[Openstack] Public IPs without NAT
Matej
matej at tam.si
Wed Apr 23 16:29:36 UTC 2014
Hello,
To hopefully move into the right way (first phase with using flat
network with private IPs and then moving further to public IPs), I
have removed all previous routers and networks,
my plan now is to use only hardware router (IP 192.168.22.1) and
having a flat network type.
I have added the following two lines to
/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini on Controller and
Compute:
network_vlan_ranges = physnet1
bridge_mappings = physnet1:br-int
My current ovs_neutron_plugin.ini on Controller:
[ovs]
tenant_network_type = gre
tunnel_id_ranges = 1:1000
enable_tunneling = True
local_ip = 192.168.22.10
integration_bridge = br-int
tunnel_bridge = br-tun
tunnel_types=gre
network_vlan_ranges = physnet1
bridge_mappings = physnet1:br-int
[agent]
polling_interval = 2
[securitygroup]
firewall_driver =
neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
My current ovs_neutron_plugin.ini on Compute:
[ovs]
tenant_network_type = gre
tunnel_id_ranges = 1:1000
enable_tunneling = True
local_ip = 192.168.22.11
tunnel_bridge = br-tun
integration_bridge = br-int
tunnel_types = gre
network_vlan_ranges = physnet1
bridge_mappings = physnet1:br-int
[agent]
polling_interval = 2
[securitygroup]
firewall_driver =
neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
My first goal is to get VMs having IP addresses from the subnet
192.168.22.0/24, namely from the pool
Now I am able to create a net:
+---------------------------+--------------------------------------+
| Field | Value |
+---------------------------+--------------------------------------+
| admin_state_up | True |
| id | 43796de1-ea43-4cbe-809a-0554ed4de55f |
| name | privat |
| provider:network_type | flat |
| provider:physical_network | physnet1 |
| provider:segmentation_id | |
| router:external | False |
| shared | True |
| status | ACTIVE |
| subnets | db596734-3f9a-4699-abe5-7887a2a15b88 |
| tenant_id | a0edd2a531bb41e6b17e0fd644bfd494 |
+---------------------------+--------------------------------------+
And a subnet:
| Field | Value |
+------------------+---------------------------------------------------------+
| allocation_pools | {"start": "192.168.22.201", "end": "192.168.22.254"} |
| cidr | 192.168.22.0/24 |
| dns_nameservers | |
| enable_dhcp | False |
| gateway_ip | |
| host_routes | {"destination": "0.0.0.0/0", "nexthop": "192.168.22.1"} |
| id | db596734-3f9a-4699-abe5-7887a2a15b88 |
| ip_version | 4 |
| name | privat-subnet |
| network_id | 43796de1-ea43-4cbe-809a-0554ed4de55f |
| tenant_id | a0edd2a531bb41e6b17e0fd644bfd494 |
+------------------+---------------------------------------------------------+
I am not using DHCP and then I start CirrOS instance
+--------------------------------------+------+--------+------------+-------------+-----------------------+
| ID | Name | Status | Task State |
Power State | Networks |
+--------------------------------------+------+--------+------------+-------------+-----------------------+
| 10925a36-fbcb-4348-b569-a3fcd5b242a2 | c1 | ACTIVE | - |
Running | privat=192.168.22.203 |
+--------------------------------------+------+--------+------------+-------------+-----------------------+
Then I log-in to the CirrOS instance via Console and set IP
192.168.22.203: sudo ifconfig eth0 inet 192.168.22.203 netmask
255.255.255.0, but no traffic goes thru.
I have also tried to update network router:external to True, but with
no success.
What am I doing wrong here? I am in the phase of building a new
infrastructure and can *afford* changes, but after spending so much
time around those networking issues I really hope that I will be able
to move further on.
Thank you for all the ideas in advance.
Matej
On Wed, Apr 23, 2014 at 10:47 AM, Robert van Leeuwen <
Robert.vanLeeuwen at spilgames.com> wrote:
> > neutron net-create public --tenant_id a0edd2a531bb41e6b17e0fd644bfd494
> --provider:network_type flat --provider:physical_network default --shared
> True
> > Invalid input for provider:physical_network. Reason: '[u'default',
> u'True']' is not a valid string.
> >
> > For being able to use --provider:physical_network I need bridge_mappings
> in configuration, right? When I add it, my existing GRE network stops
> working.
> > It seems I am lost here ...
>
> You should be able to run bridge-mapped networks and GRE tunnels at the
> same time.
> Adding the bridge map config should not break GRE. (always do this in a
> test setup first ;)
> We used to do this up to Folsom (maybe even grizzly, do not remember exact
> timelines)
>
> We moved to a full VLAN setup later on because GRE was adding complexity
> without any real benefits.
> (Since we do not expect to have thousands of networks we do not expect to
> run out of VLANs)
>
> Cheers,
> Robert van Leeuwen
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140423/41f502e0/attachment.html>
More information about the Openstack
mailing list