cannot access VM from outside on its floating IP [closed]
Hello,
I have an openstack libery setup with TripleO. 1 controller node and 2 compute nodes. All nodes are virtual machines on the same physical machine. I've created 2 instances with 1 private ip and 1 floating ip.
I can only access the instances from the controller node, under the router namespace only. I can't ping or ssh the instances from any other nodes. The instances can access themselves through both private and floating ips.
Private network : 192.168.100.0/24 External network: 10.8.75.0/24
From controller node:
ip netns exec qrouter-0f8a41e1-a8b9-4f2f-bb49-9168cec658eb ping 192.168.100.4
PING 192.168.100.4 (192.168.100.4) 56(84) bytes of data.
64 bytes from 192.168.100.4: icmp_seq=1 ttl=64 time=3.65 ms
ip netns exec qrouter-0f8a41e1-a8b9-4f2f-bb49-9168cec658eb ping 10.8.75.243
PING 10.8.75.243 (10.8.75.243) 56(84) bytes of data.
64 bytes from 10.8.75.243: icmp_seq=1 ttl=64 time=3.46 ms
neutron subnet-list|grep external
| 35d6eb89-51b3-4de8-bbda-cd22db0855e7 | external | 10.8.75.0/24 | {"start": "10.8.75.241", "end": "10.8.75.254"} |
neutron subnet-show 35d6eb89-51b3-4de8-bbda-cd22db0855e7
+-------------------+------------------------------------------------+
| Field | Value |
+-------------------+------------------------------------------------+
| allocation_pools | {"start": "10.8.75.241", "end": "10.8.75.254"} |
| cidr | 10.8.75.0/24 |
| dns_nameservers | 192.168.88.15 |
| enable_dhcp | True |
| gateway_ip | 10.8.75.1 |
| host_routes | |
From the physical machine (10.8.75.52)
ping 10.8.75.243
PING 10.8.75.243 (10.8.75.243) 56(84) bytes of data.
From 10.8.75.52 icmp_seq=1 Destination Host Unreachable
Any troubleshooting tips are appreciate. Thanks.
LE: On controller node
[root@overcloud-controller-0 nova]# ovs-vsctl show
83bba490-eb01-48f3-986c-f99281c8f5fc
Bridge br-int
fail_mode: secure
Port "qr-a37855c8-f5"
tag: 2
Interface "qr-a37855c8-f5"
type: internal
Port "tapa4537e80-19"
tag: 2
Interface "tapa4537e80-19"
type: internal
Port br-int
Interface br-int
type: internal
Port "tap2fcd8b13-9c"
tag: 1
Interface "tap2fcd8b13-9c"
type: internal
Port patch-tun
Interface patch-tun
type: patch
options: {peer=patch-int}
Port int-br-ex
Interface int-br-ex
type: patch
options: {peer=phy-br-ex}
Bridge br-ex
Port "eth0"
Interface "eth0"
Port "qg-19c90a53-a9"
Interface "qg-19c90a53-a9"
type: internal
Port phy-br-ex
Interface phy-br-ex
type: patch
options: {peer=int-br-ex}
Port br-ex
Interface br-ex
type: internal
Bridge br-tun
fail_mode: secure
Port "vxlan-c0000208"
Interface "vxlan-c0000208"
type: vxlan
options: {df_default="true", in_key=flow, local_ip="192.0.2.9", out_key=flow, remote_ip="192.0.2.8"}
Port patch-int
Interface patch-int
type: patch
options: {peer=patch-tun}
Port br-tun
Interface br-tun
type: internal
ovs_version: "2.5.0"
[root@overcloud-controller-0 nova]# ifconfig
br-ex: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.0.2.9 netmask 255.255.255.0 broadcast 192.0.2.255
inet6 fe80::293:7cff:fedb:87ea prefixlen 64 scopeid 0x20<link>
ether 00:93:7c:db:87:ea txqueuelen 0 (Ethernet)
RX packets 200452 bytes 726858237 (693.1 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 361851 bytes 517205962 (493.2 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet6 fe80 ...
Please
As update 1 to question asked.
Post as update 2
Updated the question with outputs.
Your br-ex belongs 192.0.2.0/24 subnet hence it should match virtual external network with gateway 192.0.2.1. So managing this way you would have overcloud VMs accessible only from undercloud VM and outbound connectivity . All this reminds me TripleO Quickstart Setup .
My question is :- have you done TripleO QuickStart Setup or no ?