Attachment 892251 Details for Bug 1093981 – iptables

iptables

file_1093981.txt (text/plain), 6.04 KB, created by Ofer Blaut on 2014-05-04 04:56:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ofer Blaut

Created: 2014-05-04 04:56:58 UTC

Size: 6.04 KB

patch

obsolete

>floating ip is associated but not in iptables nat
>
>floating ip (10.35.175.23) on RHEL 7 with RDO : ( nothing in nat table )  
>
>[root@cougar16 ~]# ip netns exec qrouter-28db7907-6998-42a6-8718-180cfad1061d iptables -nL -t nat
>Chain PREROUTING (policy ACCEPT)
>target     prot opt source               destination         
>neutron-l3-agent-PREROUTING  all  --  0.0.0.0/0            0.0.0.0/0           
>
>Chain INPUT (policy ACCEPT)
>target     prot opt source               destination         
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination         
>neutron-l3-agent-OUTPUT  all  --  0.0.0.0/0            0.0.0.0/0           
>
>Chain POSTROUTING (policy ACCEPT)
>target     prot opt source               destination         
>neutron-l3-agent-POSTROUTING  all  --  0.0.0.0/0            0.0.0.0/0           
>neutron-postrouting-bottom  all  --  0.0.0.0/0            0.0.0.0/0           
>
>Chain neutron-l3-agent-OUTPUT (1 references)
>target     prot opt source               destination         
>
>Chain neutron-l3-agent-POSTROUTING (1 references)
>target     prot opt source               destination         
>ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ! ctstate DNAT
>
>Chain neutron-l3-agent-PREROUTING (1 references)
>target     prot opt source               destination         
>REDIRECT   tcp  --  0.0.0.0/0            169.254.169.254      tcp dpt:80 redir ports 9697
>
>Chain neutron-l3-agent-float-snat (1 references)
>target     prot opt source               destination         
>
>Chain neutron-l3-agent-snat (1 references)
>target     prot opt source               destination         
>neutron-l3-agent-float-snat  all  --  0.0.0.0/0            0.0.0.0/0           
>SNAT       all  --  22.0.0.0/24          0.0.0.0/0            to:10.35.175.20
>SNAT       all  --  21.0.0.0/24          0.0.0.0/0            to:10.35.175.20
>
>Chain neutron-postrouting-bottom (1 references)
>target     prot opt source               destination         
>neutron-l3-agent-snat  all  --  0.0.0.0/0            0.0.0.0/0           
>[root@cougar16 ~]# source keystonerc_admin_tenant1 
>[root@cougar16 ~(keystone_admin_tenant1)]$neutron floatingip-list 
>+--------------------------------------+------------------+---------------------+--------------------------------------+
>| id                                   | fixed_ip_address | floating_ip_address | port_id                              |
>+--------------------------------------+------------------+---------------------+--------------------------------------+
>| 1016f680-88fa-4f8f-8252-e87cbbc2196a | 21.0.0.9         | 10.35.175.23        | f7b114ed-2066-43a6-ae73-23c8081aec09 |
>| 4c590c26-8d1c-490a-af4d-e31c8a00e00c |                  | 10.35.175.21        |                                      |
>| fa4e73a0-dfa3-454b-a284-201711089e6f |                  | 10.35.175.22        |                                      |
>+--------------------------------------+------------------+---------------------+--------------------------------------+
>[root@cougar16 ~(keystone_admin_tenant1)]$neutron floatingip-show 1016f680-88fa-4f8f-8252-e87cbbc2196a
>+---------------------+--------------------------------------+
>| Field               | Value                                |
>+---------------------+--------------------------------------+
>| fixed_ip_address    | 21.0.0.9                             |
>| floating_ip_address | 10.35.175.23                         |
>| floating_network_id | e3f9cf78-5e7c-49e3-a9ce-872dc81aabde |
>| id                  | 1016f680-88fa-4f8f-8252-e87cbbc2196a |
>| port_id             | f7b114ed-2066-43a6-ae73-23c8081aec09 |
>| router_id           | 28db7907-6998-42a6-8718-180cfad1061d |
>| status              | ACTIVE                               |
>| tenant_id           | 258f72b6bd9643e6ae3e7c7bbc46cecd     |
>+---------------------+--------------------------------------+
>[root@cougar16 ~(keystone_admin_tenant1)]$
> 
>
>
>Floating ip on RHEL 6.5 with RHOS 4.0 (floating ip 10.35.180.21 )
>
>
>[root@puma05 ~]# ip netns exec qrouter-e2decdf1-753d-4be4-86ef-e24aa5a10ed3 iptables -nL -t nat
>Chain PREROUTING (policy ACCEPT)
>target     prot opt source               destination         
>neutron-l3-agent-PREROUTING  all  --  0.0.0.0/0            0.0.0.0/0           
>
>Chain POSTROUTING (policy ACCEPT)
>target     prot opt source               destination         
>neutron-l3-agent-POSTROUTING  all  --  0.0.0.0/0            0.0.0.0/0           
>neutron-postrouting-bottom  all  --  0.0.0.0/0            0.0.0.0/0           
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination         
>neutron-l3-agent-OUTPUT  all  --  0.0.0.0/0            0.0.0.0/0           
>
>Chain neutron-l3-agent-OUTPUT (1 references)
>target     prot opt source               destination         
>DNAT       all  --  0.0.0.0/0            10.35.180.21        to:21.0.0.2 
>
>Chain neutron-l3-agent-POSTROUTING (1 references)
>target     prot opt source               destination         
>ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           ! ctstate DNAT 
>
>Chain neutron-l3-agent-PREROUTING (1 references)
>target     prot opt source               destination         
>REDIRECT   tcp  --  0.0.0.0/0            169.254.169.254     tcp dpt:80 redir ports 9697 
>DNAT       all  --  0.0.0.0/0            10.35.180.21        to:21.0.0.2 
>
>Chain neutron-l3-agent-float-snat (1 references)
>target     prot opt source               destination         
>SNAT       all  --  21.0.0.2             0.0.0.0/0           to:10.35.180.21 
>
>Chain neutron-l3-agent-snat (1 references)
>target     prot opt source               destination         
>neutron-l3-agent-float-snat  all  --  0.0.0.0/0            0.0.0.0/0           
>SNAT       all  --  22.0.0.0/24          0.0.0.0/0           to:10.35.180.20 
>SNAT       all  --  21.0.0.0/24          0.0.0.0/0           to:10.35.180.20 
>
>Chain neutron-postrouting-bottom (1 references)
>target     prot opt source               destination         
>neutron-l3-agent-snat  all  --  0.0.0.0/0            0.0.0.0/0           
>[root@puma05 ~]#

Actions: View

Attachments on bug 1093981: 892251