Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ############ ip a
- 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
- link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- inet 127.0.0.1/8 scope host lo
- valid_lft forever preferred_lft forever
- inet6 ::1/128 scope host
- valid_lft forever preferred_lft forever
- 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc pfifo_fast state UP qlen 1000
- link/ether d0:50:99:91:30:f6 brd ff:ff:ff:ff:ff:ff
- inet 10.0.0.106/24 brd 10.0.0.255 scope global dynamic enp3s0
- valid_lft 33961sec preferred_lft 33961sec
- inet6 fe80::d250:99ff:fe91:30f6/64 scope link
- valid_lft forever preferred_lft forever
- 3: enp3s0.5@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
- link/ether d0:50:99:91:30:f6 brd ff:ff:ff:ff:ff:ff
- inet6 fe80::d250:99ff:fe91:30f6/64 scope link
- valid_lft forever preferred_lft forever
- 4: enp3s0.4@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
- link/ether d0:50:99:91:30:f6 brd ff:ff:ff:ff:ff:ff
- inet6 fe80::d250:99ff:fe91:30f6/64 scope link
- valid_lft forever preferred_lft forever
- 5: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
- link/ether 2a:1a:1c:77:fd:97 brd ff:ff:ff:ff:ff:ff
- 7: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
- link/ether 52:21:88:29:90:40 brd ff:ff:ff:ff:ff:ff
- 9: br-int: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
- link/ether f2:91:bc:3c:33:41 brd ff:ff:ff:ff:ff:ff
- 12: br-provider: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
- link/ether c2:5a:6a:ed:c6:4d brd ff:ff:ff:ff:ff:ff
- 19: vxlan_sys_4789: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 65470 qdisc noqueue master ovs-system state UNKNOWN qlen 1000
- link/ether 76:0f:43:01:0f:9a brd ff:ff:ff:ff:ff:ff
- ############ ip r
- default via 10.0.0.1 dev enp3s0 proto static metric 100
- 10.0.0.0/24 dev enp3s0 proto kernel scope link src 10.0.0.106 metric 100
- ############ ip netns
- snat-47b2f138-3130-4ab8-9c96-0f402190fe41
- qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41
- ############ ip netns exec NAMESPACE ip a
- ############ip netns exec snat-47b2f138-3130-4ab8-9c96-0f402190fe41 ip a
- 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
- link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- inet 127.0.0.1/8 scope host lo
- valid_lft forever preferred_lft forever
- inet6 ::1/128 scope host
- valid_lft forever preferred_lft forever
- 16: qg-46713a44-70: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000
- link/ether fa:16:3e:4c:82:7b brd ff:ff:ff:ff:ff:ff
- inet 10.0.1.116/24 brd 10.0.1.255 scope global qg-46713a44-70
- valid_lft forever preferred_lft forever
- inet6 fe80::f816:3eff:fe4c:827b/64 scope link
- valid_lft forever preferred_lft forever
- 18: sg-15cd47f6-9f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
- link/ether fa:16:3e:32:6a:f9 brd ff:ff:ff:ff:ff:ff
- inet 10.0.12.23/24 brd 10.0.12.255 scope global sg-15cd47f6-9f
- valid_lft forever preferred_lft forever
- inet6 fe80::f816:3eff:fe32:6af9/64 scope link
- valid_lft forever preferred_lft forever
- ############ip netns exec qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41 ip a
- 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
- link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- inet 127.0.0.1/8 scope host lo
- valid_lft forever preferred_lft forever
- inet6 ::1/128 scope host
- valid_lft forever preferred_lft forever
- 17: qr-c08eeda3-3b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
- link/ether fa:16:3e:1e:f9:ee brd ff:ff:ff:ff:ff:ff
- inet 10.0.12.1/24 brd 10.0.12.255 scope global qr-c08eeda3-3b
- valid_lft forever preferred_lft forever
- inet6 fe80::f816:3eff:fe1e:f9ee/64 scope link
- valid_lft forever preferred_lft forever
- ############ ip netns exec NAMESPACE ip r
- ############ip netns exec snat-47b2f138-3130-4ab8-9c96-0f402190fe41 ip r
- 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
- link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- inet 127.0.0.1/8 scope host lo
- valid_lft forever preferred_lft forever
- inet6 ::1/128 scope host
- valid_lft forever preferred_lft forever
- 16: qg-46713a44-70: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000
- link/ether fa:16:3e:4c:82:7b brd ff:ff:ff:ff:ff:ff
- inet 10.0.1.116/24 brd 10.0.1.255 scope global qg-46713a44-70
- valid_lft forever preferred_lft forever
- inet6 fe80::f816:3eff:fe4c:827b/64 scope link
- valid_lft forever preferred_lft forever
- 18: sg-15cd47f6-9f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
- link/ether fa:16:3e:32:6a:f9 brd ff:ff:ff:ff:ff:ff
- inet 10.0.12.23/24 brd 10.0.12.255 scope global sg-15cd47f6-9f
- valid_lft forever preferred_lft forever
- inet6 fe80::f816:3eff:fe32:6af9/64 scope link
- valid_lft forever preferred_lft forever
- ############ip netns exec qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41 ip r
- 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
- link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- inet 127.0.0.1/8 scope host lo
- valid_lft forever preferred_lft forever
- inet6 ::1/128 scope host
- valid_lft forever preferred_lft forever
- 17: qr-c08eeda3-3b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
- link/ether fa:16:3e:1e:f9:ee brd ff:ff:ff:ff:ff:ff
- inet 10.0.12.1/24 brd 10.0.12.255 scope global qr-c08eeda3-3b
- valid_lft forever preferred_lft forever
- inet6 fe80::f816:3eff:fe1e:f9ee/64 scope link
- valid_lft forever preferred_lft forever
- ############ iptables-save
- # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
- *filter
- :INPUT ACCEPT [1756960:637587242]
- :FORWARD ACCEPT [0:0]
- :OUTPUT ACCEPT [1735350:549163601]
- :neutron-filter-top - [0:0]
- :neutron-openvswi-FORWARD - [0:0]
- :neutron-openvswi-INPUT - [0:0]
- :neutron-openvswi-OUTPUT - [0:0]
- :neutron-openvswi-local - [0:0]
- :neutron-openvswi-sg-chain - [0:0]
- :neutron-openvswi-sg-fallback - [0:0]
- :nova-api-FORWARD - [0:0]
- :nova-api-INPUT - [0:0]
- :nova-api-OUTPUT - [0:0]
- :nova-api-local - [0:0]
- :nova-filter-top - [0:0]
- -A INPUT -j neutron-openvswi-INPUT
- -A INPUT -j nova-api-INPUT
- -A FORWARD -j neutron-filter-top
- -A FORWARD -j neutron-openvswi-FORWARD
- -A FORWARD -j nova-filter-top
- -A FORWARD -j nova-api-FORWARD
- -A OUTPUT -j neutron-filter-top
- -A OUTPUT -j neutron-openvswi-OUTPUT
- -A OUTPUT -j nova-filter-top
- -A OUTPUT -j nova-api-OUTPUT
- -A neutron-filter-top -j neutron-openvswi-local
- -A neutron-openvswi-sg-chain -j ACCEPT
- -A neutron-openvswi-sg-fallback -m comment --comment "Default drop rule for unmatched traffic." -j DROP
- -A nova-api-INPUT -d 10.0.0.106/32 -p tcp -m tcp --dport 8775 -j ACCEPT
- -A nova-filter-top -j nova-api-local
- COMMIT
- # Completed on Fri Dec 16 20:19:35 2016
- # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
- *mangle
- :PREROUTING ACCEPT [1770462:638288434]
- :INPUT ACCEPT [1770462:638288434]
- :FORWARD ACCEPT [0:0]
- :OUTPUT ACCEPT [1735350:549163601]
- :POSTROUTING ACCEPT [1735350:549163601]
- :neutron-openvswi-FORWARD - [0:0]
- :neutron-openvswi-INPUT - [0:0]
- :neutron-openvswi-OUTPUT - [0:0]
- :neutron-openvswi-POSTROUTING - [0:0]
- :neutron-openvswi-PREROUTING - [0:0]
- :neutron-openvswi-mark - [0:0]
- :nova-api-POSTROUTING - [0:0]
- -A PREROUTING -j neutron-openvswi-PREROUTING
- -A INPUT -j neutron-openvswi-INPUT
- -A FORWARD -j neutron-openvswi-FORWARD
- -A OUTPUT -j neutron-openvswi-OUTPUT
- -A POSTROUTING -j neutron-openvswi-POSTROUTING
- -A POSTROUTING -j nova-api-POSTROUTING
- -A neutron-openvswi-PREROUTING -j neutron-openvswi-mark
- COMMIT
- # Completed on Fri Dec 16 20:19:35 2016
- # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
- *nat
- :PREROUTING ACCEPT [49507:3019600]
- :INPUT ACCEPT [49507:3019600]
- :OUTPUT ACCEPT [7370:517303]
- :POSTROUTING ACCEPT [7370:517303]
- :neutron-openvswi-OUTPUT - [0:0]
- :neutron-openvswi-POSTROUTING - [0:0]
- :neutron-openvswi-PREROUTING - [0:0]
- :neutron-openvswi-float-snat - [0:0]
- :neutron-openvswi-snat - [0:0]
- :neutron-postrouting-bottom - [0:0]
- :nova-api-OUTPUT - [0:0]
- :nova-api-POSTROUTING - [0:0]
- :nova-api-PREROUTING - [0:0]
- :nova-api-float-snat - [0:0]
- :nova-api-snat - [0:0]
- :nova-postrouting-bottom - [0:0]
- -A PREROUTING -j neutron-openvswi-PREROUTING
- -A PREROUTING -j nova-api-PREROUTING
- -A OUTPUT -j neutron-openvswi-OUTPUT
- -A OUTPUT -j nova-api-OUTPUT
- -A POSTROUTING -j neutron-openvswi-POSTROUTING
- -A POSTROUTING -j neutron-postrouting-bottom
- -A POSTROUTING -j nova-api-POSTROUTING
- -A POSTROUTING -j nova-postrouting-bottom
- -A neutron-openvswi-snat -j neutron-openvswi-float-snat
- -A neutron-postrouting-bottom -m comment --comment "Perform source NAT on outgoing traffic." -j neutron-openvswi-snat
- -A nova-api-snat -j nova-api-float-snat
- -A nova-postrouting-bottom -j nova-api-snat
- COMMIT
- # Completed on Fri Dec 16 20:19:35 2016
- # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
- *raw
- :PREROUTING ACCEPT [1770462:638288434]
- :OUTPUT ACCEPT [1735350:549163601]
- :neutron-openvswi-OUTPUT - [0:0]
- :neutron-openvswi-PREROUTING - [0:0]
- -A PREROUTING -j neutron-openvswi-PREROUTING
- -A OUTPUT -j neutron-openvswi-OUTPUT
- COMMIT
- # Completed on Fri Dec 16 20:19:35 2016
Advertisement
Add Comment
Please, Sign In to add comment