Environment: Centos6.5+RDO+havana
I create a instace successfully with (public ip:192.168.226.101,private ip:10.10.10.2). I can ping private ip but I can't ping public ip. I found following information from my dashboard. status of 192.xxx.xxx.xxx are DOWN, status of 10.xx.xx.xx are Active. I'm a newer for openstack.could some help to tell me the solution? or you can tell me how to debug this issue?
(02b8a649) 192.168.226.100 network:router_gateway DOWN UP Edit Port
(566a3ad7) 192.168.226.102 network:floatingip DOWN UP Edit Port
(660d4ae8) 192.168.226.101 network:floatingip DOWN UP Edit Port
private net interface
(29c7c3bb) 10.10.10.2 compute:nova ACTIVE UP Edit Port
(3055a9a8) 10.10.10.1 network:router_interface ACTIVE UP Edit Port
(a6a7d763) 10.10.10.254 network:router_interface ACTIVE UP Edit Port
(f8781dd1) 10.10.10.3 network:dhcp ACTIVE UP Edit Port
[root@alpha ~(keystone_admin)]# openstack-status
== Nova services ==
openstack-nova-api: active
openstack-nova-cert: active
openstack-nova-compute: active
openstack-nova-network: dead (disabled on boot)
openstack-nova-scheduler: active
openstack-nova-conductor: active
== Glance services ==
openstack-glance-api: active
openstack-glance-registry: active
== Keystone service ==
openstack-keystone: active
== Horizon service ==
openstack-dashboard: active
== neutron services ==
neutron-server: active
neutron-dhcp-agent: active
neutron-l3-agent: active
neutron-metadata-agent: active
neutron-lbaas-agent: inactive (disabled on boot)
neutron-openvswitch-agent: active
== Swift services ==
openstack-swift-proxy: active
openstack-swift-account: active
openstack-swift-container: active
openstack-swift-object: active
== Cinder services ==
openstack-cinder-api: active
openstack-cinder-scheduler: active
openstack-cinder-volume: active
== Ceilometer services ==
openstack-ceilometer-api: active
openstack-ceilometer-central: active
openstack-ceilometer-compute: active
openstack-ceilometer-collector: active
openstack-ceilometer-alarm-notifier: active
openstack-ceilometer-alarm-evaluator: active
== Support services ==
mysqld: active
libvirtd: active
openvswitch: active
messagebus: active
tgtd: active
qpidd: active
memcached: active
== Keystone users ==
+----------------------------------+------------+---------+--------------------------+
| id | name | enabled | email |
+----------------------------------+------------+---------+--------------------------+
| 203938cc33b440f0b11927fd025c53f4 | admin | True | test@test.com |
| c7d5dbd22f5549689cd118484f7afacb | alphaz | True | alpha.zhang@centling.com |
| c1366e2f3cc94e558861fa6b08d84914 | ceilometer | True | ceilometer@localhost |
| 442cb4e41ec344cf8d9e418f40450f18 | cinder | True | cinder@localhost |
| 67600fa19a62438d8f67f0378595c71c | glance | True | glance@localhost |
| 6aa5560877864193a080557dca52b0d8 | neutron | True | neutron@localhost |
| f4e4f3783b0f484fb8f14aa95064f249 | nova | True | nova@localhost |
| 2f819f003fa44ba684cd59de3efd3b70 | swift | True | swift@localhost |
+----------------------------------+------------+---------+--------------------------+
== Glance images ==
+--------------------------------------+------+-------------+------------------+-----------+--------+
| ID | Name | Disk Format | Container Format | Size | Status |
+--------------------------------------+------+-------------+------------------+-----------+--------+
| 1333c7da-c410-4395-b0b9-2e10ef05d2c8 | net | qcow2 | bare | 260243968 | active |
+--------------------------------------+------+-------------+------------------+-----------+--------+
== Nova managed services ==
+------------------+--------------------+----------+---------+-------+----------------------------+-----------------+
| Binary | Host | Zone | Status | State | Updated_at | Disabled Reason |
+------------------+--------------------+----------+---------+-------+----------------------------+-----------------+
| nova-consoleauth | alpha.centling.com | internal | enabled | up | 2014-04-26T02:24:23.000000 | - |
| nova-conductor | alpha.centling.com | internal | enabled | up | 2014-04-26T02:24:23.000000 | - |
| nova-scheduler | alpha.centling.com | internal | enabled | up | 2014-04-26T02:24:23.000000 | - |
| nova-compute | alpha.centling.com | nova | enabled | up | 2014-04-26T02:24:23.000000 | - |
| nova-cert | alpha.centling.com | internal | enabled | up | 2014-04-26T02:24:23.000000 | - |
+------------------+--------------------+----------+---------+-------+----------------------------+-----------------+
== Nova networks ==
+--------------------------------------+-------+------+
| ID | Label | Cidr |
+--------------------------------------+-------+------+
| 3e92a5bf-6587-46d6-9e68-46e67c01becb | net2 | - |
| 9a3566ce-bba7-4f9c-9cf6-c0a716a5e456 | net1 | - |
+--------------------------------------+-------+------+
== Nova instance flavors ==
+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+
| ID | Name | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public |
+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+
| 1 | m1.tiny | 512 | 1 | 0 | | 1 | 1.0 | True |
| 2 | m1.small | 2048 | 20 | 0 | | 1 | 1.0 | True |
| 3 | m1.medium | 4096 | 40 | 0 | | 2 | 1.0 | True |
| 4 | m1.large | 8192 | 80 | 0 | | 4 | 1.0 | True |
| 5 | m1.xlarge | 16384 | 160 | 0 | | 8 | 1.0 | True |
+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+
== Nova instances ==
+--------------------------------------+------+--------+------------+-------------+----------------------------------+
| ID | Name | Status | Task State | Power State | Networks |
+--------------------------------------+------+--------+------------+-------------+----------------------------------+
| da38397a-4fb0-4331-a289-99384b2a5c31 | 1234 | ACTIVE | - | Running | net1=192.168.226.106 |
| 52182671-30f3-48b0-b7c6-2b9eb385ced2 | net | ACTIVE | - | Running | net2=10.10.10.2, 192.168.226.101 |
+--------------------------------------+------+--------+------------+-------------+----------------------------------+
br-ex Link encap:Ethernet ...
Please provide :-
$ neutron router-list
$ ip netns | grep router_id ( for every router)
$ ip netns exec qrouter-router_id iptables -S -t nat
$ ip netns exec qrouter-router_id ip a
$ ip netns exec qrouter-router_id ifconfig
$ ovs-vsctl show
and upload to some text file on Internet or make archive.
$ ip netns exec qrouter-router_id ifconfig will provide for instance
qg-9c090153-08
qr-e031db6b-d0
In ovs-vsctl tree should be corresponding interface entries for 9c090153-08 under br-ex
and for e031db6b-d0 under br-int. My intend is to run tcpdump -i inteface-name -vv on each one of mentioned interfaces when you try to ping VM floating IP from Controller and see could we capture anything at internal and external interfaces
When I install my lab. I name the eth0 to ech0. I have to use it in br-ex. following is the information you wanted. seems flooating ip(192.xxxx) is not activated.
cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=ech0
HWADDR=00:0C:29:03:B6:10
ONBOOT=yes
TYPE=OVSPort
DEVICETYPE=ovs
OVS_BRIDGE=br-ex
DNS1=202.102.134.68
DNS2=202.102.128.68
GATEWAY=192.168.1.1
ip netns exec qrouter-5e17da58-dff0-4f60-8632-a3f861e3b24f ip a
96: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
98: qr-3055a9a8-40: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether fa:16:3e:c3:82:81 brd ff:ff:ff:ff:ff:ff
inet 10.10 ...
Bridge br-ex
Port br-ex
Interface br-ex
type: internal
Port "ech0"
Interface "ech0"
Port "qg-df4f9361-a1"
Interface "qg-df4f9361-a1"
type: internal
Hence Interface "eth0" is not attached to OVS port "eth0" of OVS bridge br-ex.
Such configuration of ovs-vsctl show is not supposed to work
Say "xxxxxxxxxx" your router-id then command
$ ip netns exec qrouter-xxxxxxxxx tcpdump -ln -i qg-df4f9361-a1
won't capture any ICMP request from yours AIO Havana Server
Now I need
$ ip netns | grep router_id , coming from neutron router-list and output for :-
$ ip netns exec qrouter-router_id ifconfig ( for router namespace , where your VM is running )
What means interface "ech0" should "eth0" ?
Can you explain ?
Without output I've asked , would try :-
tcpdump -i qr-3055a9a8-40 -vv
tcpdump -i qr-a6a7d763-50 -vv
tcpdump -i qg-df4f9361-a1 -vv
when pinging VM from Controller.
Say 4cdb0354-7732-4d8f-a3d0-9fbc4b93a62d is your router-id
Then run :-
ip netns exec qrouter-4cdb0354-7732-4d8f-a3d0-9fbc4b93a62d tcpdump -ln -i qg-df4f9361-a1
ip netns exec qrouter-4cdb0354-7732-4d8f-a3d0-9fbc4b93a62d tcpdump -ln -i qr-3055a9a8-40
ip netns exec qrouter-4cdb0354-7732-4d8f-a3d0-9fbc4b93a62d tcpdump -ln -i qr-a6a7d763-50
The only one qr-xxxxx will come up running
ip netns exec qrouter-4cdb0354-7732-4d8f-a3d0-9fbc4b93a62d ip a