Ask Your Question

Network interface in controller node

asked 2014-06-12 10:49:25 -0600

matarazzoangelo gravatar image

updated 2014-06-13 01:49:59 -0600

In Icehouse installation a three node architecture is showed. The controller has only a network interface and is not reachable from a machine out the management network. Is a right procedure connecting a machine with installed command-line clients to controller through another network interface? I woul like to run the command-line client.

edit retag flag offensive close merge delete

4 answers

Sort by » oldest newest most voted

answered 2014-06-14 06:12:40 -0600


The command line clients can be installed on a linux/os x/windows box of your own if you have access to the Openstack APIs from the outside. There is no need to use the clients already installed on the Controller Node unless you can't access the Openstack installation from outside. I believe you mean this: Openstack Install On Ubuntu

I think that example does not explain all the details. For example, the Dashboard appears on the Controller Node. It would be pointless to install the Dashboard on a server (phisical or virtual) without outside access. This means you already have access to the Controller Node (where the clients are installed).

The controller node can have at least another interface (the one you are asking for) that will allow you to connect to it and execute commands (either directly or through a VPN/another server).

They only placed in that example the minimal needed interfaces. Adding another interface to the Controller Node can be done.

Giving this, you can install clients (python-novaclient, python-keystoneclient and so on) on your PC directly or connect to the Controller Node through another interface you will add.

Of course you can connect to the Controller Node through a VPN/another server that has access to the internal network without the need to add a new interface to the Controller Node, just keep in mind to forward ports you may need from outside like 80 for Dashboard if you use Horizon and probably others for API access.

There is no right or wrong way of doing this. Adding another interface will expose the Controller Node to the internet if you use routable IPs or to your internal network. If you trust your network or you believe you secured your Controller Node correctly (make sure you did anyway!), you can add the new interface directly there. Otherwise just add a new interface and connect that to either an outside VPN for example.

edit flag offensive delete link more

answered 2014-06-20 04:38:31 -0600

SGPJ gravatar image

Please follow this guide:

edit flag offensive delete link more

answered 2019-03-13 04:45:25 -0600

Hello. How are you? me my question is how can I have the internet connection on my openstack controller. By the way, I'm implementing openstack on three nodes with virtual marchers on virtualbox. - As configuration: * controller, netmask * network, netmask * compute, netmask * compute1, netmask - In the file /etc/resolv.conf, the nameserver is - The configuration of network cards on virtualbox are:   * controller, interface1 and interface2 ---> host-only and interface 2 in NAT * network, compute and compute1 have the following network interfaces: interface1 in host-only, interface2 in internal network 'data', interface3 in internal network 'vlan', interface4 in host-only.

The problem is that I do not access the internet for configuration, installation of packages ... What should I do to have the internet connection? thank you for helping me.

edit flag offensive delete link more

answered 2014-08-15 16:20:02 -0600

francois gravatar image

updated 2014-12-31 09:46:58 -0600

That is where I started, ( )

but when I got to "# pip install python-<insertproject>client" that was broken, but the yum install worked

so now I follow

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-06-12 10:49:25 -0600

Seen: 440 times

Last updated: Dec 31 '14