openstack team mailing list archive

[Joe Warren-Meeks <joe.warren.meeks@xxxxxxxxx>]

Hi chaps,

I have Openstack working quite nicely now, however I have one small oddity.

I'm using nova networking still and I have 3 tenants.

Currently anything to 10/8 isn't being natted, which is fine and good.

One of the tenants does the right thing when going to something other than
10/8, it NATs out eth0 correctly.

The other two NAT out on eth3, using the correct address, but the wrong
interface.

So, my question is twofold.

1. How can I correct it so they all NAT out on eth0

OR

2. Is there a way to tell openstack to never NAT anything?

Kind regards

 -- joe.

Relevant networky things:

mysql> select cidr,netmask,bridge,gateway,broadcast,bridge_interface from
networks;
+--------------+---------------+--------+-----------+-------------+------------------+
| cidr         | netmask       | bridge | gateway   | broadcast   |
bridge_interface |
+--------------+---------------+--------+-----------+-------------+------------------+
| 10.0.21.0/24 | 255.255.255.0 | br21   | 10.0.21.1 | 10.0.21.255 |
eth3             |
| 10.0.41.0/24 | 255.255.255.0 | br41   | 10.0.41.1 | 10.0.41.255 |
eth3             |
| 10.0.33.0/24 | 255.255.255.0 | br33   | 10.0.33.1 | 10.0.33.255 |
eth3             |
+--------------+---------------+--------+-----------+-------------+------------------+

nova.conf:

--dhcpbridge_flagfile=/etc/nova/nova.conf
--dhcpbridge=/usr/bin/nova-dhcpbridge
--dnsmasq_config_file=/etc/dnsmasq-nova.conf
--max_cores=24
--logdir=/var/log/nova
--state_path=/var/lib/nova
--lock_path=/var/lock/nova
--force_dhcp_release
--iscsi_helper=tgtadm
--libvirt_use_virtio_for_bridges
--connection_type=libvirt
--root_helper=sudo nova-rootwrap
--verbose
--ec2_private_dns_show_ip
--allow_admin_api=true
--use_deprecated_auth=false
--auth_strategy=keystone
--scheduler_driver=nova.scheduler.simple.SimpleScheduler
--s3_host=10.0.80.10
--ec2_host=10.0.80.10
--rabbit_host=10.0.80.10
--cc_host=10.0.80.10
--nova_url=http://10.0.80.10:8774/v1.1/
#--routing_source_ip=10.0.40.250
--glance_api_servers=10.0.80.10:9292
--image_service=nova.image.glance.GlanceImageService
--sql_connection=mysql://novadbadmin:champagnesupernova@10.0.80.10/nova
--ec2_url=http://10.0.80.10:8773/services/Cloud
--keystone_ec2_url=http://10.0.80.10:5000/v2.0/ec2tokens
--api_paste_config=/etc/nova/api-paste.ini
--libvirt_type=kvm
--libvirt_use_virtio_for_bridges=true
--start_guests_on_host_boot=true
--resume_guests_state_on_host_boot=true
# vnc specific configuration
--novnc_enabled=true
--novncproxy_base_url=http://10.0.40.250:6080/vnc_auto.html
--xvpvncproxy_base_url=http://10.0.40.250:6081/console
--vncserver_proxyclient_address=10.0.40.250
--vncserver_listen=10.0.40.250
#--fixed_range=10.0.41.0/24
# network specific settings
--network_manager=nova.network.manager.VlanManager
--multi_host=true
--enabled_apis=metadata,ec2,osapi_compute,osapi_volume
--public_interface=eth0
#--flat_interface=bond0
--flat_injected=False
--force_dhcp_release
--iscsi_helper=tgtadm
--connection_type=libvirt
--root_helper=sudo nova-rootwrap
--verbose