VMSs traffic
I installed Openstack Newton. I wan to access (SSH) to instances
In addition of compute and controller nodes, I added a gateway node to forward traffic from internet to VMs. Nodes addresses
Controller 10.0.0.200 Compute 10.0.0.62 Gateway 10.0.0.201
I added iptables roules in the gateway eg. to access to dashboard I added this rule iptables -t nat -A PREROUTING -i ${EXT_NIC} -p tcp --dport 443 -j DNAT --to $10.0.0.200:443
and it's working.
My purpose now is to forward traffic to VMs My ext net is 10.0.0.0/24 floating IP range 10.0.0.240-10.0.0.242
Instance IP 10.0.0.241
When I ping the instance from the controller it works When I try to ping it from the gateway, it fails.
This made me confused It is obligatory that all VMs traffic pass through the controller ?
If no, how I can fix this ?
Thank you ^^
There are many ways to set up Neutron and to connect instances. It's quite different if instances are connected to a self-service network or a provider network. In the former case, it depends whether the router is distributed or not.
Provide more details about the configuration.
If you use ML2 with mechanism driver Openvswitch, find connectivity and traffic flow information at https://docs.openstack.org/ocata/netw.... In case of Linuxbridge, https://docs.openstack.org/ocata/netw.... Ocata and Newton should be the same.
I am using networking option 2. 10.0.0.0/24 connects the controller, the compute and the gateway nodes, this network is connected to internet. I extended this physical network to be used as ext-net for instances, my ext-net is 10.0.0.0/24. The floating IP range also in the same net 10.0.0.240-242.
What is network option 2?
Networking Option 2: Self-service networks