Open Stack

Hi,

I am using GRE tunneling and OVS and have several instances working
perfectly. They get private IP addresses (range: 10.0.0.0/24) and get
routed through my local IP subnet (192.168.22.0/24) out via my HW router's
192.168.22.1. This setup works good and I am pretty happy with it.

What bothers me is the case where I need to delegate some of our instances
a direct public IP address, without the need for any NAT whatsoever.
Let's declare this public subnet as: 102.203.103.80/29

I have created a new network:
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | True                                 |
| id                        | 50ad28c9-6a7d-4579-8339-a39f29cc4485 |
| name                      | inet                                 |
| provider:network_type     | local                                |
| provider:physical_network |                                      |
| provider:segmentation_id  |                                      |
| router:external           | True                                 |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   | 6d27b5fa-191e-473e-9852-cbf47a62188e |
| tenant_id                 | a0edd2a531bb41e6b17e0fd644bfd494     |
+---------------------------+--------------------------------------+

and then assigned a subnet inside:
+------------------+------------------------------------------------------+
| Field            | Value                                                |
+------------------+------------------------------------------------------+
| allocation_pools | {"start": "102.203.103.84", "end": "102.203.103.86"} |
| cidr             | 102.203.103.80/29                                    |
| dns_nameservers  | 8.8.8.8                                          |
| enable_dhcp      | False                                                |
| gateway_ip       |                                                      |
| host_routes      |                                                      |
| id               | 6d27b5fa-191e-473e-9852-cbf47a62188e                 |
| ip_version       | 4                                                    |
| name             | inet                                                 |
| network_id       | 50ad28c9-6a7d-4579-8339-a39f29cc4485                 |
| tenant_id        | a0edd2a531bb41e6b17e0fd644bfd494                     |
+------------------+------------------------------------------------------+


When I create a new instance (CirrOS) and delegate this newly created
network to it and then set IP
102.203.103.84/29 inside it, I am unable to ping our router's public IP
address, it doesn't work.
I have tried to create it as a flat network, but I don't currently have
physnet interface defined in ovs_neutron_plugin.ini and when I did it, my
private NAT setup stopped working.

My current ovs_neutron_plugin.ini on controller:
[ovs]
tenant_network_type = gre
tunnel_id_ranges = 1:1000
enable_tunneling = True
local_ip = 192.168.22.10
integration_bridge = br-int
tunnel_bridge = br-tun
tunnel_types=gre

[agent]
polling_interval = 2

[securitygroup]
firewall_driver =
neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver



What is the right way to achieve this public IP assignment I would like to
do? After reading a lot of docs, I still don't have any working solutions
for it.

Thank you very much for any ideas and help. If you need any other
information, I will be happy to provide it.

Matej
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140423/075ea0e8/attachment.html>