Ask Your Question

Creating a network without NAT in essex

asked 2013-04-29 13:04:25 -0600

jzwiep gravatar image

updated 2013-04-29 13:10:40 -0600

We're looking for a way to configure OpenStack so that it assigns ip addresses from a given subnet of our internal network without any NAT rules in place.

Currently we use a similar setup as outlined here:

It essentially disables nova-network, and allows an external DHCP server to assign ip addresses to the instances. This works, but it breaks major functionality within OpenStack (like parts of the api, and metadata) and it makes using the system a pain.

Is a NAT free network possible under essex?

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted

answered 2013-05-10 21:51:14 -0600

fifieldt gravatar image has the following information from a nova developer:

If you are attempting to stop nova-network from snatting for instances you can very easily do it with conf:


(set routingsourceip to none)

This will stop the snat for instances. Please note that you will need to provide a gateway through dnsmasq for your instances to reach the internet.

However, I am not sure if it works on Essex, or if it will entirely meet your needs - please let us know :)

edit flag offensive delete link more


Hmm, yeah. I'm not sure this fixes our problem. Thanks though.

jzwiep gravatar imagejzwiep ( 2013-05-17 19:59:55 -0600 )edit

answered 2013-07-24 21:01:53 -0600

jzwiep gravatar image

These nova.conf network options, specifically the dmz_cidr solved the issue:

# network specific settings

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools


Asked: 2013-04-29 13:04:25 -0600

Seen: 222 times

Last updated: Jul 24 '13