openstack team mailing list archive

Thread
Date

Re: Cant ping private or floating IP

To: "Chathura M. Sarathchandra Magurawalage" <77.chathura@xxxxxxxxx>
From: Jean-Baptiste RANSY <jean-baptiste.ransy@xxxxxxxxxx>
Date: Sun, 17 Feb 2013 03:41:54 +0100
Cc: openstack@xxxxxxxxxxxxxxxxxxx
In-reply-to: <CAHw8T_+g-Y1HaqvRo4hTpt8VjtNO0Dp1fWMaVhA1m=FOsTrJdA@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130106 Thunderbird/17.0.2

For me, it's normal that you are not able to curl 169.254.169.254 from
your compute and controller nodes : Same thing on my side, but my VM get
their metadata.

Try to lunch an instance.

JB


On 02/17/2013 03:35 AM, Chathura M. Sarathchandra Magurawalage wrote:
> root@computernode:~# curl -v  http://169.254.169.254
> * About to connect() to 169.254.169.254 port 80 (#0)
> *   Trying 169.254.169.254... 
>
> root@controller:~# curl -v  http://169.254.169.254
> * About to connect() to 169.254.169.254 port 80 (#0)
> *   Trying 169.254.169.254... 
>
>
> root@athena:~# iptables -L -n -v
> Chain INPUT (policy ACCEPT 59009 packets, 22M bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 59493   22M quantum-l3-agent-INPUT  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
> 59493   22M nova-api-INPUT  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>   484 73533 ACCEPT     47   --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain FORWARD (policy ACCEPT 707 packets, 47819 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
>   707 47819 quantum-filter-top  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>   707 47819 quantum-l3-agent-FORWARD  all  --  *      *      
> 0.0.0.0/0 <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>  
>         
>   707 47819 nova-filter-top  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>   707 47819 nova-api-FORWARD  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain OUTPUT (policy ACCEPT 56022 packets, 22M bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 56022   22M quantum-filter-top  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
> 56022   22M quantum-l3-agent-OUTPUT  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
> 56022   22M nova-filter-top  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
> 56022   22M nova-api-OUTPUT  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain nova-api-FORWARD (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain nova-api-INPUT (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>     0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            192.168.2.225        tcp dpt:8775
>
> Chain nova-api-OUTPUT (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain nova-api-local (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain nova-filter-top (2 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 56729   22M nova-api-local  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain quantum-filter-top (2 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 56729   22M quantum-l3-agent-local  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain quantum-l3-agent-FORWARD (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain quantum-l3-agent-INPUT (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>     0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            192.168.2.225        tcp dpt:8775
>
> Chain quantum-l3-agent-OUTPUT (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain quantum-l3-agent-local (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination
>
> root@athena:~# iptables -L -n -v -t nat
> Chain PREROUTING (policy ACCEPT 3212 packets, 347K bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
>  3212  347K quantum-l3-agent-PREROUTING  all  --  *      *      
> 0.0.0.0/0 <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>  
>         
>  3212  347K nova-api-PREROUTING  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain INPUT (policy ACCEPT 639 packets, 84948 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain OUTPUT (policy ACCEPT 3180 packets, 213K bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
>  3180  213K quantum-l3-agent-OUTPUT  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>  3180  213K nova-api-OUTPUT  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
>  3726  247K quantum-l3-agent-POSTROUTING  all  --  *      *      
> 0.0.0.0/0 <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>  
>         
>     0     0 nova-api-POSTROUTING  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>     0     0 quantum-postrouting-bottom  all  --  *      *      
> 0.0.0.0/0 <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>  
>         
>     0     0 nova-postrouting-bottom  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain nova-api-OUTPUT (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain nova-api-POSTROUTING (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain nova-api-PREROUTING (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain nova-api-float-snat (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain nova-api-snat (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>     0     0 nova-api-float-snat  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain nova-postrouting-bottom (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>     0     0 nova-api-snat  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>           
>
> Chain quantum-l3-agent-OUTPUT (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain quantum-l3-agent-POSTROUTING (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>  3726  247K ACCEPT     all  --  !qg-6f8374cb-cb !qg-6f8374cb-cb
>  0.0.0.0/0 <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>
>            ! ctstate DNAT
>     0     0 ACCEPT     all  --  *      *       10.5.5.0/24
> <http://10.5.5.0/24>          192.168.2.225       
>
> Chain quantum-l3-agent-PREROUTING (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>     0     0 DNAT       tcp  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            169.254.169.254      tcp dpt:80
> to:192.168.2.225:8775 <http://192.168.2.225:8775>
>
> Chain quantum-l3-agent-float-snat (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>
> Chain quantum-l3-agent-snat (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>     0     0 quantum-l3-agent-float-snat  all  --  *      *      
> 0.0.0.0/0 <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0>  
>         
>     0     0 SNAT       all  --  *      *       10.5.5.0/24
> <http://10.5.5.0/24>          0.0.0.0/0 <http://0.0.0.0/0>          
>  to:192.168.2.151
>
> Chain quantum-postrouting-bottom (1 references)
>  pkts bytes target     prot opt in     out     source              
> destination         
>     0     0 quantum-l3-agent-snat  all  --  *      *       0.0.0.0/0
> <http://0.0.0.0/0>            0.0.0.0/0 <http://0.0.0.0/0> 
>
> thanks.
>
>
> On 17 February 2013 02:25, Jean-Baptiste RANSY
> <jean-baptiste.ransy@xxxxxxxxxx
> <mailto:jean-baptiste.ransy@xxxxxxxxxx>> wrote:
>
>     Controller node :
>     # iptables -L -n -v
>     # iptables -L -n -v -t nat
>
>
>
>     On 02/17/2013 03:18 AM, Chathura M. Sarathchandra Magurawalage wrote:
>>     You should be able to curl 169.254.169.254 from compute node,
>>     which I cant at the moment.
>>
>>     I have got the bridge set up in the l3_agent.ini
>
>

Follow ups

Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-17

References

Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-14
Re: Cant ping private or floating IP
From: Sylvain Bauza, 2013-02-15
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-16
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-16
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-16
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-16
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-16
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-16
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-16
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-17
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-17
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-17
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-17
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-17
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-17
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-17
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-17
Re: Cant ping private or floating IP
From: Jean-Baptiste RANSY, 2013-02-17
Re: Cant ping private or floating IP
From: Chathura M. Sarathchandra Magurawalage, 2013-02-17