I am facing network issues in Openstack. My openstack(MaaS + JuJu + Conjure-up) setup got deployed successfully but when i spin up an instance, there is no internet connectivity and my router is also not getting pinged from outside network(My Openstack VM can ping the router).

Any leads would be really helpful.

Traceroute o/p:

$sudo ip netns exec qrouter-ce0ba09f-8220-4414-91e2-b6896b596aef traceroute 8.8.8.8  
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets  
1  172.18.0.111 (172.18.0.111)  2999.458 ms !H  2999.416 ms !H  2999.409 ms !H

iptables o/p from Router:

enter image description here

iptables NAT rules from Router

$ sudo ip netns exec qrouter-ce0ba09f-8220-4414-91e2-b6896b596aef iptables -t nat -L

Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
neutron-l3-agent-PREROUTING  all  --  anywhere             anywhere

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
neutron-l3-agent-OUTPUT  all  --  anywhere             anywhere

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
neutron-l3-agent-POSTROUTING  all  --  anywhere             anywhere
neutron-postrouting-bottom  all  --  anywhere             anywhere

Chain neutron-l3-agent-OUTPUT (1 references)
target     prot opt source               destination
DNAT       all  --  anywhere             172.18.0.108         to:10.0.0.4

Chain neutron-l3-agent-POSTROUTING (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             ! ctstate DNAT

Chain neutron-l3-agent-PREROUTING (1 references)
target     prot opt source               destination
REDIRECT   tcp  --  anywhere             169.254.169.254      tcp dpt:http redir ports 9697
DNAT       all  --  anywhere             172.18.0.108         to:10.0.0.4

Chain neutron-l3-agent-float-snat (1 references)
target     prot opt source               destination
SNAT       all  --  10.0.0.4             anywhere             to:172.18.0.108

Chain neutron-l3-agent-snat (1 references)
target     prot opt source               destination
neutron-l3-agent-float-snat  all  --  anywhere             anywhere
SNAT       all  --  anywhere             anywhere             to:172.18.0.111
SNAT       all  --  anywhere             anywhere             mark match ! 0x2/0xffff ctstate DNAT to:172.18.0.111

Chain neutron-postrouting-bottom (1 references)
target     prot opt source               destination
neutron-l3-agent-snat  all  --  anywhere             anywhere             /* Perform source NAT on outgoing traffic. */
  • Can you ping any public ip from tenant router? – 2707974 Nov 9 '17 at 10:00
  • nope .. i tried pinging 8.8.8.8 and its dint connect . – Mohan Sanagapalli Nov 9 '17 at 10:03
  • Do you have appropriate configured external network, route and nat enabled? Add this info in your question. – 2707974 Nov 9 '17 at 11:27
  • All configurations are properly , my router is SNAT enabled. External network is also resolvable , i am using the same network as the MaaS. I created a reserve range in MaaS and using this range as External network in Openstack. – Mohan Sanagapalli Nov 23 '17 at 2:12
  • Is it necessary to have 2 NIC cards ..?? bcos my servers are having 1 NIC card with 2 ports. Will this work ..?? – Mohan Sanagapalli Nov 23 '17 at 2:15

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.