API tools faq
paste
s_schultchen

cntr1c_pst_net.txt

s_schultchen
Dec 16th, 2016
153
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.41 KB | None | 0 0
raw download clone embed print report
  1. ############ ip a
  2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  3. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4. inet 127.0.0.1/8 scope host lo
  5. valid_lft forever preferred_lft forever
  6. inet6 ::1/128 scope host
  7. valid_lft forever preferred_lft forever
  8. 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc pfifo_fast state UP qlen 1000
  9. link/ether d0:50:99:91:32:52 brd ff:ff:ff:ff:ff:ff
  10. inet 10.0.0.110/24 brd 10.0.0.255 scope global dynamic enp3s0
  11. valid_lft 33957sec preferred_lft 33957sec
  12. inet6 fe80::d250:99ff:fe91:3252/64 scope link
  13. valid_lft forever preferred_lft forever
  14. 3: enp3s0.5@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
  15. link/ether d0:50:99:91:32:52 brd ff:ff:ff:ff:ff:ff
  16. inet6 fe80::d250:99ff:fe91:3252/64 scope link
  17. valid_lft forever preferred_lft forever
  18. 4: enp3s0.4@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
  19. link/ether d0:50:99:91:32:52 brd ff:ff:ff:ff:ff:ff
  20. inet6 fe80::d250:99ff:fe91:3252/64 scope link
  21. valid_lft forever preferred_lft forever
  22. 5: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  23. link/ether ae:d6:f7:16:dc:1c brd ff:ff:ff:ff:ff:ff
  24. 6: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  25. link/ether 8a:4c:d5:f9:39:4f brd ff:ff:ff:ff:ff:ff
  26. 7: br-int: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  27. link/ether fa:9c:19:5a:a8:44 brd ff:ff:ff:ff:ff:ff
  28. 8: br-provider: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  29. link/ether 76:86:69:9c:45:42 brd ff:ff:ff:ff:ff:ff
  30.  
  31.  
  32. ############ ip r
  33. default via 10.0.0.1 dev enp3s0 proto static metric 100
  34. 10.0.0.0/24 dev enp3s0 proto kernel scope link src 10.0.0.110 metric 100
  35.  
  36.  
  37. ############ ip netns
  38. ############ ip netns exec NAMESPACE ip a
  39. ############ ip netns exec NAMESPACE ip r
  40. ############ iptables-save
  41. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:36 2016
  42. *filter
  43. :INPUT ACCEPT [1391485:506195850]
  44. :FORWARD ACCEPT [0:0]
  45. :OUTPUT ACCEPT [1379144:459425096]
  46. :neutron-filter-top - [0:0]
  47. :neutron-openvswi-FORWARD - [0:0]
  48. :neutron-openvswi-INPUT - [0:0]
  49. :neutron-openvswi-OUTPUT - [0:0]
  50. :neutron-openvswi-local - [0:0]
  51. :neutron-openvswi-sg-chain - [0:0]
  52. :neutron-openvswi-sg-fallback - [0:0]
  53. :nova-api-FORWARD - [0:0]
  54. :nova-api-INPUT - [0:0]
  55. :nova-api-OUTPUT - [0:0]
  56. :nova-api-local - [0:0]
  57. :nova-filter-top - [0:0]
  58. -A INPUT -j neutron-openvswi-INPUT
  59. -A INPUT -j nova-api-INPUT
  60. -A FORWARD -j neutron-filter-top
  61. -A FORWARD -j neutron-openvswi-FORWARD
  62. -A FORWARD -j nova-filter-top
  63. -A FORWARD -j nova-api-FORWARD
  64. -A OUTPUT -j neutron-filter-top
  65. -A OUTPUT -j neutron-openvswi-OUTPUT
  66. -A OUTPUT -j nova-filter-top
  67. -A OUTPUT -j nova-api-OUTPUT
  68. -A neutron-filter-top -j neutron-openvswi-local
  69. -A neutron-openvswi-sg-chain -j ACCEPT
  70. -A neutron-openvswi-sg-fallback -m comment --comment "Default drop rule for unmatched traffic." -j DROP
  71. -A nova-api-INPUT -d 10.0.0.110/32 -p tcp -m tcp --dport 8775 -j ACCEPT
  72. -A nova-filter-top -j nova-api-local
  73. COMMIT
  74. # Completed on Fri Dec 16 20:19:36 2016
  75. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:36 2016
  76. *mangle
  77. :PREROUTING ACCEPT [1401197:506687922]
  78. :INPUT ACCEPT [1401197:506687922]
  79. :FORWARD ACCEPT [0:0]
  80. :OUTPUT ACCEPT [1379142:459424898]
  81. :POSTROUTING ACCEPT [1379142:459424898]
  82. :neutron-openvswi-FORWARD - [0:0]
  83. :neutron-openvswi-INPUT - [0:0]
  84. :neutron-openvswi-OUTPUT - [0:0]
  85. :neutron-openvswi-POSTROUTING - [0:0]
  86. :neutron-openvswi-PREROUTING - [0:0]
  87. :neutron-openvswi-mark - [0:0]
  88. :nova-api-POSTROUTING - [0:0]
  89. -A PREROUTING -j neutron-openvswi-PREROUTING
  90. -A INPUT -j neutron-openvswi-INPUT
  91. -A FORWARD -j neutron-openvswi-FORWARD
  92. -A OUTPUT -j neutron-openvswi-OUTPUT
  93. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  94. -A POSTROUTING -j nova-api-POSTROUTING
  95. -A neutron-openvswi-PREROUTING -j neutron-openvswi-mark
  96. COMMIT
  97. # Completed on Fri Dec 16 20:19:36 2016
  98. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:36 2016
  99. *nat
  100. :PREROUTING ACCEPT [36674:2231220]
  101. :INPUT ACCEPT [36674:2231220]
  102. :OUTPUT ACCEPT [5002:350554]
  103. :POSTROUTING ACCEPT [5002:350554]
  104. :neutron-openvswi-OUTPUT - [0:0]
  105. :neutron-openvswi-POSTROUTING - [0:0]
  106. :neutron-openvswi-PREROUTING - [0:0]
  107. :neutron-openvswi-float-snat - [0:0]
  108. :neutron-openvswi-snat - [0:0]
  109. :neutron-postrouting-bottom - [0:0]
  110. :nova-api-OUTPUT - [0:0]
  111. :nova-api-POSTROUTING - [0:0]
  112. :nova-api-PREROUTING - [0:0]
  113. :nova-api-float-snat - [0:0]
  114. :nova-api-snat - [0:0]
  115. :nova-postrouting-bottom - [0:0]
  116. -A PREROUTING -j neutron-openvswi-PREROUTING
  117. -A PREROUTING -j nova-api-PREROUTING
  118. -A OUTPUT -j neutron-openvswi-OUTPUT
  119. -A OUTPUT -j nova-api-OUTPUT
  120. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  121. -A POSTROUTING -j neutron-postrouting-bottom
  122. -A POSTROUTING -j nova-api-POSTROUTING
  123. -A POSTROUTING -j nova-postrouting-bottom
  124. -A neutron-openvswi-snat -j neutron-openvswi-float-snat
  125. -A neutron-postrouting-bottom -m comment --comment "Perform source NAT on outgoing traffic." -j neutron-openvswi-snat
  126. -A nova-api-snat -j nova-api-float-snat
  127. -A nova-postrouting-bottom -j nova-api-snat
  128. COMMIT
  129. # Completed on Fri Dec 16 20:19:36 2016
  130. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:36 2016
  131. *raw
  132. :PREROUTING ACCEPT [1401197:506687922]
  133. :OUTPUT ACCEPT [1379142:459424898]
  134. :neutron-openvswi-OUTPUT - [0:0]
  135. :neutron-openvswi-PREROUTING - [0:0]
  136. -A PREROUTING -j neutron-openvswi-PREROUTING
  137. -A OUTPUT -j neutron-openvswi-OUTPUT
  138. COMMIT
  139. # Completed on Fri Dec 16 20:19:36 2016
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!