Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- berlioz ~ # ip ad sh
- 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
- link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
- valid_lft forever preferred_lft forever
- inet 169.254.169.254/32 scope link lo
- valid_lft forever preferred_lft forever
- inet6 ::1/128 scope host
- valid_lft forever preferred_lft forever
- 2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br100 state UP group default qlen 1000
- link/ether 00:24:1d:8f:c2:92 brd ff:ff:ff:ff:ff:ff
- inet6 fe80::224:1dff:fe8f:c292/64 scope link
- valid_lft forever preferred_lft forever
- 3: br100: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
- link/ether 00:24:1d:8f:c2:92 brd ff:ff:ff:ff:ff:ff
- inet 192.168.0.3/20 brd 192.168.15.255 scope global br100
- valid_lft forever preferred_lft forever
- inet 10.11.3.3/24 brd 10.11.3.255 scope global br100
- valid_lft forever preferred_lft forever
- inet6 fe80::224:1dff:fe8f:c292/64 scope link
- valid_lft forever preferred_lft forever
- 4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
- link/ether 56:84:7a:fe:97:99 brd ff:ff:ff:ff:ff:ff
- inet 172.17.42.1/16 scope global docker0
- valid_lft forever preferred_lft forever
- 6: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
- link/ether 56:0f:94:d4:d1:94 brd ff:ff:ff:ff:ff:ff
- inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
- valid_lft forever preferred_lft forever
- 12: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br100 state UNKNOWN group default qlen 500
- link/ether fe:16:3e:7f:a5:87 brd ff:ff:ff:ff:ff:ff
- inet6 fe80::fc16:3eff:fe7f:a587/64 scope link
- valid_lft forever preferred_lft forever
- berlioz ~ # ip ro sh
- default via 10.11.3.1 dev br100 metric 3
- 10.11.3.0/24 dev br100 proto kernel scope link src 10.11.3.3
- 127.0.0.0/8 dev lo scope host
- 127.0.0.0/8 via 127.0.0.1 dev lo
- 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.42.1
- 192.168.0.0/20 dev br100 proto kernel scope link src 192.168.0.3
- 192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1
- berlioz ~ # iptables -L -n -v -t nat
- Chain PREROUTING (policy ACCEPT 144 packets, 21696 bytes)
- pkts bytes target prot opt in out source destination
- 98 11616 nova-network-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
- 86 10984 nova-compute-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
- 52 3337 DOCKER all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL
- Chain INPUT (policy ACCEPT 50 packets, 3217 bytes)
- pkts bytes target prot opt in out source destination
- Chain OUTPUT (policy ACCEPT 4433 packets, 311K bytes)
- pkts bytes target prot opt in out source destination
- 361 29548 nova-network-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
- 876 63686 nova-compute-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
- 6 3456 DOCKER all -- * * 0.0.0.0/0 !127.0.0.0/8 ADDRTYPE match dst-type LOCAL
- Chain POSTROUTING (policy ACCEPT 4403 packets, 295K bytes)
- pkts bytes target prot opt in out source destination
- 437 39796 nova-network-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
- 881 63942 nova-compute-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 RETURN all -- * * 192.168.122.0/24 224.0.0.0/24
- 0 0 RETURN all -- * * 192.168.122.0/24 255.255.255.255
- 0 0 MASQUERADE tcp -- * * 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
- 0 0 MASQUERADE udp -- * * 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
- 0 0 MASQUERADE all -- * * 192.168.122.0/24 !192.168.122.0/24
- 4721 318K nova-postrouting-bottom all -- * * 0.0.0.0/0 0.0.0.0/0
- 3 483 MASQUERADE all -- * * 172.17.0.0/16 !172.17.0.0/16
- Chain DOCKER (2 references)
- pkts bytes target prot opt in out source destination
- Chain nova-compute-OUTPUT (1 references)
- pkts bytes target prot opt in out source destination
- Chain nova-compute-POSTROUTING (1 references)
- pkts bytes target prot opt in out source destination
- Chain nova-compute-PREROUTING (1 references)
- pkts bytes target prot opt in out source destination
- Chain nova-compute-float-snat (1 references)
- pkts bytes target prot opt in out source destination
- Chain nova-compute-snat (1 references)
- pkts bytes target prot opt in out source destination
- 880 63366 nova-compute-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
- Chain nova-network-OUTPUT (1 references)
- pkts bytes target prot opt in out source destination
- Chain nova-network-POSTROUTING (1 references)
- pkts bytes target prot opt in out source destination
- 49 2534 ACCEPT all -- * * 192.168.0.0/20 10.11.3.1
- 22 7458 ACCEPT all -- * * 192.168.0.0/20 192.168.0.0/20 ! ctstate DNAT
- Chain nova-network-PREROUTING (1 references)
- pkts bytes target prot opt in out source destination
- 20 1200 DNAT tcp -- * * 0.0.0.0/0 169.254.169.254 tcp dpt:80 to:10.11.3.1:8775
- Chain nova-network-float-snat (1 references)
- pkts bytes target prot opt in out source destination
- Chain nova-network-snat (1 references)
- pkts bytes target prot opt in out source destination
- 366 29804 nova-network-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
- 0 0 SNAT all -- * enp2s0 192.168.0.0/20 0.0.0.0/0 to:10.11.3.3
- Chain nova-postrouting-bottom (1 references)
- pkts bytes target prot opt in out source destination
- 366 29804 nova-network-snat all -- * * 0.0.0.0/0 0.0.0.0/0
- 880 63366 nova-compute-snat all -- * * 0.0.0.0/0 0.0.0.0/0
- berlioz ~ #
Advertisement
Add Comment
Please, Sign In to add comment
