← Back to team overview

openstack team mailing list archive

Re: Problems accessing metadata service due to nova-network generated iptables rules

 

On Jun 20, 2012, at 5:44 PM, Lars Kellogg-Stedman wrote:

>>> Is the DNAT rule expected to work?  Does linux_net.py need a special
>>> case for when the metadata address is on the local host?
> 
> I have confirmed that the DNAT rule works *unless* metadata_host is
> 127.0.0.1, in which case you need a REDIRECT rule.
> 

Did you ever find out what was causing the issue with your configuration? We run using multi-host  (nova-api metadata service and nova-compute on every node) in VLAN mode, and our instances have no problem reaching the metadata service.


Take care,

Lorin
--
Lorin Hochstein
Lead Architect - Cloud Services
Nimbis Services, Inc.
www.nimbisservices.com


Attachment: smime.p7s
Description: S/MIME cryptographic signature


References