[Openstack-operators] nova-network not forwarding traffic for floating IPs

Lorin Hochstein lorin at nimbisservices.com
Thu Mar 21 01:24:25 UTC 2013


Hey all:

I'm having some trouble getting floating IPs working on a new Folsom
deployment (using nova-network, FlatDHCP, no-multihost, running on Ubuntu
12.04).

The short version is that nova-network does not seem to be forwarding the
traffic for a floating IP. I have  a running instance with a fixed IP of
10.40.0.2 and a floating IP of 10.20.0.3:

$ nova list
+-------+---------+--------+------------------------------+
| ID    | Name    | Status | Networks                     |
+-------+---------+--------+------------------------------+
| 3d292 | quantal | ACTIVE | private=10.40.0.2, 10.20.0.3 |
+-------+---------+--------+------------------------------+

The controller has a public IP address of 10.20.0.2

If I'm logged in to the controller, I can ssh to the instance on both the
floating and fixed IP. But if I try to connect from an external network, I
can't connect to the floating IP (I'm using the no-op firewall so shouldn't
be a securitiy group issue, although I've also configured to allow ping and
ssh in the default group).

If I do a tcpdump, I can confirm the ICMP packets destined for 10.20.0.3
are received by the controller on the public interface, but they never
appear on br100, which is where they should get forwarded to. I've got IP
forwarding enabled, and at this point I'm at a loss to try and dtermine
what's happening.

I posted lots of gory details on serverfault <
http://serverfault.com/questions/489893> including a link to a dump of
iptables <https://gist.github.com/lorin/5209761>, "ip a", routing tables,
etc.

Anybody have any insights here?

-- 
Lorin Hochstein
Lead Architect - Cloud Services
Nimbis Services, Inc.
www.nimbisservices.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20130320/10f9ff4f/attachment.html>


More information about the OpenStack-operators mailing list