Re: [Openstack] Can not use keepalived in vms

2013-08-12 Thread Lei Zhang
@Jason Ford, it turn out be the iptables issue. Thx a lot. @Jiajun Liu, I am using the nova-network. So this BP is not helpful. But I am expecting this feature. What I done: 1. using virsh to disable the nwfilter for the two vms. 2. stop the iptables in the vms 3. configure the keepalived. 4. work

Re: [Openstack] Can not use keepalived in vms

2013-08-07 Thread Jiajun Liu
openstack implemented mac/ip spoofing, so the vrrp packets will be drop by iptables/ebtables. There is a blueprint ( https://blueprints.launchpad.net/neutron/+spec/allowed-address-pairs) for binding multiple mac/ip on a port. On Thu, Aug 8, 2013 at 11:33 AM, Jason Ford wrote: > Lei, > > It is

Re: [Openstack] Can not use keepalived in vms

2013-08-07 Thread Jason Ford
Lei, It is probably because iptables is filtering out the heartbeat traffic at the compute node level. If you are using vlans, it should work without issue however if you are using the flat network model, you need to allow vrrp in your compute node iptable rule sets. See this link.. http://sta