[Openstack-operators] Cannot connect to my instances

Leandro Reox leandro.reox at gmail.com
Fri May 13 21:01:09 UTC 2011


Hi all, i managed to deploy images on a kvm based ubuntu server, i see them
running with virsh, and on my controller node, buy unfortunally im not able
to connect to the instances, ping or ssh ...

I have a multinode deploy,

- One node acts as a controller , network , scheduler
- One node acts as a compute

If i run euca-get-console-output i-00000002 y get something like =
"i-00000002
2011-05-13T20:26:28Z"  ...

Thats weird, im launching a ubuntu maveric image

Here my nova.conf , controller and compute :


*CONTROLLER NOVA.CONF*

--routing_source_ip=172.16.133.241
--verbose
--sql_connection=mysql://root:nova@172.16.133.241/nova
--network_manager=nova.network.manager.FlatManager
--s3_host=172.16.133.241
--rabbit_host=172.16.133.241
--cc_host=172.16.133.241
--ec2_url=http://172.16.133.241:8773/services/Cloud
--fixed_range=10.0.0.0/24
--network_size=250
--FAKE_subdomain=ec2
--routing_source_ip=172.16.133.241
--verbose
--sql_connection=mysql://root:nova@172.16.133.241/nova
--network_manager=nova.network.manager.FlatManager
--glance_host=172.16.133.242
--image_service=nova.image.glance.GlanceImageService

*CONTROLLER BRIDGES*

brctl show
bridge name bridge id STP enabled interfaces
br100 8000.00163e7a7caf no eth0
virbr0 8000.000000000000 yes

*CONTROLLER IFCONFIG*

fconfig -a
br100     Link encap:Ethernet  HWaddr 00:16:3e:7a:7c:af
          inet addr:172.16.133.241  Bcast:172.16.133.255  Mask:255.255.255.0
          inet6 addr: fe80::216:3eff:fe7a:7caf/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1054160 errors:0 dropped:0 overruns:0 frame:0
          TX packets:531558 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:84269781 (84.2 MB)  TX bytes:60526501 (60.5 MB)

eth0      Link encap:Ethernet  HWaddr 00:16:3e:7a:7c:af
          inet6 addr: fe80::216:3eff:fe7a:7caf/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:53679405 errors:0 dropped:0 overruns:0 frame:0
          TX packets:25876416 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:4247775920 (4.2 GB)  TX bytes:2616509493 (2.6 GB)
          Interrupt:32 Base address:0xc000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:210729606 errors:0 dropped:0 overruns:0 frame:0
          TX packets:210729606 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:170782807 (170.7 MB)  TX bytes:170782807 (170.7 MB)

virbr0    Link encap:Ethernet  HWaddr a6:a4:bb:ef:71:54
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:925 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:88254 (88.2 KB)

*CONTROLLER INTERFACES*

cat /etc/network/interfaces
# The loopback network interface
auto lo
iface lo inet loopback

auto br100
iface br100 inet static
 bridge_ports eth0
bridge_stp off
 bridge_maxwait 0
bridge_fd 0
 address 172.16.133.241
netmask 255.255.255.0
 broadcast 172.16.133.255
gateway 172.16.133.1
 dns-nameservers 172.16.0.90




*COMPUTE NOVA.CONF*

cat /etc/nova/nova.conf
--dhcpbridge_flagfile=/etc/nova/nova.conf
--dhcpbridge=/usr/bin/nova-dhcpbridge
--logdir=/var/log/nova
--state_path=/var/lib/nova
--lock_path=/var/lock/nova
--verbose
--s3_host=172.16.133.241
--rabbit_host=172.16.133.241
--cc_host=172.16.133.241
--ec2_url=http://172.16.133.241:8773/services/Cloud
--sql_connection=mysql://root:nova@172.16.133.241/nova
--network_manager=nova.network.manager.FlatManager
--rescue_timeout=86400
--glance_host=172.16.133.242
--image_service=nova.image.glance.GlanceImageService

*COMPUTE BRCTL*

brctl show
bridge name bridge id STP enabled interfaces
br100 8000.d485646a5232 no eth0
 vnet0
vnet1
virbr0 8000.000000000000 yes


*COMPUTE IFCONFIG*

ifconfig -a
br100     Link encap:Ethernet  HWaddr d4:85:64:6a:52:32
          inet addr:172.16.144.12  Bcast:172.16.144.255  Mask:255.255.255.0
          inet6 addr: fe80::d685:64ff:fe6a:5232/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:944789 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1625802 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:269197743 (269.1 MB)  TX bytes:153825550 (153.8 MB)

eth0      Link encap:Ethernet  HWaddr d4:85:64:6a:52:32
          inet6 addr: fe80::d685:64ff:fe6a:5232/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:992272 errors:0 dropped:0 overruns:1 frame:0
          TX packets:1627251 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:286032809 (286.0 MB)  TX bytes:153914823 (153.9 MB)
          Memory:fbe60000-fbe80000

eth1      Link encap:Ethernet  HWaddr d4:85:64:6a:52:33
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Memory:fbee0000-fbf00000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:24 errors:0 dropped:0 overruns:0 frame:0
          TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2408 (2.4 KB)  TX bytes:2408 (2.4 KB)

virbr0    Link encap:Ethernet  HWaddr 8a:52:c0:0d:a5:df
          inet addr:10.0.0.250  Bcast:10.0.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:630 (630.0 B)

vnet0     Link encap:Ethernet  HWaddr fe:16:3e:17:da:63
          inet6 addr: fe80::fc16:3eff:fe17:da63/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9089 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500
          RX bytes:0 (0.0 B)  TX bytes:507540 (507.5 KB)

vnet1     Link encap:Ethernet  HWaddr fe:16:3e:3a:55:a0
          inet6 addr: fe80::fc16:3eff:fe3a:55a0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2564 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500
          RX bytes:0 (0.0 B)  TX bytes:143094 (143.0 KB)


*COMPUTE NETWORK/INTERFACES*

cat /etc/network/interfaces
# The loopback network interface
auto lo
iface lo inet loopback

auto br100
iface br100 inet static
 bridge_ports eth0
bridge_stp off
 bridge_maxwait 0
bridge_fd 0
 address 172.16.144.12
netmask 255.255.255.0
 broadcast 172.16.144.255
gateway 172.16.144.1
 dns-nameservers 172.16.104.38


*COMPUTE VIRSH NET-INFO*

<network>
  <name>default</name>
  <uuid>5ad8712d-d456-41ea-eb1d-db18354bc9ab</uuid>
  <forward mode='nat'/>
  <bridge name='virbr0' stp='on' delay='0' />
  <ip address='10.0.0.250' netmask='255.255.255.0'>
    <dhcp>
      <range start='10.0.0.10' end='10.0.0.240' />
    </dhcp>
  </ip>
</network>

*EUCA DESCRIBE GROUPS EN COMPUTE*

euca-describe-groups
GROUP hybrid default default
PERMISSION hybrid default ALLOWS icmp -1 -1 FROM CIDR 0.0.0.0/0
PERMISSION hybrid default ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0

*IPTABLES COMPUTE NODE*

sudo iptables -L
[sudo] password for melicloud:
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
nova-compute-INPUT  all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:bootps

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
nova-filter-top  all  --  anywhere             anywhere
nova-compute-FORWARD  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             10.0.0.0/24         state
RELATED,ESTABLISHED
ACCEPT     all  --  10.0.0.0/24          anywhere
ACCEPT     all  --  anywhere             anywhere
REJECT     all  --  anywhere             anywhere            reject-with
icmp-port-unreachable
REJECT     all  --  anywhere             anywhere            reject-with
icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
nova-filter-top  all  --  anywhere             anywhere
nova-compute-OUTPUT  all  --  anywhere             anywhere

Chain nova-compute-FORWARD (1 references)
target     prot opt source               destination

Chain nova-compute-INPUT (1 references)
target     prot opt source               destination

Chain nova-compute-OUTPUT (1 references)
target     prot opt source               destination

Chain nova-compute-inst-1 (1 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere            state INVALID
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTABLISHED
ACCEPT     udp  --  10.0.0.1             anywhere            udp spt:bootps
dpt:bootpc
ACCEPT     all  --  10.0.0.0/25          anywhere
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
nova-compute-sg-fallback  all  --  anywhere             anywhere

Chain nova-compute-inst-2 (1 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere            state INVALID
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTABLISHED
ACCEPT     udp  --  10.0.0.1             anywhere            udp spt:bootps
dpt:bootpc
ACCEPT     all  --  10.0.0.0/25          anywhere
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
nova-compute-sg-fallback  all  --  anywhere             anywhere

Chain nova-compute-local (1 references)
target     prot opt source               destination
nova-compute-inst-1  all  --  anywhere             10.0.0.2
nova-compute-inst-2  all  --  anywhere             10.0.0.3

Chain nova-compute-sg-fallback (2 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain nova-filter-top (2 references)
target     prot opt source               destination
nova-compute-local  all  --  anywhere             anywhere

*NOVA CONTROLLER IPTABLES*

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:bootps
nova-compute-INPUT  all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             192.168.122.0/24    state
RELATED,ESTABLISHED
ACCEPT     all  --  192.168.122.0/24     anywhere
ACCEPT     all  --  anywhere             anywhere
REJECT     all  --  anywhere             anywhere            reject-with
icmp-port-unreachable
REJECT     all  --  anywhere             anywhere            reject-with
icmp-port-unreachable
nova-filter-top  all  --  anywhere             anywhere
nova-compute-FORWARD  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
nova-filter-top  all  --  anywhere             anywhere
nova-compute-OUTPUT  all  --  anywhere             anywhere

Chain nova-compute-FORWARD (1 references)
target     prot opt source               destination

Chain nova-compute-INPUT (1 references)
target     prot opt source               destination

Chain nova-compute-OUTPUT (1 references)
target     prot opt source               destination

Chain nova-compute-local (1 references)
target     prot opt source               destination

Chain nova-compute-sg-fallback (0 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain nova-filter-top (2 references)
target     prot opt source               destination
nova-compute-local  all  --  anywhere             anywhere*   *


Any clues ?

Best Regards !
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20110513/60f05358/attachment-0002.html>


More information about the Openstack-operators mailing list