Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-14 Thread Mike Spreitzer
Jacob Godin wrote on 04/14/2015 05:12:48 PM: > Absolutely. We're trying to reduce our public IPv4 usage, so having > one per tenant network (not even including floating IPs) is a drain. I am having exactly the same issue. I am currently solving it with a different hack that nobody likes, I wi

Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-15 Thread Mike Spreitzer
> From: Daniel Comnea > To: Jacob Godin > Cc: Mike Spreitzer/Watson/IBM@IBMUS, OpenStack Operators operat...@lists.openstack.org> > Date: 04/15/2015 02:34 AM > Subject: Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways > Sent by: daniel.com...@gmail.com

Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-17 Thread Mike Spreitzer
> From: Jacob Godin > To: Mike Spreitzer/Watson/IBM@IBMUS > Cc: Daniel Comnea , OpenStack Operators > > Date: 04/15/2015 08:37 AM > Subject: Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways > > Ah, gotcha. So you're not using overlapping subnets

Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-17 Thread Mike Spreitzer
> From: Mike Spreitzer/Watson/IBM@IBMUS > > > From: Jacob Godin > > > > Ah, gotcha. So you're not using overlapping subnets then. > > > > Unfortunately that hack wouldn't work in our environment, but > > definitely something that others

[Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
Is there a way to create multiple external networks from Neutron's point of view, where both of those networks are accessed through the same host NIC? Obviously those networks would be using different subnets. I need this sort of thing because the two subnets are treated differently by the st

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
n by patch links > > (http://blog.scottlowe.org/2012/11/27/connecting-ovs-bridges-with- > patch-ports/) > > > > Instruct neutron like there is two external networks: one on br- > ex1, second on br-ex2. > > > > But be alert that this not very stable config

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
Uwe Sauter wrote on 04/25/2015 04:42:06 PM: > Am 25.04.2015 um 22:28 schrieb Mike Spreitzer: > >> From: Uwe Sauter > >> > >> Or instead of using Linux bridges you could use a manually created > >> OpenVSwitch bridge. This allows you to add "intern

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
Kevin Benton wrote on 04/25/2015 08:38:25 PM: > Bridge mappings is an agent configuration value, it's not in the > neutron server config. > Run ps -ef and look for the neutron openvswitch agent process to see > which configuration files it's referencing. The bridge mappings will > be in one of

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
gt; together to br-join by patch links > > (http://blog.scottlowe.org/2012/11/27/connecting-ovs-bridges-with- > patch-ports/) > > > > Instruct neutron like there is two external networks: one on br- > ex1, second on br-ex2. > > > > But be alert that this not very stabl

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
Uwe Sauter wrote on 04/27/2015 10:54:15 AM: > Am 27.04.2015 um 16:36 schrieb Mike Spreitzer: > > Uwe Sauter wrote on 04/25/2015 04:17:35 PM: > > > >> Or instead of using Linux bridges you could use a manually created > >> OpenVSwitch bridge. This allows you

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
"gustavo panizzo (gfa)" wrote on 04/27/2015 11:23:13 AM: > On 2015-04-27 22:59, Mike Spreitzer wrote: > > Uwe Sauter wrote on 04/27/2015 10:54:15 AM: > >> > >> What I suggested later on is that you probably don't need any second > >> level

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
> "gustavo panizzo (gfa)" wrote on 04/27/2015 11:23:13 AM: > > > On 2015-04-27 22:59, Mike Spreitzer wrote: > > > Uwe Sauter wrote on 04/27/2015 10:54:15 AM: > > >> > > >> What I suggested later on is that you probably don't need

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
Uwe Sauter wrote on 04/27/2015 10:54:15 AM: > Am 27.04.2015 um 16:36 schrieb Mike Spreitzer: > > Uwe Sauter wrote on 04/25/2015 04:17:35 PM: > > > >> Or instead of using Linux bridges you could use a manually created > >> OpenVSwitch bridge. This allows you

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
Uwe Sauter wrote on 04/27/2015 01:22:35 PM: > >> if I understood Georges answer correctly he suggested one bridge > >> (br-join, either OVS or linux bridge) to connect other bridges > >> via patch links, one for each external network you'd like to create. > >> These second level bridges are then

[Openstack-operators] Dual stacking in Neutron and Nova

2015-05-07 Thread Mike Spreitzer
I am told that dual stacking is supported for compute instances. What does that look like? Can I associate both an IPv4 and an IPv6 address with a Neutron Port? Thanks, Mike ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.or

Re: [Openstack-operators] ssh inside instance

2015-08-04 Thread Mike Spreitzer
I am a little lost here, I have seen conflicting claims about where the handshake ends. Are *both* sides receiving the SSH2_MSG_KEXINIT ? Can you take packet traces anywhere in between your two endpoints? I have seen networks include security middleboxes that are a little incompetent --- when

[Openstack-operators] Neutron IPv6 manual for single-stacking in Juno

2015-08-04 Thread Mike Spreitzer
I see https://wiki.openstack.org/wiki/NEUTRON-IPV6-MANUAL explicitly disclaims interest in single-stacking and in Juno. Where would I go to learn how to use IPv6 in the single-stack Juno case? Thanks, Mike ___ OpenStack-operators mailing list OpenSta

Re: [Openstack-operators] Neutron IPv6 manual for single-stackinginJuno

2015-08-05 Thread Mike Spreitzer
"Sean M. Collins" wrote on 08/04/2015 10:38:26 PM: > We have adapted the contents of that wiki page into the networking > guide, however I have not seen any work in the Juno release for IPv6 > only networking. > > Brian Haley and I had a talk submission for Tokyo about work that > has been do

[Openstack-operators] [neutron] Routing to tenant networks

2016-01-12 Thread Mike Spreitzer
Is there any condition under which a Neutron router will route packets from a provider network to a tenant network with destination address unmolested? E.g., non-RFC1918 addresses on the tenant network? Does Neutron know anything about RFC6598? Thanks, Mike _

Re: [Openstack-operators] [neutron] Routing to tenant networks

2016-01-14 Thread Mike Spreitzer
> From: Carl Baldwin > To: Dan Sneddon > Cc: Matt Kassawara , Mike Spreitzer/Watson/ > IBM@IBMUS, "openstack-operators@lists.openstack.org" operat...@lists.openstack.org> > Date: 01/14/2016 10:59 AM > Subject: Re: [Openstack-operators] [neutron] Routing to

Re: [Openstack-operators] [openstack-operators]disable snat for router gateway

2016-01-19 Thread Mike Spreitzer
Aaron Segura wrote on 01/16/2016 12:19:53 PM: > You shouldn't have to do anything other than disable SNAT and set a > route for your tenant network upstream. Indeed, I have exercised exactly this. Regards, Mike ___ OpenStack-operators mailing list

[Openstack-operators] [neutron] Attach routing rules to networks?

2016-04-02 Thread Mike Spreitzer
Is there a way to attach a routing rule to a network or subnet, with the consequence that each device attached to that net or subnet gets that routing rule? Thanks, Mike ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org ht

Re: [Openstack-operators] [neutron] Attach routing rules to networks?

2016-04-04 Thread Mike Spreitzer
I assume `--host-route` works with a destination that is a single host. Is there something I can do to establish a routing rule for a destination that is a CIDR block? Thanks, Mike From: Joseph Bajin To: James Denton Cc: Mike Spreitzer/Watson/IBM@IBMUS, openstack-operators Date

[Openstack-operators] [neutron] How to request a floating IP on a given subnet?

2016-06-10 Thread Mike Spreitzer
If my external network has multiple subnets, I think I have heard there is a way to request a floating IP to be allocated on a specific one of those subnets. How would I do that? CLI, API, and/or Python SDK. Liberty. Thanks, Mike ___ OpenStack-opera

Re: [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-06-29 Thread Mike Spreitzer
Gustavo Randich wrote on 06/29/2016 03:17:54 PM: > Hi operators... > > Transitioning from nova-network to Neutron (Mitaka), one of the key > issues we are facing is how to reach VMs in VXLAN tenant networks > without using precious floating IPs. > > Things that are outside Neutron in our cas

Re: [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-06-30 Thread Mike Spreitzer
is to not forward traffic to the RFC 1918 addresses. I do not recall how the Neutron routers handle packets addressed to those addresses from sources on the "outside". Regards, Mike From: Gustavo Randich To: Mike Spreitzer/Watson/IBM@IBMUS Cc: "openst...@lists.ope

Re: [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-07-15 Thread Mike Spreitzer
. BTW, when using packet tracing I find it troublesome to do the filtering and/or the pretty-printing online; I simply capture all the packets at a given interface and them examine them later with Wireshark. Regards, Mike From: Gustavo Randich To: Mike Spreitzer/Watson/IBM@IBMUS Cc