FWIW I've tested the setup you describe and I'm not seeing duplicate ICMP 
replies. Unfortunately I can't offer an explanation.

Adrian

From: openstack-bounces+adrian_f_smith=dell....@lists.launchpad.net 
[mailto:openstack-bounces+adrian_f_smith=dell....@lists.launchpad.net] On 
Behalf Of Shyam Kaushik
Sent: Friday, October 14, 2011 2:00 PM
To: openstack@lists.launchpad.net
Subject: [Openstack] Duplicate ICMP due to public interface bridge being placed 
in promiscus mode

Hi Vish,

In our openstack deployment we observe this:

Since 
linux_net.py/initialize_gateway_device()<http://linux_net.py/initialize_gateway_device()>
 does this
    # NOTE(vish): If the public interface is the same as the
    #             bridge, then the bridge has to be in promiscuous
    #             to forward packets properly.
    if(FLAGS.public_interface == dev):
        _execute('ip', 'link', 'set',
                     'dev', dev, 'promisc', 'on', run_as_root=True)


Any VM spawned on the cloud controller node if it sends an ICMP ping to an 
external network gets duplicate replies (i.e. there are 2 replies for the same 
ICMP request). For VM's spawned on any other non-cloud controller this doesn't 
happen.

If we turn of promiscus mode on the bridge, the VM on cloud controller doesn't 
see the duplicate replies, but VM's on non-cloud controller cannot reach 
external network.

Question to you is, is this duplicate ICMP replies expected for VM's running on 
cloud controller due to above logic?

--Shyam
_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to     : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Reply via email to