[Openstack] security groups not working on one compute node

2016-01-12 Thread Akshay Kumar Sanghai
Hi, I am running a kilo openstack setup with 3 nodes, 1 controller and 2 compute. Suppose i have 2 VMs , vm1 on compute node1 and vm2 on compute node2 . When i change the security groups for vm1 when vm is running ,then i can see the change is implemented. But for vm2 ,change is not implemented whi

[Openstack] l2 pop driver not for vlan tenant networks

2016-01-13 Thread Akshay Kumar Sanghai
Hi, l2 pop driver works for gre and vxlan tunnel tenant networks. But for vlan ,it uses multicast. Why is this so? Also, who responds to the arp requests of the VMs in case of vlan tenant networks? Thanks, Akshay ___ Mailing list: http://lists.openstack.o

[Openstack] [openstack][neutron]external network packets to network node

2016-01-15 Thread Akshay Kumar Sanghai
Hi, I have done a kilo ubuntu installation of openstack. One thing i noticed was the network node's external interface is unnumbered. Then how does the external router forwards the packet to the network node? Suppose a vm has a floating ip . I send a packet to that vm using the floating ip. The nat

Re: [Openstack] [openstack][neutron]external network packets to network node

2016-01-15 Thread Akshay Kumar Sanghai
ds on Neutron having been configured > appropriately and the networks created with the proper provider attribute > values. > > Hope that helps, > > James > > > From: Akshay Kumar Sanghai > Date: Friday, January 15, 2016 at 3:13 PM > To: "openstack@lists.openstack.

[Openstack] [openstack][neutron]disable snat for router gateway

2016-01-15 Thread Akshay Kumar Sanghai
Hi, In the cli of neutron router-gateway-set, thers is an option of disable snat. http://docs.openstack.org/cli-reference/neutron.html#neutron-router-gateway-set Does that mean i can create a tenant network and i will not need floating ip to go to external network? Assume the tenant network create

[Openstack] [openstack][barbican]barbican github installation failing

2016-05-10 Thread Akshay Kumar Sanghai
Hi, I have a 4 node working setup of openstack (1 controller, 1 network node, 2 compute node). I am trying to use ssl offload feature of lbaas v2. For that I need tls containers, hence barbican. I did a git clone of barbican repo from https://github.com/openstack/barbican Then ./bin/barbican.sh ins

[Openstack] barbican-worker and barbican-keystone-listener not starting up

2016-05-11 Thread Akshay Kumar Sanghai
Hi, I have a 4 node setup of openstack liberty. 1 controller , 2 compute node and 1 network node. I did a apt-get barbican-api barbican-worker barbican-keystone-listener and installed the components. The deployment is pointing to the ubuntu liberty repository. The database used by all the services

[Openstack] [openstack][nova][neutron]How a vm is created?

2016-05-11 Thread Akshay Kumar Sanghai
Hi, I wanted to know how a vm is created in openstack. There are so many components of each service that I am getting confused. I understand at a high level that nova-scheduler will find the compute host, nova-compute will create the vm and nova interacts with neutron for port allocation. But I wan