Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Instance can ping internet, but cannot ping instance from Controller or Internet

A bit stuck and its probably something silly I'm overlooking or not understanding.

The instance can ping out to the controller and internet fine, however inward traffic to instances seems to be a problem. However ping the router_gateway from bother Controller and External internet. Masquerading is turned on.

It was built on Centos7 using the RDO packstack, existing network guide.

Here are some configs; * note vnets are from a prior KVM/QEMU install.

neutron net-list
+--------------------------------------+------------------+-------------------------------+
| id                                   | name             | subnets                           |
+--------------------------------------+------------------+-------------------------------+
| 2a03473b-f0b7-45cc-8d97-e5e00f3ec05c | external_network | d65ef1a9-c220-4152-bb0e-492a5b31c76c 114.111.100.0/24 |
| c2e5229a-441a-4516-bbbf-22fffd695024 | private_network  | 1f7ba0be-bff4-43d8-81a2-16604cedf109 10.0.0.0/24      |
+--------------------------------------+------------------+-------------------------------+

neutron port-list
+--------------------------------------+------------------+-------------------------------------+
| id                                   | name | mac_address       | fixed_ips                                                                              
+--------------------------------------+------+-------------------+-----------------------------+
| 0b42406b-3e1e-403d-990f-387f2a362400 |      | fa:16:3e:c2:22:d4 | {"subnet_id": "1f7ba0be-bff4-43d8-81a2-16604cedf109", "ip_address": "10.0.0.1"}        |
| 2d962ae0-6015-4102-9491-6bcac70b4e69 |      | fa:16:3e:81:3a:4a | {"subnet_id": "d65ef1a9-c220-4152-bb0e-492a5b31c76c", "ip_address": "114.111.100.102"} |
| 4db87bf4-535b-448a-b2a6-1c61b2117383 |      | fa:16:3e:70:d8:5c | {"subnet_id": "d65ef1a9-c220-4152-bb0e-492a5b31c76c", "ip_address": "114.111.159.101"} |
| 71e7a276-2f78-44f8-95cb-6eeef644e6b6 |      | fa:16:3e:ed:40:3c | {"subnet_id": "1f7ba0be-bff4-43d8-81a2-16604cedf109", "ip_address": "10.0.0.2"}        |
| a046f0d8-9fc0-4bbd-99dd-70058aff4fbc |      | fa:16:3e:db:2b:79 | {"subnet_id": "1f7ba0be-bff4-43d8-81a2-16604cedf109", "ip_address": "10.0.0.4"}        |
+--------------------------------------+------+-------------------+-----------------------------+

15ffc981-916e-41bf-a05e-ade955d36e7e
    Bridge br-tun
        fail_mode: secure
        Port patch-int
            Interface patch-int
                type: patch
                options: {peer=patch-tun}
        Port br-tun
            Interface br-tun
                type: internal
    Bridge br-ex
        Port "qg-4db87bf4-53"
            Interface "qg-4db87bf4-53"
                type: internal
        Port br-ex
            Interface br-ex
                type: internal
        Port phy-br-ex
            Interface phy-br-ex
                type: patch
                options: {peer=int-br-ex}
        Port "em1"
            Interface "em1"
    Bridge br-int
        fail_mode: secure
        Port "qvoa046f0d8-9f"
            tag: 1
            Interface "qvoa046f0d8-9f"
        Port patch-tun
            Interface patch-tun
                type: patch
                options: {peer=patch-int}
        Port "tap71e7a276-2f"
            tag: 1
            Interface "tap71e7a276-2f"
                type: internal
        Port "qr-0b42406b-3e"
            tag: 1
            Interface "qr-0b42406b-3e"
                type: internal
        Port int-br-ex
            Interface int-br-ex
                type: patch
                options: {peer=phy-br-ex}
        Port br-int
            Interface br-int
                type: internal
    ovs_version: "2.3.1"

route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         as45577.mdc01.v 0.0.0.0         UG    0      0        0 br-ex
114.111.100.0   0.0.0.0         255.255.255.0   U     0      0        0 br-ex
114.111.100.0   0.0.0.0         255.255.255.0   U     0      0        0 extbr0
link-local      0.0.0.0         255.255.0.0     U     1002   0        0 em1
link-local      0.0.0.0         255.255.0.0     U     1005   0        0 br-ex
link-local      0.0.0.0         255.255.0.0     U     1008   0        0 extbr0
192.168.100.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr1
192.168.201.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0

br-ex: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 114.111.100.100  netmask 255.255.255.0  broadcast 114.111.159.255
        inet6 fe80::2247:47ff:fe7b:16a2  prefixlen 64  scopeid 0x20<link>
        ether 20:47:47:7b:16:a2  txqueuelen 0  (Ethernet)
        RX packets 82084  bytes 11509656 (10.9 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 71170  bytes 27809666 (26.5 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

em1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::2247:47ff:fe7b:16a2  prefixlen 64  scopeid 0x20<link>
        ether 20:47:47:7b:16:a2  txqueuelen 1000  (Ethernet)
        RX packets 83343  bytes 11939445 (11.3 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 76050  bytes 28436718 (27.1 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device interrupt 16  

extbr0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 114.111.100.100  netmask 255.255.255.0  broadcast 114.111.159.255
        ether be:0d:76:be:10:78  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 0  (Local Loopback)
        RX packets 396428  bytes 51157360 (48.7 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 396428  bytes 51157360 (48.7 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

macvtap0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::5054:ff:fe9f:72f7  prefixlen 64  scopeid 0x20<link>
        ether 52:54:00:9f:72:f7  txqueuelen 500  (Ethernet)
        RX packets 19852  bytes 1690870 (1.6 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1800  bytes 611201 (596.8 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

qbra046f0d8-9f: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::70ff:baff:fecc:c96f  prefixlen 64  scopeid 0x20<link>
        ether 12:af:97:0a:47:e2  txqueuelen 0  (Ethernet)
        RX packets 27  bytes 1780 (1.7 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 8  bytes 648 (648.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

qvba046f0d8-9f: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
        inet6 fe80::10af:97ff:fe0a:47e2  prefixlen 64  scopeid 0x20<link>
        ether 12:af:97:0a:47:e2  txqueuelen 1000  (Ethernet)
        RX packets 383  bytes 36112 (35.2 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 178  bytes 15584 (15.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

qvoa046f0d8-9f: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
        inet6 fe80::3cfa:bfff:fe8c:a662  prefixlen 64  scopeid 0x20<link>
        ether 3e:fa:bf:8c:a6:62  txqueuelen 1000  (Ethernet)
        RX packets 178  bytes 15584 (15.2 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 383  bytes 36112 (35.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tapa046f0d8-9f: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::fc16:3eff:fedb:2b79  prefixlen 64  scopeid 0x20<link>
        ether fe:16:3e:db:2b:79  txqueuelen 500  (Ethernet)
        RX packets 163  bytes 14378 (14.0 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 123  bytes 11674 (11.4 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

virbr0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.201.1  netmask 255.255.255.0  broadcast 192.168.201.255
        ether 52:54:00:bf:82:f3  txqueuelen 0  (Ethernet)
        RX packets 10  bytes 592 (592.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

virbr1: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 192.168.100.1  netmask 255.255.255.0  broadcast 192.168.100.255
        ether 52:54:00:e5:e5:34  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

vnet0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::fc54:ff:feeb:310a  prefixlen 64  scopeid 0x20<link>
        ether fe:54:00:eb:31:0a  txqueuelen 500  (Ethernet)
        RX packets 10  bytes 732 (732.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 903  bytes 47188 (46.0 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Any help really appreciated.