[Openstack] 答复: [OpenStack] How to deploy Liberty Neutron with linuxbridge on physical machine having single NIC

2016-04-15 Thread liyulei
Hi James, Thanks first, but I encountered another problem when creating a VLAN interface according to the Red_Hat_Enterprise_Linux-7-Networking_Guide. I configuered the parent interface ifcfg-eno1 as follows: DEVICE=eno1 TYPE=Ethernet BOOTPROTO=none ONBOOT=yes And I created a new

Re: [Openstack] Lack of iptables rule in DVR network scenario when using floating IPs is causing packets' drop

2016-04-15 Thread Remo Mattei
A couple of things to check, by default DVR is not enabled, therefore make sure that’s on. if you have more than one hypervisor, then check where the instance is booted and see if there is a router there, which should have the floating ip address and iptables will have a map for the 1to1 SNAT

Re: [Openstack] Lack of iptables rule in DVR network scenario when using floating IPs is causing packets' drop

2016-04-15 Thread Erdősi Péter
2016. 04. 15. 15:41 keltezéssel, Jorge Luiz Correa írta: I think that in neutron-openvswi-i7a7a669c-3 should exist some RETURN rule using the 172.16.0.5 IP address. Just a fast thought: Did you assigned a security group with icmp enabled rule to your VM? I think, thats will made your exception

Re: [Openstack] Lack of iptables rule in DVR network scenario when using floating IPs is causing packets' drop

2016-04-15 Thread Remo Mattei
one more thing to know what version (liberty? Mitaka?) The security rules don’t get set with the new Mitaka so just make sure that you do set them, I have seen issues where the instance does not behave well and if you do set the SG make sure you have the ports open as Peter stated below. Remo

Re: [Openstack] getting container and object list

2016-04-15 Thread Rajesh Mallah
Hi , I was able to solve my problem using swift-get-nodes /etc/swift/object.ring.gz AUTH_ Container_Name Object_Name the AUTH_ token was got from accounts sqlite .db file I however did not attempt to list containers or objects as it was possible to determine them fro

Re: [Openstack] Lack of iptables rule in DVR network scenario when using floating IPs is causing packets' drop

2016-04-15 Thread Jorge Luiz Correa
Thank you, Peter and Remo! Your answers guided me to better understand security groups and iptables rules. The problem was that I haven't understood very well the default security group created automatically, mainly the rules that seems to pass all traffic. Explained bellow. DVR is enabled. Versio

Re: [Openstack] Lack of iptables rule in DVR network scenario when using floating IPs is causing packets' drop

2016-04-15 Thread Remo Mattei
It says default so that applies only to that network. Just add a new rule icmp all source 0/0 then you can ping in and out. Same for ssh which applies to floating ip as well. In mitaka it works a little differently. Ciao Inviato da iPhone > Il giorno 15 apr 2016, alle ore 10:50, Jorge Lui

[Openstack] Error in retrieving instances in mitaka.

2016-04-15 Thread Mohan N V
I recently installed mitaka and getting the above error. I tried screen -r stack which said no screens currently running. Is there anything like rejoin-stack.sh which was in kilo. -- Mohan N V ___ Mailing list: http://lists.openstack.org/cgi-bin/mailma

[Openstack] keystoneclient 3.0.0 release (no more CLI and apiclient package)

2016-04-15 Thread Steve Martinelli
(this post has been cross listed to both -dev and -ops, sorry for the spam) This is a heads up that the keystone team will be releasing python-keystoneclient 3.0.0 soon ( https://review.openstack.org/#/c/306587/1 ), it will be the first client release of the Newton cycle. This is a major versio

[Openstack] Big chunks of dynamic instance metadata?

2016-04-15 Thread Andrew Bogott
Short version: I need a way to provide a dynamically-updating .yaml file to a nova instance. Is there an existing solution for this in nova that I'm overlooking? Long version: In my current setup, each Nova instance has a puppet node definition in ldap, which is loaded via the pupp