Ask Your Question

red_trela's profile - activity

2013-10-25 17:40:52 -0600 received badge  Famous Question (source)
2013-10-21 06:12:28 -0600 received badge  Notable Question (source)
2013-10-16 06:57:05 -0600 received badge  Popular Question (source)
2013-10-16 03:27:35 -0600 commented answer Floating IP not working (in-/egress from/to outside) [Neutron, OVS, GRE]

Added the answers to the bottom of the OP, starting where it says UPDATE.

2013-10-16 03:27:02 -0600 received badge  Editor (source)
2013-10-15 10:00:41 -0600 received badge  Student (source)
2013-10-15 09:31:46 -0600 asked a question Floating IP not working (in-/egress from/to outside) [Neutron, OVS, GRE]

Trying to get Havana (rc1 from RDO) to work with Neutron using OVS and GRE tunnels. There's a single controller which also acts as the network node and there's currently two compute nodes. Trying to launch an instance, it gets a fixed IP which seems to work well. But then I assign a floating IP which is supposedly routed within our network. Now I can neither access our network from within the instance nor the other way around. I can't even ping the external gateway from within the instance and I can't ping the instance from the controller (and yes, I opened up the security group for all ICMP from

Controller (aka ctrl below): - eth0 added to br-ex - br-ex has IP of (a range that is not used anywhere else in the setup) - eth1 has the IP, which is the management network (over which the GRE tunnels go) - eth2 connects to our storage network and can be ignored in this scenario - Can ping Floating Gateway (external gateway) in default namespace - Can ping Floating Router and Floating IP in qrouter namespace - Can NOT ping Floating Gateway in qrouter namespace - Can NOT ping Floating Router or Floating IP in default namespace

Compute Nodes: - eth0 has IP of 10.112.1.{5,13}, which again is the management network (over which the GRE tunnels go)

Instance (aka instance below): - Private IP of - Floating IP of - Can ping itself on Private IP - Can ping Private Gateway - Can ping itself on Floating IP - Can ping Floating Router - Can NOT ping Floating Gateway

So what seems to sort of lack is a connection between the two namespaces (default and qrouter). But a tcpdump on eth0 reveals that if the instance tries to ping the Floating Gateway, there'a a arp request but there doesn't seem to be an answer. My guess would be because the network doesn't know where to send to answer to (i.e. the Floating IP is unknown to the network). Really no idea what I'm missing here.

Suspiciously, ALL ports on the Floating Network are shown as DOWN (while those on the Private Network are UP). I know there used to be a bug where they were shown down but actually worked, but this should be fixed and I think with the bug all ports on all networks showed as DOWN so not seeing that bug here.

Below, I'll list everything that I think could matter. Logs look clean, so leaving them away but happy to provide any additional information. Any help is much appreciated, thanks!

[root@ctrl]# neutron net-show eth_zurich
| Field                     | Value                                |
| admin_state_up            | True                                 |
| id                        | 90696787-0c11-4031-bc99-8d1db2d24744 |
| name                      | eth_zurich                           |
| provider:network_type     | gre                                  |
| provider:physical_network |                                      |
| provider:segmentation_id  | 4                                    |
| router:external           | True                                 |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   | 47e26025-f09a-4299-915e-6b2275fea59e |
| tenant_id                 | b6f22facd6bb43a5bb465097b53a087a     |

[root@ctrl]# neutron subnet-show private_v4
| Field            | Value                                             |
| allocation_pools | {"start": "", "end": "172 ...