Open Stack

>
> *Chain neutron-l3-agent-scope (1 references)*
>>  pkts bytes target     prot opt in     out     source
>> destination
>>    78  4368 *DROP*       all      *      qr-1ee33f03-23  ::/0
>> ::/0                 mark match ! 0x4000000/0xffff0000
>>
>> Packets pass in chain FORWARD -> neutron-filter-top ->
>> neutron-l3-agent-local ->
>> back to FORWARD -> neutron-l3-agent-FORWARD -> neutron-l3-agent-scope ->
>> DROP.
>>
>
> This looks similar to https://bugs.launchpad.net/neutron/+bug/1570122
>
>
Thank you Brian, this is the problem.


> IPv4 rules is very similar but works. Ipv6 is blocking for some reason.
>>
>
> Do you have the same mark/match rules with IPv4, they're just not getting
> hit?
>
>
Yes, IPv4 have this rule and works fine. Adding a similar rule manually
with ip6tables the traffic traverses the virtual router.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160831/75f303e8/attachment.html>