Re: [Openstack] Strange network behavior

2012-11-13 Thread Joe Warren-Meeks
I should add, that it looks like none of the iptables rules are being setup for the floating IP. It is bound to the right interface in ip addr, but my iptables look as follows: (You'll note that 10.0.40.129 is conspicuous by its absence) Ideas? Chain INPUT (policy ACCEPT 47238 packets, 20M

Re: [Openstack] Strange network behavior

2012-11-12 Thread Joe Warren-Meeks
Hi Vish et al. I still can't make head nor tail of it. ICMP works in both directions fine, but when I try to ssh out from the VM (even with the dmz_cidr flags) the SYN gets through un-snatted ok, then my desktop SYN-ACKs back, but the virt never gets to see it. Instead, the snat layer sends a

Re: [Openstack] Strange network behavior

2012-11-12 Thread Joe Warren-Meeks
Hey guys, Ignore this q. I didn't really have my head around how Openstack works and I think I get it now. Thanks for all your help. -- joe. On 12 November 2012 10:12, Joe Warren-Meeks joe.warren.me...@gmail.comwrote: Hi Vish et al. I still can't make head nor tail of it. ICMP works in

[Openstack] Strange network behavior

2012-11-09 Thread Joe Warren-Meeks
Hi all, I've managed to get Openstack pretty much up and running as I wanted it. I do have, however, a rather strange networking issue. I created the network with nova-manage network create --fixed_range_v4=10.0.41.0/24 --num_networks=1 --bridge=br41 --bridge_interface=eth0 --label=development

Re: [Openstack] Strange network behavior

2012-11-09 Thread Rick Jones
On 11/09/2012 09:14 AM, Joe Warren-Meeks wrote: What I am seeing in Tcpdump is a lot of incorrect cksums. This happens with all Tcp connections. 17:12:38.539784 IP (tos 0x0, ttl 64, id 53611, offset 0, flags [DF], proto TCP (6), length 60) 10.0.0.240.56791 10.0.41.3.22: Flags [S], cksum

Re: [Openstack] Strange network behavior

2012-11-09 Thread Vishvananda Ishaya
What is the ip address of your workstation? You may be running into something similar to this issue: http://lists.openstack.org/pipermail/openstack-dev/2012-September/001212.html I suspect either: a) Traffic not getting snatted when it should. This is usually due to overlapping ranges between