*** rods_ has joined #openstack-astara | 02:14 | |
*** pcaruana has joined #openstack-astara | 04:02 | |
*** ericlopez has quit IRC | 04:24 | |
*** eric_lopez has joined #openstack-astara | 04:41 | |
*** eric_lopez has quit IRC | 05:02 | |
*** shashank_hegde has joined #openstack-astara | 05:31 | |
*** eric_lopez has joined #openstack-astara | 06:02 | |
*** shashank_hegde has quit IRC | 06:36 | |
*** eric_lopez has quit IRC | 08:23 | |
*** eric_lopez has joined #openstack-astara | 09:00 | |
*** prithiv has joined #openstack-astara | 09:03 | |
*** prithiv has quit IRC | 09:06 | |
*** prithiv has joined #openstack-astara | 09:37 | |
*** ronis has joined #openstack-astara | 10:33 | |
*** prithiv has quit IRC | 10:46 | |
*** prithiv has joined #openstack-astara | 10:51 | |
*** prithiv has quit IRC | 10:58 | |
*** rods_ has quit IRC | 11:08 | |
*** eric_lopez has quit IRC | 11:10 | |
*** phil_h has joined #openstack-astara | 11:55 | |
*** prithiv has joined #openstack-astara | 11:58 | |
*** openstackgerrit has quit IRC | 12:33 | |
*** openstackgerrit has joined #openstack-astara | 12:33 | |
*** Liuqing has joined #openstack-astara | 12:37 | |
*** eric_lopez has joined #openstack-astara | 12:57 | |
*** ronis has quit IRC | 12:59 | |
*** prithiv has quit IRC | 13:05 | |
*** prithiv has joined #openstack-astara | 13:16 | |
*** rods has quit IRC | 13:17 | |
*** rods has joined #openstack-astara | 13:19 | |
*** ronis has joined #openstack-astara | 13:20 | |
*** prithiv has quit IRC | 13:46 | |
*** prithiv has joined #openstack-astara | 13:47 | |
*** prithiv has quit IRC | 14:01 | |
*** jamesden_ has joined #openstack-astara | 14:10 | |
*** prithiv has joined #openstack-astara | 14:12 | |
*** Liuqing has quit IRC | 14:14 | |
*** ronis has quit IRC | 14:15 | |
*** prithiv has quit IRC | 14:19 | |
*** Liuqing has joined #openstack-astara | 14:19 | |
*** Liuqing_ has joined #openstack-astara | 14:37 | |
*** Liuqing has quit IRC | 14:38 | |
*** Liuqing_ has quit IRC | 14:40 | |
*** Liuqing has joined #openstack-astara | 14:41 | |
*** Liuqing has quit IRC | 14:45 | |
*** Liuqing has joined #openstack-astara | 14:49 | |
*** eric_lopez has quit IRC | 14:52 | |
*** prithiv has joined #openstack-astara | 14:56 | |
*** Liuqing has quit IRC | 15:12 | |
*** prithiv has quit IRC | 15:32 | |
*** eric_lopez has joined #openstack-astara | 16:25 | |
*** ronis has joined #openstack-astara | 16:33 | |
*** openstackgerrit has quit IRC | 17:33 | |
*** openstackgerrit has joined #openstack-astara | 17:33 | |
*** eric_lopez has quit IRC | 18:10 | |
stupidnic | I am having a bit of a minor issue with an Astara Router and was wondering if somebody might be able to assist me | 18:30 |
---|---|---|
stupidnic | We have a liberty install of Astara setup. | 18:31 |
stupidnic | (actually the OS in liberty Astara is much closer to Mitaka) | 18:31 |
stupidnic | Anyways... we have a client that we wanted to route a public IP address subnet directly into their internal network | 18:31 |
stupidnic | We had done this before with Neutron, and figured that it would work as expected. We just static the subnet to the router's public IP address, and the other network is a gateway on the router, and it should just work | 18:32 |
stupidnic | And mostly... it does | 18:33 |
stupidnic | However I am having an issue with SNAT (I think) | 18:33 |
stupidnic | So the instance inside has the IP address 162.220.48.90, however when I check the external IP using a remote source, I am seeing the router's IP address instead (162.220.49.55) | 18:34 |
stupidnic | I suspect that the router is still doing SNAT even though it is not necessary for a publicly routable IP address | 18:35 |
*** eric_lopez has joined #openstack-astara | 18:42 | |
* stupidnic pokes eric_lopez | 18:47 | |
*** eric_lopez has quit IRC | 18:47 | |
stupidnic | Okay. I have confirmed that there was a POSTROUTING rule in the router that was causing this behavior. | 18:54 |
*** eric_lopez has joined #openstack-astara | 19:14 | |
elo | stupidnic: sorry just saw the poke | 19:24 |
*** ronis has quit IRC | 19:28 | |
stupidnic | elo: no problem | 19:29 |
stupidnic | I sort of figured out the problem but wanted to mention it as a potential issue | 19:29 |
stupidnic | I am not really sure where the MASQUERADE rule is coming from | 19:30 |
stupidnic | But perhaps it should be limited to IP ranges that require NAT (192.168.0.0, 172.16.0.0, and 10.0.0.0) | 19:31 |
elo | need to ask mark about this he is the one most familiar with the Iptable tules on the router | 19:34 |
stupidnic | Yeah I found the code in question | 19:34 |
stupidnic | Line #335 in iptables.py in the appliance | 19:35 |
stupidnic | It adds a default entry | 19:35 |
stupidnic | I will create a bug report on it | 19:35 |
*** justinlund1 has quit IRC | 19:37 | |
stupidnic | Alright, bug filed. | 19:48 |
elo | ok. cool | 20:03 |
*** eric_lopez has quit IRC | 20:10 | |
*** eric_lopez has joined #openstack-astara | 20:11 | |
*** eric_lopez has quit IRC | 20:28 | |
*** eric_lopez has joined #openstack-astara | 20:29 | |
*** pcaruana has quit IRC | 20:42 | |
*** eric_lopez has quit IRC | 20:52 | |
*** jamesden_ has quit IRC | 20:57 | |
*** eric_lopez has joined #openstack-astara | 21:53 | |
*** ericlopez has joined #openstack-astara | 22:05 | |
*** eric_lopez has quit IRC | 22:07 | |
fzylogic | FYI, I think this pip bug is going to start biting everyone: https://github.com/pypa/pip/issues/3667 | 22:36 |
fzylogic | markmcclain: ^^ | 22:37 |
*** phil_h has quit IRC | 22:52 | |
*** Liuqing has joined #openstack-astara | 23:25 | |
*** ericlopez has quit IRC | 23:29 | |
*** Liuqing has quit IRC | 23:30 | |
*** Liuqing has joined #openstack-astara | 23:31 | |
*** Liuqing has quit IRC | 23:31 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!