How does neutron manage its iptables config?

asked 2014-11-24 15:14:02 -0600

alvinstarr gravatar image

updated 2014-12-16 11:57:57 -0600

smaffulli gravatar image

I have packstack installed with neutron on a seperate system.

If the neutron system reboots I find that the networking is broken.

I have the feeling the some iptables data is getting lost on reboot.

So are there iptables rules that get setup by neutron dynamically? Are these rules saved to be reapplied on reboot?

edit retag flag offensive close merge delete


Check does br-ex have IP after reboot ? What OS are you running ?

dbaxps gravatar imagedbaxps ( 2014-11-25 02:23:31 -0600 )edit

br-ex does seem to come up. I am running Centos7

The problem has not come back after the latest reboot so it gves me an idea.

alvinstarr gravatar imagealvinstarr ( 2014-11-26 07:26:35 -0600 )edit

3 answers

Sort by ยป oldest newest most voted

answered 2014-11-25 06:00:34 -0600

bishoy gravatar image

neutron is responsible of iptables

[securitygroup] firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

and make sure nova have the firewall driver Noopfirewall which will make neutron responsible of iptables. But I don't belive this is your problem.

edit flag offensive delete link more

answered 2014-11-25 03:49:36 -0600

dbaxps gravatar image

If you installed Juno via packstack --allinone on a single box, the most common issue - after reboot br-ex doesn't come up with IP address. Add to /etc/rc.d/rc.local :

ifdown br-ex ;
ifup br-ex ;
service network restart ;
edit flag offensive delete link more


The interface seems to come up correctly. I am not doing an allinone install. I am actually using 4 virtual servers, 1 control, 2 compute and 1 neutron.

alvinstarr gravatar imagealvinstarr ( 2014-11-26 07:32:13 -0600 )edit

answered 2014-12-16 10:48:50 -0600

alvinstarr gravatar image

The real answer is that this computer hates me and is out to make me look like an idiot.

I have not been able to recreate the problem. I did find that boot order is important in multi node installs and that may have been my problem but I can't be sure at this point.

Thanks to those who tried to help.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-11-24 15:14:02 -0600

Seen: 1,000 times

Last updated: Dec 16 '14