NiklasNorin[m] | Hi guys! What’s the easiest way to setup external network access for my nova instances? | 05:31 |
---|---|---|
NiklasNorin[m] | I’m setting up a “all in one” node for development on a physical machine with two network interfaces, both connected to my local home router | 05:31 |
NiklasNorin[m] | To orchestrate it I’m using Kolla Ansible | 05:32 |
NiklasNorin[m] | I’m trying to set up a “provider network”, as I understand this might be the simplest, but I’m not able to reach my instances from the physical network | 05:32 |
NiklasNorin[m] | I tried to do:... (full message at https://matrix.org/_matrix/media/r0/download/matrix.org/tAWtFboryaLmxfDfhtUyZMKG) | 05:33 |
NiklasNorin[m] | But no luck. | 05:33 |
NiklasNorin[m] | I would highly appreciate any pointers. | 05:34 |
NiklasNorin[m] | If someone can help me get networking up and running, I’ll gladly donate $50 to your favorite non-profit! :D | 05:35 |
NiklasNorin[m] | One thing I find suspicious is that if I go to Networks/physnet1/Ports in Horizon, then under Bindings i see "bridge_name br-int", I think I expected to find "br-ext"? | 05:36 |
NiklasNorin[m] | Maybe I can simplify my question:... (full message at https://matrix.org/_matrix/media/r0/download/matrix.org/pKCLTBlDPuXOxPxtHAaMEGPP) | 07:54 |
NiklasNorin[m] | * Maybe I can simplify my question:... (full message at https://matrix.org/_matrix/media/r0/download/matrix.org/qkyqBwrIMGhxOTgCgltxcjYW) | 07:55 |
frickler | NiklasNorin[m]: a) not everyone likes to be addressed as "guys". b) not a lot of people will follow matrix.org links, try to post messages that are not mangled by the bridge you are using | 08:10 |
NiklasNorin[m] | <frickler> "Niklas Norin: a) not everyone..." <- Thanks for the feedback, I meant no disrespect! | 08:34 |
NiklasNorin[m] | Hmm, I thought this bridge was completely transparent. I’ll look into that and repost the question. | 08:34 |
frickler | NiklasNorin[m]: I think not using the matrix reply function and not sending messages that have multiple lines could be a good start. Also not using the edit function probably | 09:12 |
niknon | @frickler: Thanks for the tips, trying out another iPhone IRC client as well now. | 09:20 |
niknon | Reposting my question: | 09:22 |
niknon | - I've created an external and internal network, with router from internal to external | 09:22 |
niknon | - I've created two compute instances, "compute-internal" which is attached to the internal network, and "compute-external" which is attached to the external network | 09:22 |
niknon | - If i "ping google.com" in compute-internal, I get a reply, and ifconfig shows a ipv4 address attached | 09:22 |
niknon | - If i "ping google.com" in compute-external, I get no reply, and ifconfig shows no ipv4 address attached | 09:22 |
niknon | How come compute-external does not have access to the internet? What configuration might be missing? | 09:23 |
niknon | I’m completely new to OpenStack as of last week or so, so just let me know what more information I might provide to narrow down the root cause. | 09:24 |
jrosser | niknon: you could look to see if dhcp is enabled on the external network | 09:30 |
niknon | @jrosser: I was hoping to use my physical external routers DHCP server. Should that be possible in this case? | 09:34 |
NiklasNorin[m] | If I navigate to the network port of compute-external, it has an IP allocated, but I can’t see that with ifconfig in the instance. | 09:35 |
NiklasNorin[m] | One thing I find suspicious is that if I go to Networks/physnet1/Ports in Horizon, then under Bindings i see "bridge_name br-int", I think I expected to find "br-ext" when connected straight to the external network? | 09:36 |
niknon | (Closing down one client - one of me is more than enough :D) | 09:37 |
jrosser | i'm not best placed to answer as i don't have anything with OVS here to compare with | 09:37 |
jrosser | though i would be wondering if you can't use security groups and external DHCP at the same time though | 09:39 |
jrosser | as neutron would have no idea about what your routers dhcp server was doing | 09:39 |
frickler | niknon: using an external DHCP server doesn't work, unless you manually configure it with the leases that Neutron sets up. you could try to set up your instance via config-drive instead | 09:57 |
frickler | or stop the external DHCP server and use the Neutron dhcp agent instead | 09:57 |
*** rlandy|out is now known as rlandy | 10:28 | |
niknon | @fickler Hmm, okay. In Horizon, I see that the “compute-external” gets an IP assigned on the network, but it doesn’t show on the interface in the instance. Why might that be? | 15:52 |
niknon | jrosser: You were right. I got the compute node on the provider network to work right away after I enabled DHCP. Thanks for the tip :) | 19:39 |
niknon | When I enable DHCP on a provider network, will that interfere with my physical router also being a DHCP server? Or will it only serve Neutron/Nova? | 19:40 |
jrosser | niknon: i don't think the neutron one will respond for things it doesnt know about | 20:04 |
jrosser | but your router will for anything i guess, which could be a problem | 20:05 |
jrosser | have you looked at config-drive? | 20:06 |
niknon | jrosser: Ok. No, what's config-drive? | 20:24 |
jrosser | niknon: https://docs.openstack.org/nova/yoga/user/metadata.html#config-drives | 20:25 |
niknon | jrosser: that's really neat, thanks! With config-drive, would you then use something like cloud-init to configure the network interface on boot without DHCP, or is there some native way to use the network data that config-drive can pass on to the network interface? | 20:37 |
jrosser | https://cloudinit.readthedocs.io/en/latest/topics/datasources/configdrive.html | 20:37 |
niknon | jrosser: thanks a lot for the points - I'll read up on it. | 21:01 |
*** rlandy is now known as rlandy|bbl | 22:44 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!