-
-
Save jcannava/7324859 to your computer and use it in GitHub Desktop.
| root@mini-ha-neutron-1-1414-api:~/.chef# ip a s lo | |
| 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN | |
| link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 | |
| inet 127.0.0.1/8 scope host lo | |
| inet 192.168.0.241/32 scope global lo | |
| inet6 ::1/128 scope host | |
| valid_lft forever preferred_lft forever | |
| root@mini-ha-neutron-1-1414-api:~/.chef# ip netns exec vips ip a | |
| 7: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN | |
| link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 | |
| inet 127.0.0.1/8 scope host lo | |
| inet6 ::1/128 scope host | |
| valid_lft forever preferred_lft forever | |
| 8: vip-ns: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 | |
| link/ether 06:42:fb:40:fd:e3 brd ff:ff:ff:ff:ff:ff | |
| inet 192.168.0.241/32 scope global vip-ns | |
| inet6 fe80::442:fbff:fe40:fde3/64 scope link | |
| valid_lft forever preferred_lft forever | |
| root@mini-ha-neutron-1-1414-api:~/.chef# ip netns exec vips ip r | |
| default dev vip-ns scope link |
ip netns exec vips ping 192.168.0.242
PING 192.168.0.242 (192.168.0.242) 56(84) bytes of data.
64 bytes from 192.168.0.242: icmp_req=1 ttl=64 time=0.112 ms
64 bytes from 192.168.0.242: icmp_req=2 ttl=64 time=0.063 ms
64 bytes from 192.168.0.242: icmp_req=3 ttl=64 time=0.065 ms
^C
--- 192.168.0.242 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1998ms
rtt min/avg/max/mdev = 0.063/0.080/0.112/0.022 ms
root@mini-ha-neutron-1-1414-api:~/.chef# ping 192.168.0.242
PING 192.168.0.242 (192.168.0.242) 56(84) bytes of data.
^C
--- 192.168.0.242 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2015ms
root@mini-ha-neutron-1-1414-api:~/.chef# ip netns exec vips iptables-save -c
Generated by iptables-save v1.4.12 on Tue Nov 5 19:50:55 2013
*mangle
:PREROUTING ACCEPT [157:13840]
:INPUT ACCEPT [37:3976]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [90:8428]
:POSTROUTING ACCEPT [90:8428]
COMMIT
Completed on Tue Nov 5 19:50:55 2013
Generated by iptables-save v1.4.12 on Tue Nov 5 19:50:55 2013
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [1:84]
:POSTROUTING ACCEPT [1:84]
[0:0] -A PREROUTING -d 192.168.0.240/32 -j DNAT --to-destination 192.168.0.5
[91:7620] -A PREROUTING -d 192.168.0.242/32 -j DNAT --to-destination 192.168.0.5
[0:0] -A POSTROUTING -m conntrack --ctstate DNAT --ctorigdst 192.168.0.240 -j SNAT --to-source 192.168.0.240
[0:0] -A POSTROUTING -m conntrack --ctstate DNAT --ctorigdst 192.168.0.242 -j SNAT --to-source 192.168.0.242
COMMIT
Completed on Tue Nov 5 19:50:55 2013
Generated by iptables-save v1.4.12 on Tue Nov 5 19:50:55 2013
*filter
:INPUT ACCEPT [37:3976]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [90:8428]
COMMIT
Completed on Tue Nov 5 19:50:55 2013
Outside
root@mini-ha-neutron-1-1414-api:~/.chef# ip n
10.127.53.105 dev eth0 lladdr fa:16:3e:62:1f:a9 REACHABLE
10.127.52.106 dev eth0 lladdr 04:7d:7b:06:b4:aa REACHABLE
10.127.53.0 dev eth0 lladdr fa:16:3e:c8:54:ea REACHABLE
10.127.52.28 dev eth0 lladdr e8:39:35:ea:83:4e STALE
10.127.52.1 dev eth0 lladdr c8:4c:75:f6:18:7f STALE
192.168.0.3 dev eth1 lladdr fa:16:3e:55:d6:4c REACHABLE
192.168.0.4 dev eth1 lladdr fa:16:3e:c0:2a:e4 REACHABLE
10.127.53.102 dev eth0 lladdr fa:16:3e:65:ff:04 STALE
192.168.0.242 dev vip-br lladdr 06:42:fb:40:fd:e3 STALE
Inside
root@mini-ha-neutron-1-1414-api:/.chef# ip netns exec vips ip n/.chef#
root@mini-ha-neutron-1-1414-api:
root@mini-ha-neutron-1-1414-api:
/.chef# ip r/.chef# ip a s lodefault via 10.127.52.1 dev eth0
10.127.52.0/22 dev eth0 proto kernel scope link src 10.127.53.107
192.168.0.0/24 dev eth1 proto kernel scope link src 192.168.0.5
192.168.0.240 dev vip-br scope link src 192.168.0.5
192.168.0.242 dev vip-br scope link src 192.168.0.5
192.168.50.0/24 dev br-eth2 proto kernel scope link src 192.168.50.4
root@mini-ha-neutron-1-1414-api:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet 192.168.0.241/32 scope global lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
root@mini-ha-neutron-1-1414-api:
/.chef# ip netns exec vips ip a/.chef# ip netns exec vips ip r7: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
8: vip-ns: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 06:42:fb:40:fd:e3 brd ff:ff:ff:ff:ff:ff
inet 192.168.0.241/32 scope global vip-ns
inet 192.168.0.242/32 scope global vip-ns
inet 192.168.0.240/32 scope global vip-ns
inet6 fe80::442:fbff:fe40:fde3/64 scope link
valid_lft forever preferred_lft forever
root@mini-ha-neutron-1-1414-api:
default dev vip-ns scope link