <aaronorosen at gmail.com>
>>> wrote:
>>>>
>>>> You can do it with ip aliasing and use one interface:
>>>>
>>>> ifconfig eth0 10.0.0.22/24
>>>> ifconfig eth0:1 10.0.0.23/24
>>>> ifconfig eth0:2 10.0.0.24/24
>>>>
>>>> 2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN
>>>> qlen 1000
>>>>     link/ether 40:6c:8f:1a:a9:31 brd ff:ff:ff:ff:ff:ff
>>>>     inet 10.0.0.22/24 brd 10.0.0.255 scope global eth0
>>>>        valid_lft forever preferred_lft forever
>>>>     inet 10.0.0.23/24 brd 10.0.0.255 scope global secondary eth0:1
>>>>        valid_lft forever preferred_lft forever
>>>>     inet 10.0.0.24/24 brd 10.0.0.255 scope global secondary eth0:2
>>>>        valid_lft forever preferred_lft forever
>>>>
>>>>
>>>>
>>>> On Wed, Apr 16, 2014 at 8:53 PM, Kevin Benton <blak111 at gmail.com> wrote:
>>>>>
>>>>> Web server running multiple SSL sites that wants to be compatible with
>>>>> clients that don't support the SNI extension. There is no way for a server
>>>>> to get multiple IP addresses on the same interface is there?
>>>>>
>>>>>
>>>>> On Wed, Apr 16, 2014 at 5:50 PM, Aaron Rosen <aaronorosen at gmail.com>
>>>>> wrote:
>>>>>>
>>>>>> This is true. Several people have asked this same question over the
>>>>>> years though I've yet to hear a use case why one really need to do this. Do
>>>>>> you have one?
>>>>>>
>>>>>>
>>>>>> On Wed, Apr 16, 2014 at 3:12 PM, Ronak Shah <ronak at nuagenetworks.net>
>>>>>> wrote:
>>>>>>>
>>>>>>> Hi Vikash,
>>>>>>> Currently this is not supported. the NIC not only needs to be in
>>>>>>> different subnet, they have to be in different network as well (container
>>>>>>> for the subnet)
>>>>>>>
>>>>>>> Thanks
>>>>>>> Ronak
>>>>>>>
>>>>>>> On Wed, Apr 16, 2014 at 3:51 AM, Vikash Kumar
>>>>>>> <vikash.kumar at oneconvergence.com> wrote:
>>>>>>>>
>>>>>>>> With 'interfaces' I mean 'nics' of VM.
>>>>>>>>
>>>>>>>>
>>>>>>>> On Wed, Apr 16, 2014 at 4:18 PM, Vikash Kumar
>>>>>>>> <vikash.kumar at oneconvergence.com> wrote:
>>>>>>>>>
>>>>>>>>> Hi,
>>>>>>>>>
>>>>>>>>>      I want to launch one VM which will have two Ethernet interfaces
>>>>>>>>> with IP of single subnet. Is this supported now in openstack ? Any
>>>>>>>>> suggestion ?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Thanx
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> OpenStack-dev mailing list
>>>>>>>> OpenStack-dev at lists.openstack.org
>>>>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> OpenStack-dev mailing list
>>>>>>> OpenStack-dev at lists.openstack.org
>>>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>>>>>
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> OpenStack-dev mailing list
>>>>>> OpenStack-dev at lists.openstack.org
>>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Kevin Benton
>>>>>
>>>>> _______________________________________________
>>>>> OpenStack-dev mailing list
>>>>> OpenStack-dev at lists.openstack.org
>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> OpenStack-dev mailing list
>>>> OpenStack-dev at lists.openstack.org
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>>
>>>
>>>
>>>
>>> --
>>> Kevin Benton
>>>
>>> _______________________________________________
>>> OpenStack-dev mailing list
>>> OpenStack-dev at lists.openstack.org
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>
>>
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>



More information about the OpenStack-dev mailing list