Hi Vikash,
The VXLAN tunnel endpoint address is listed in the output of a neutron
agent-show :
$ neutron agent-show cb45e3f8-4a28-475a-994d-83bc27806c38
+-++
| Field | Value |
+
Each DVR router has a unique MAC address that can be found in the Neutron DB in
the dvr_host_macs table. Those will MACs will likely match what’s in the flow
rules there.
This presentation from the Paris summit (Page 19-20) breaks it down in some
detail.
https://www.openstack.org/assets/presen
Err… correction. Each host has a unique MAC, not each router. Sorry!
http://assafmuller.com/2015/04/15/distributed-virtual-routing-overview-and-eastwest-routing/
James
From: James Denton
mailto:james.den...@rackspace.com>>
Reply-To: "OpenStack Development Mailing List (not for usag
My opinion is that the current stance of ‘deny all’ is probably the safest bet
for all parties (including users) at this point. It’s been that way for years
now, and is a substantial change that may result in little benefit. After all,
you’re probably looking at most users removing the default r
Hi Takashi,
At least in Liberty, with the reference iptables firewall, it looks like
setting the admin state of the firewall to DOWN results in traffic hitting only
the neutron-l3-agent-fwaas-defau chain. The action there is to DROP all traffic.
James
On 1/26/16, 4:15 AM, "Takashi Yamamo
, we are routing to another
instance off the router.
Thanks!
—
James Denton
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http