<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style style="display: none;" id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body tabindex="0" aria-label="Nachrichtentext" fpstyle="1" dir="ltr">
<div name="divtagdefaultwrapper" id="divtagdefaultwrapper" style="font-family: Tahoma, Geneva, sans-serif; font-size: 10pt; color: #000000; margin: 0">
Hello!<br>
<br>
Thanks for the link to your labs. I will have to take some time to read the other labs, but skimming through them, they look very useful.<br>
<br>
But I have to tell you that except for a missing metadata_ip (which does not seem to make a difference in my case, probably because it defaults to 127.0.0.1) I have all settings you list.<br>
<br>
So, alas, nothing has changed. The VM still does not get a reply from 169.254.169.254 because it does not exist, and nothing redirects there.<br>
<br>
Since what actually fails is an ARP request for that address, I doubt a redirect rule alone will do the job. I would need a gateway route to avoid the ARP *and* a redirect. I will change the scenario to a routed network (with the L3 agent) to see if that works
OK, then see what I can learn for the VLAN case with the external router.<br>
<br>
I would be grateful for any further ideas.<br>
<div>
<title></title>
<basefont size="2" face="Arial"><br>
<br>
<font face="Tahoma">Best regards / Mit freundlichen Grüßen <br>
Lutz Christoph <br>
<br>
-- <br>
<br>
Lutz Christoph <br>
<br>
arago Institut für komplexes Datenmanagement AG <br>
<br>
Eschersheimer Landstraße 526 - 532 <br>
60433 Frankfurt am Main <br>
<br>
eMail: lchristoph@arago.de - www: http://www.arago.de <br>
Tel: 0172/6301004 <br>
Mobil: 0172/6301004 <br>
</font><font face="Tahoma"><br>
<a href="http://www.cloudops.de/"><img border="0" height="88" width="350" src="http://www.arago.net/wp-content/uploads/2013/06/EmailSignatur1.png">
</a> <br>
<br>
-- <br>
Bankverbindung: Frankfurter Sparkasse, BLZ: 500 502 01, Kto.-Nr.: 79343 <br>
Vorstand: Hans-Christian Boos, Martin Friedrich <br>
Vorsitzender des Aufsichtsrats: Dr. Bernhard Walther <br>
Sitz: Kronberg im Taunus - HRB 5731 - Registergericht: Königstein i.Ts <br>
Ust.Idnr. DE 178572359 - Steuernummer 2603 003 228 43435 </font></div>
<br>
<div style="color: rgb(40, 40, 40);" dir="auto">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" color="#000000" face="Calibri, sans-serif"><b>Von:</b> Rhys Oxenham <roxenham@redhat.com><br>
<b>Gesendet:</b> Montag, 15. Juli 2013 21:21<br>
<b>An:</b> Lutz Christoph<br>
<b>Cc:</b> rhos-list@redhat.com<br>
<b>Betreff:</b> Re: [rhos-list] VLANs and metadata</font>
<div> </div>
</div>
<div>
<div style="">Hi Lutz,</div>
<div style=""><br>
</div>
<div style="">I recently wrote a lab on this exact setup, metadata with Open vSwitch in VLAN tenant networks. If you skip to Lab 11 in this unfinished guide you should be able to set it up. By the way, the port doesn't have to be 8700, I just chose this port
to keep it separate from similar ports used by Nova. </div>
<div style=""><br>
</div>
<div style=""><span style="font-size:15px; line-height:19px; white-space:nowrap"><a href="https://github.com/rdoxenham/openstack-training/blob/master/documentation/openstack-manual.md">https://github.com/rdoxenham/openstack-training/blob/master/documentation/openstack-manual.md</a></span></div>
<div><span style="font-size:15px; line-height:19px; white-space:nowrap"><br>
</span></div>
<div><span style="font-size:15px; line-height:19px; white-space:nowrap">Let us know if you have any questions. </span></div>
<div><span style="font-size:15px; line-height:19px; white-space:nowrap"><br>
</span></div>
<div><span style="font-size:15px; line-height:19px; white-space:nowrap">Thanks</span></div>
<div><span style="font-size:15px; line-height:19px; white-space:nowrap">Rhys. <br>
</span><br>
<span style="">Sent from my mobile device</span></div>
<div style=""><br>
On 15 Jul 2013, at 19:15, Lutz Christoph <<a href="mailto:lchristoph@arago.de">lchristoph@arago.de</a>> wrote:<br>
<br>
</div>
<blockquote type="cite" style="">
<div>
<div name="divtagdefaultwrapper" id="divtagdefaultwrapper" style="font-family:Tahoma,Geneva,sans-serif; font-size:10pt; color:#000000; margin:0">
Hello!<br>
<br>
I've set up a simple case (detailed in a previous mail) of a VLANed network. The router is in the switch. Of course it doesn't know anything about 169.254.169.254. But it gets the packets for that address:<br>
<br>
19:48:18.399719 fa:16:3e:84:be:da > 00:00:5e:00:01:01, ethertype 802.1Q (0x8100), length 78: vlan 40, p 0, ethertype IPv4, 192.168.102.2.59526 > 169.254.169.254.http: Flags [S], seq 3099670947, win 14600, options [mss 1460,sackOK,TS val 121280 ecr 0,nop,wscale
6], length 0<br>
<br>
If a router was involved, the iptables associated with that router would take care of this. But this is using a VLAN, so it only goes through OpenVSwitch, hitting (AFAIK) iptables between the two bridges.<br>
<br>
So how does one redirect 169.254.169.254:80 to the metadata agent in this situation? I found some advice by googling that involves creating a 169.254.0.0/16 network, putting the metadata stuff there. But it didn't go beyond that, and while I may be able to
do the network, I have no idea what to do on the Quantum, excuse me, Neutron side. I guess the metadata agent is not needed, only the Nova metadata proxy. Or maybe just redirect the request there in the global iptables?<br>
<div><br>
<br>
<font face="Tahoma">Best regards / Mit freundlichen Grüßen <br>
Lutz Christoph <br>
<br>
-- <br>
<br>
Lutz Christoph <br>
<br>
arago Institut für komplexes Datenmanagement AG <br>
<br>
Eschersheimer Landstraße 526 - 532 <br>
60433 Frankfurt am Main <br>
<br>
eMail: <a href="mailto:lchristoph@arago.de">lchristoph@arago.de</a> - www: <a href="http://www.arago.de">
http://www.arago.de</a> <br>
Tel: 0172/6301004 <br>
Mobil: 0172/6301004 <br>
</font><font face="Tahoma"><br>
<a href="http://www.cloudops.de/"><img title="Klicken Sie, um die Größe zu ändern" border="0" height="88" width="350" src="http://www.arago.net/wp-content/uploads/2013/06/EmailSignatur1.png">
</a> <br>
<br>
-- <br>
Bankverbindung: Frankfurter Sparkasse, BLZ: 500 502 01, Kto.-Nr.: 79343 <br>
Vorstand: Hans-Christian Boos, Martin Friedrich <br>
Vorsitzender des Aufsichtsrats: Dr. Bernhard Walther <br>
Sitz: Kronberg im Taunus - HRB 5731 - Registergericht: Königstein i.Ts <br>
Ust.Idnr. DE 178572359 - Steuernummer 2603 003 228 43435 </font></div>
</div>
</div>
</blockquote>
<blockquote type="cite" style="">
<div><span>_______________________________________________</span><br>
<span>rhos-list mailing list</span><br>
<span><a href="mailto:rhos-list@redhat.com">rhos-list@redhat.com</a></span><br>
<span><a href="https://www.redhat.com/mailman/listinfo/rhos-list">https://www.redhat.com/mailman/listinfo/rhos-list</a></span></div>
</blockquote>
</div>
</div>
</div>
</body>
</html>