Revision history [back]

click to hide/show revision 1
initial version

Unable to ping tenant router gateway from external network

Hi all,

I am trying to setup openstack juno, by following the tutorial (http://docs.openstack.org/juno/install-guide/install/apt/content/launch-instance-neutron.html). I have successfully started all of the services, and launched instances. However, verifying connectivity from the physical network to tenant router or instance fails. Here are the details of the setup:

Controller/Network node:
Ubuntu OS
eth0 - 192.168.0.250, gw 192.168.1.1
eth0:1 - 10.0.0.11 (controller)
eth0:2 - 10.0.0.21 (network)
eth0:3 - 10.0.1.21 (tunneling)

Compute node:

Ubuntu OS
eth1 - 192.168.1.22
eth1:1 - 10.0.0.31
eth1:2 - 10.0.1.31

Controller:

** neutron net-list

+--------------------------------------+----------+------------------------------------------------------+
| id                                   | name     | subnets                                              |
+--------------------------------------+----------+------------------------------------------------------+
| 075c0048-2e91-4ec6-88f4-6d9f2c20da8e | n1       | 077aac7d-8b5f-4140-a784-f53895f602a3 192.168.11.0/24 |
| 10e602b3-74dc-4eb1-b0f1-ecacb3cba9e2 | demo-net | cb830a11-a94c-4dd4-af2c-79ff4d5138c3 192.168.10.0/24 |
| b4cb9bc9-44f0-4eab-896a-7d75e955cb8d | ext-net  | dd50171f-2573-4ec7-b385-f675ff65529d 203.0.113.0/24  |
+--------------------------------------------------------------------------------------------------------+

ifconfig:

br-ex     Link encap:Ethernet  HWaddr b6:8c:5d:f8:60:4f  
          inet6 addr: fe80::dc07:f6ff:fe52:2226/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:83 errors:0 dropped:0 overruns:0 frame:0
          TX packets:20 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:5546 (5.5 KB)  TX bytes:1768 (1.7 KB)

br-int    Link encap:Ethernet  HWaddr 0a:32:31:c7:c7:4d  
          inet6 addr: fe80::6c0c:30ff:fed8:b700/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:3100 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:525602 (525.6 KB)  TX bytes:648 (648.0 B)

br-tun    Link encap:Ethernet  HWaddr 5a:89:3a:1d:60:40  
          inet6 addr: fe80::fc04:92ff:fee0:6028/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:648 (648.0 B)

eth0      Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:192.168.1.250  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::224:81ff:fe8e:705d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:441488 errors:0 dropped:0 overruns:0 frame:0
          TX packets:534903 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:299264228 (299.2 MB)  TX bytes:568425020 (568.4 MB)
          Interrupt:17 

eth0:1    Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:10.0.0.11  Bcast:10.0.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 

eth0:2    Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:10.0.0.21  Bcast:10.0.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 

eth0:3    Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:10.0.1.21  Bcast:10.0.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:353115 errors:0 dropped:0 overruns:0 frame:0
          TX packets:353115 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:352086170 (352.0 MB)  TX bytes:352086170 (352.0 MB)

virbr0    Link encap:Ethernet  HWaddr 4e:d2:7d:09:70:65  
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

route -n route -n

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
10.0.0.0        0.0.0.0         255.255.255.0   U     0      0        0 eth0
10.0.1.0        0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0

ovs-vsctl show

ovs-vsctl show

810b9609-f229-401c-9bbd-97cb005e865e
    Bridge br-tun
        Port "gre-0a00000b"
            Interface "gre-0a00000b"
                type: gre
                options: {df_default="true", in_key=flow, local_ip="10.0.1.21", out_key=flow, remote_ip="10.0.0.11"}
        Port patch-int
            Interface patch-int
                type: patch
                options: {peer=patch-tun}
        Port "gre-0a00011f"
            Interface "gre-0a00011f"
                type: gre
                options: {df_default="true", in_key=flow, local_ip="10.0.1.21", out_key=flow, remote_ip="10.0.1.31"}
        Port "gre-0a00001f"
            Interface "gre-0a00001f"
                type: gre
                options: {df_default="true", in_key=flow, local_ip="10.0.1.21", out_key=flow, remote_ip="10.0.0.31"}
        Port br-tun
            Interface br-tun
                type: internal
    Bridge br-int
        fail_mode: secure
        Port "tap55c12c80-74"
            tag: 1
            Interface "tap55c12c80-74"
                type: internal
        Port br-int
            Interface br-int
                type: internal
        Port patch-tun
            Interface patch-tun
                type: patch
                options: {peer=patch-int}
        Port "qr-c7ff6760-39"
            tag: 2
            Interface "qr-c7ff6760-39"
                type: internal
        Port "tap0bb81a71-63"
            tag: 2
            Interface "tap0bb81a71-63"
                type: internal
        Port "qr-9a70a370-fb"
            tag: 1
            Interface "qr-9a70a370-fb"
                type: internal
        Port int-br-ex
            Interface int-br-ex
                type: patch
                options: {peer=phy-br-ex}
    Bridge br-ex
        Port phy-br-ex
            Interface phy-br-ex
                type: patch
                options: {peer=int-br-ex}
        Port br-ex
            Interface br-ex
                type: internal
        Port "qg-a884a92b-7c"
            Interface "qg-a884a92b-7c"
                type: internal
        Port "qg-c14903b5-d4"
            Interface "qg-c14903b5-d4"
                type: internal
        Port "eth0:1"
            Interface "eth0:1"
    ovs_version: "2.0.2"

I've setup two networks, one via console, one via horizon, they behave similarly:

ip netns

qdhcp-075c0048-2e91-4ec6-88f4-6d9f2c20da8e
qrouter-6dfc1df2-e0d3-4430-a51a-71a449ec3e26
qdhcp-10e602b3-74dc-4eb1-b0f1-ecacb3cba9e2
qrouter-6650a964-85c2-4935-b55d-624e101d3b72

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 ifconfig

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:93 errors:0 dropped:0 overruns:0 frame:0
          TX packets:93 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:8288 (8.2 KB)  TX bytes:8288 (8.2 KB)

qg-a884a92b-7c Link encap:Ethernet  HWaddr fa:16:3e:8c:b5:93  
          inet addr:203.0.113.101  Bcast:203.0.113.255  Mask:255.255.255.0
          inet6 addr: fe80::f816:3eff:fe8c:b593/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:23 errors:0 dropped:0 overruns:0 frame:0
          TX packets:36 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1994 (1.9 KB)  TX bytes:1924 (1.9 KB)

qr-9a70a370-fb Link encap:Ethernet  HWaddr fa:16:3e:1e:25:32  
          inet addr:192.168.10.240  Bcast:192.168.10.255  Mask:255.255.255.0
          inet6 addr: fe80::f816:3eff:fe1e:2532/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:991 errors:0 dropped:0 overruns:0 frame:0
          TX packets:104 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:168394 (168.3 KB)  TX bytes:10191 (10.1 KB)

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 route -n

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         203.0.113.1     0.0.0.0         UG    0      0        0 qg-a884a92b-7c
192.168.10.0    0.0.0.0         255.255.255.0   U     0      0        0 qr-9a70a370-fb
203.0.113.0     0.0.0.0         255.255.255.0   U     0      0        0 qg-a884a92b-7c

pinging router internal IP from inside ns works:

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 ping -c 1 192.168.10.240

PING 192.168.10.240 (192.168.10.240) 56(84) bytes of data.
64 bytes from 192.168.10.240: icmp_seq=1 ttl=64 time=0.039 ms

pinging router external IP from inside ns works:

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 ping -c 1 203.0.113.101

PING 203.0.113.101 (203.0.113.101) 56(84) bytes of data.
64 bytes from 203.0.113.101: icmp_seq=1 ttl=64 time=0.038 ms

However, I cannot ping router from controller node. I tried adding an eth0:4 interface with 203.0.113.0/24 range, and failed. I did complicate things with eth0:x, but I wanted to make sure to follow instructions in detail.

Launched instances can see each other with internal IPs, and can ping the router, both internal and external. I have allowed all protocols in the default rules.

It seems that everything works except for routing between the controller host (and physical network) and the internal network, but I cannot seem to find if I went wrong anywhere. I've read other questions on this, but didn't manage to fix anything.

Any help resolving this would be highly appreciated. If needed, any additional configuration snippets I'll append (I skipped compute node details for brevity).

Thank you!

Unable to ping tenant router gateway from external network

Hi all,

I am trying to setup openstack juno, by following the tutorial (http://docs.openstack.org/juno/install-guide/install/apt/content/launch-instance-neutron.html). I have successfully started all of the services, and launched instances. However, verifying connectivity from the physical network to tenant router or instance fails. Here are the details of the setup:

Controller/Network node:
Ubuntu OS
eth0 - 192.168.0.250, gw 192.168.1.1
eth0:1 - 10.0.0.11 (controller)
eth0:2 - 10.0.0.21 (network)
eth0:3 - 10.0.1.21 (tunneling)

Compute node:

Ubuntu OS
eth1 - 192.168.1.22
eth1:1 - 10.0.0.31
eth1:2 - 10.0.1.31

Controller:

** neutron net-list

+--------------------------------------+----------+------------------------------------------------------+
| id                                   | name     | subnets                                              |
+--------------------------------------+----------+------------------------------------------------------+
| 075c0048-2e91-4ec6-88f4-6d9f2c20da8e | n1       | 077aac7d-8b5f-4140-a784-f53895f602a3 192.168.11.0/24 |
| 10e602b3-74dc-4eb1-b0f1-ecacb3cba9e2 | demo-net | cb830a11-a94c-4dd4-af2c-79ff4d5138c3 192.168.10.0/24 |
| b4cb9bc9-44f0-4eab-896a-7d75e955cb8d | ext-net  | dd50171f-2573-4ec7-b385-f675ff65529d 203.0.113.0/24  |
+--------------------------------------------------------------------------------------------------------+

ifconfig:

br-ex     Link encap:Ethernet  HWaddr b6:8c:5d:f8:60:4f  
          inet6 addr: fe80::dc07:f6ff:fe52:2226/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:83 errors:0 dropped:0 overruns:0 frame:0
          TX packets:20 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:5546 (5.5 KB)  TX bytes:1768 (1.7 KB)

br-int    Link encap:Ethernet  HWaddr 0a:32:31:c7:c7:4d  
          inet6 addr: fe80::6c0c:30ff:fed8:b700/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:3100 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:525602 (525.6 KB)  TX bytes:648 (648.0 B)

br-tun    Link encap:Ethernet  HWaddr 5a:89:3a:1d:60:40  
          inet6 addr: fe80::fc04:92ff:fee0:6028/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:648 (648.0 B)

eth0      Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:192.168.1.250  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::224:81ff:fe8e:705d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:441488 errors:0 dropped:0 overruns:0 frame:0
          TX packets:534903 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:299264228 (299.2 MB)  TX bytes:568425020 (568.4 MB)
          Interrupt:17 

eth0:1    Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:10.0.0.11  Bcast:10.0.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 

eth0:2    Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:10.0.0.21  Bcast:10.0.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 

eth0:3    Link encap:Ethernet  HWaddr 00:24:81:8e:70:5d  
          inet addr:10.0.1.21  Bcast:10.0.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:353115 errors:0 dropped:0 overruns:0 frame:0
          TX packets:353115 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:352086170 (352.0 MB)  TX bytes:352086170 (352.0 MB)

virbr0    Link encap:Ethernet  HWaddr 4e:d2:7d:09:70:65  
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

route -n route -n

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
10.0.0.0        0.0.0.0         255.255.255.0   U     0      0        0 eth0
10.0.1.0        0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0

ovs-vsctl show

ovs-vsctl show

810b9609-f229-401c-9bbd-97cb005e865e
    Bridge br-tun
        Port "gre-0a00000b"
            Interface "gre-0a00000b"
                type: gre
                options: {df_default="true", in_key=flow, local_ip="10.0.1.21", out_key=flow, remote_ip="10.0.0.11"}
        Port patch-int
            Interface patch-int
                type: patch
                options: {peer=patch-tun}
        Port "gre-0a00011f"
            Interface "gre-0a00011f"
                type: gre
                options: {df_default="true", in_key=flow, local_ip="10.0.1.21", out_key=flow, remote_ip="10.0.1.31"}
        Port "gre-0a00001f"
            Interface "gre-0a00001f"
                type: gre
                options: {df_default="true", in_key=flow, local_ip="10.0.1.21", out_key=flow, remote_ip="10.0.0.31"}
        Port br-tun
            Interface br-tun
                type: internal
    Bridge br-int
        fail_mode: secure
        Port "tap55c12c80-74"
            tag: 1
            Interface "tap55c12c80-74"
                type: internal
        Port br-int
            Interface br-int
                type: internal
        Port patch-tun
            Interface patch-tun
                type: patch
                options: {peer=patch-int}
        Port "qr-c7ff6760-39"
            tag: 2
            Interface "qr-c7ff6760-39"
                type: internal
        Port "tap0bb81a71-63"
            tag: 2
            Interface "tap0bb81a71-63"
                type: internal
        Port "qr-9a70a370-fb"
            tag: 1
            Interface "qr-9a70a370-fb"
                type: internal
        Port int-br-ex
            Interface int-br-ex
                type: patch
                options: {peer=phy-br-ex}
    Bridge br-ex
        Port phy-br-ex
            Interface phy-br-ex
                type: patch
                options: {peer=int-br-ex}
        Port br-ex
            Interface br-ex
                type: internal
        Port "qg-a884a92b-7c"
            Interface "qg-a884a92b-7c"
                type: internal
        Port "qg-c14903b5-d4"
            Interface "qg-c14903b5-d4"
                type: internal
        Port "eth0:1"
            Interface "eth0:1"
    ovs_version: "2.0.2"

I've setup two networks, one via console, one via horizon, they behave similarly:

ip netns

qdhcp-075c0048-2e91-4ec6-88f4-6d9f2c20da8e
qrouter-6dfc1df2-e0d3-4430-a51a-71a449ec3e26
qdhcp-10e602b3-74dc-4eb1-b0f1-ecacb3cba9e2
qrouter-6650a964-85c2-4935-b55d-624e101d3b72

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 ifconfig

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:93 errors:0 dropped:0 overruns:0 frame:0
          TX packets:93 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:8288 (8.2 KB)  TX bytes:8288 (8.2 KB)

qg-a884a92b-7c Link encap:Ethernet  HWaddr fa:16:3e:8c:b5:93  
          inet addr:203.0.113.101  Bcast:203.0.113.255  Mask:255.255.255.0
          inet6 addr: fe80::f816:3eff:fe8c:b593/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:23 errors:0 dropped:0 overruns:0 frame:0
          TX packets:36 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1994 (1.9 KB)  TX bytes:1924 (1.9 KB)

qr-9a70a370-fb Link encap:Ethernet  HWaddr fa:16:3e:1e:25:32  
          inet addr:192.168.10.240  Bcast:192.168.10.255  Mask:255.255.255.0
          inet6 addr: fe80::f816:3eff:fe1e:2532/64 Scope:Link
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:991 errors:0 dropped:0 overruns:0 frame:0
          TX packets:104 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:168394 (168.3 KB)  TX bytes:10191 (10.1 KB)

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 route -n

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         203.0.113.1     0.0.0.0         UG    0      0        0 qg-a884a92b-7c
192.168.10.0    0.0.0.0         255.255.255.0   U     0      0        0 qr-9a70a370-fb
203.0.113.0     0.0.0.0         255.255.255.0   U     0      0        0 qg-a884a92b-7c

pinging router internal IP from inside ns works:

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 ping -c 1 192.168.10.240

PING 192.168.10.240 (192.168.10.240) 56(84) bytes of data.
64 bytes from 192.168.10.240: icmp_seq=1 ttl=64 time=0.039 ms

pinging router external IP from inside ns works:

ip netns exec qrouter-6650a964-85c2-4935-b55d-624e101d3b72 ping -c 1 203.0.113.101

PING 203.0.113.101 (203.0.113.101) 56(84) bytes of data.
64 bytes from 203.0.113.101: icmp_seq=1 ttl=64 time=0.038 ms

However, I cannot ping router from controller node. I tried adding an eth0:4 interface with 203.0.113.0/24 range, and failed. I did complicate things with eth0:x, but I wanted to make sure to follow instructions in detail.

Launched instances can see each other with internal IPs, and can ping the router, both internal and external. I have allowed all protocols in the default rules.

It seems that everything works except for routing between the controller host (and physical network) and the internal network, but I cannot seem to find if I went wrong anywhere. I've read other questions on this, but didn't manage to fix anything.

Any help resolving this would be highly appreciated. If needed, any additional configuration snippets I'll append (I skipped compute node details for brevity).

Thank you!

============= EDIT 1 ================

It seems I failed to follow instructions regarding addressing external interface. The documentation states that the external interface has to have no IP, which makes it difficult for me, as I have only one physical interface, and eth0:x work only as additional IPs on the existing interface. I've found a tutorial regarding this, and will try to customize to my existing setup. Will post if successful, and any hints and tips are still more than welcome.

============= EDIT 2 ================

I used two veths on controller node to link into qrouter namespace, and was able to ping the router from the controller, however the instances are still unreachable. The instance can ping the veth peer inside the namespace, but cannot exit, seems due to routing, which always goes through the qrouter.