Re: [Openstack] [neutron] Port Forwarding

2013-12-20 Thread Abbass MAROUNI
Thanks Thiago, Did you try to add Port Forwarding iptables' rules directly to the OpenStack router ? Best Regards, Abbass 2013/12/19 Martinx - ジェームズ > Cool! You're welcome!=) > > My topology is "Per-Tenant Router with Private Networks", it does looks > like your first example but, a b

Re: [Openstack] [neutron] Port Forwarding

2013-12-19 Thread Martinx - ジェームズ
Cool! You're welcome!=) My topology is "Per-Tenant Router with Private Networks", it does looks like your first example but, a bit different, like this: --- Yours: Internet public-network OpenStack-Router Private-OpenStack-Network NAT-Instance

Re: [Openstack] [neutron] Port Forwarding

2013-12-19 Thread Abbass MAROUNI
Dear Thiago, Thanks a lot for your answer. One more thing, do your configuration look something like this : Internet public-network OpenStack-Router Private-OpenStack-Network NAT-Instance |

Re: [Openstack] [neutron] Port Forwarding

2013-12-19 Thread Martinx - ジェームズ
Abbass, The only way I figured out to do this, is by creating a "NAT Instance", with a Floating IP attached to it and, the "magic" happens here: Contents of my /etc/network/nat-rules.save --- # Generated by iptables-save v1.4.12 on Fri Oct 18 02:41:35 2013 *filter :INPUT ACCEPT [0:0] :FORWARD AC

Re: [Openstack] [neutron] Port Forwarding

2013-12-19 Thread Abbass MAROUNI
Could you please elaborate about your temporary solution ? I couldn't get a VM to act as a router that will do the port forwarding for other VMs in a private network. For some reason the VM cannot act as a router. Is it due to neutron networking ? Best regards, 2013/12/19 Martinx - ジェームズ > I'

Re: [Openstack] [neutron] Port Forwarding

2013-12-19 Thread Martinx - ジェームズ
I'm wondering about this too... I think that would be very nice to give the FWaaS, the ability to manage the NAT table of tenant router. This way, there is no need for a "NAT Instance" with a second Floating IP attached to it plus creepy NAT rules there (far away from the tenant router). Also, th

[Openstack] [neutron] Port Forwarding

2013-12-19 Thread Abbass MAROUNI
Hello, Why is it not possible to do port forwarding with neutron L3 ? Any alternative to manually adding to iptables of each virtual router ? Best regards, ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : ope