s_schultchen

cntr1b_pst_net.txt

Dec 16th, 2016
133
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.27 KB | None | 0 0
  1. ############ ip a
  2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  3. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4. inet 127.0.0.1/8 scope host lo
  5. valid_lft forever preferred_lft forever
  6. inet6 ::1/128 scope host
  7. valid_lft forever preferred_lft forever
  8. 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc pfifo_fast state UP qlen 1000
  9. link/ether d0:50:99:91:30:f6 brd ff:ff:ff:ff:ff:ff
  10. inet 10.0.0.106/24 brd 10.0.0.255 scope global dynamic enp3s0
  11. valid_lft 33961sec preferred_lft 33961sec
  12. inet6 fe80::d250:99ff:fe91:30f6/64 scope link
  13. valid_lft forever preferred_lft forever
  14. 3: enp3s0.5@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
  15. link/ether d0:50:99:91:30:f6 brd ff:ff:ff:ff:ff:ff
  16. inet6 fe80::d250:99ff:fe91:30f6/64 scope link
  17. valid_lft forever preferred_lft forever
  18. 4: enp3s0.4@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
  19. link/ether d0:50:99:91:30:f6 brd ff:ff:ff:ff:ff:ff
  20. inet6 fe80::d250:99ff:fe91:30f6/64 scope link
  21. valid_lft forever preferred_lft forever
  22. 5: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  23. link/ether 2a:1a:1c:77:fd:97 brd ff:ff:ff:ff:ff:ff
  24. 7: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  25. link/ether 52:21:88:29:90:40 brd ff:ff:ff:ff:ff:ff
  26. 9: br-int: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  27. link/ether f2:91:bc:3c:33:41 brd ff:ff:ff:ff:ff:ff
  28. 12: br-provider: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  29. link/ether c2:5a:6a:ed:c6:4d brd ff:ff:ff:ff:ff:ff
  30. 19: vxlan_sys_4789: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 65470 qdisc noqueue master ovs-system state UNKNOWN qlen 1000
  31. link/ether 76:0f:43:01:0f:9a brd ff:ff:ff:ff:ff:ff
  32.  
  33.  
  34. ############ ip r
  35. default via 10.0.0.1 dev enp3s0 proto static metric 100
  36. 10.0.0.0/24 dev enp3s0 proto kernel scope link src 10.0.0.106 metric 100
  37.  
  38.  
  39. ############ ip netns
  40. snat-47b2f138-3130-4ab8-9c96-0f402190fe41
  41. qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41
  42. ############ ip netns exec NAMESPACE ip a
  43.  
  44.  
  45. ############ip netns exec snat-47b2f138-3130-4ab8-9c96-0f402190fe41 ip a
  46. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  47. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  48. inet 127.0.0.1/8 scope host lo
  49. valid_lft forever preferred_lft forever
  50. inet6 ::1/128 scope host
  51. valid_lft forever preferred_lft forever
  52. 16: qg-46713a44-70: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000
  53. link/ether fa:16:3e:4c:82:7b brd ff:ff:ff:ff:ff:ff
  54. inet 10.0.1.116/24 brd 10.0.1.255 scope global qg-46713a44-70
  55. valid_lft forever preferred_lft forever
  56. inet6 fe80::f816:3eff:fe4c:827b/64 scope link
  57. valid_lft forever preferred_lft forever
  58. 18: sg-15cd47f6-9f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  59. link/ether fa:16:3e:32:6a:f9 brd ff:ff:ff:ff:ff:ff
  60. inet 10.0.12.23/24 brd 10.0.12.255 scope global sg-15cd47f6-9f
  61. valid_lft forever preferred_lft forever
  62. inet6 fe80::f816:3eff:fe32:6af9/64 scope link
  63. valid_lft forever preferred_lft forever
  64.  
  65.  
  66.  
  67. ############ip netns exec qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41 ip a
  68. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  69. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  70. inet 127.0.0.1/8 scope host lo
  71. valid_lft forever preferred_lft forever
  72. inet6 ::1/128 scope host
  73. valid_lft forever preferred_lft forever
  74. 17: qr-c08eeda3-3b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  75. link/ether fa:16:3e:1e:f9:ee brd ff:ff:ff:ff:ff:ff
  76. inet 10.0.12.1/24 brd 10.0.12.255 scope global qr-c08eeda3-3b
  77. valid_lft forever preferred_lft forever
  78. inet6 fe80::f816:3eff:fe1e:f9ee/64 scope link
  79. valid_lft forever preferred_lft forever
  80.  
  81. ############ ip netns exec NAMESPACE ip r
  82.  
  83.  
  84. ############ip netns exec snat-47b2f138-3130-4ab8-9c96-0f402190fe41 ip r
  85. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  86. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  87. inet 127.0.0.1/8 scope host lo
  88. valid_lft forever preferred_lft forever
  89. inet6 ::1/128 scope host
  90. valid_lft forever preferred_lft forever
  91. 16: qg-46713a44-70: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000
  92. link/ether fa:16:3e:4c:82:7b brd ff:ff:ff:ff:ff:ff
  93. inet 10.0.1.116/24 brd 10.0.1.255 scope global qg-46713a44-70
  94. valid_lft forever preferred_lft forever
  95. inet6 fe80::f816:3eff:fe4c:827b/64 scope link
  96. valid_lft forever preferred_lft forever
  97. 18: sg-15cd47f6-9f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  98. link/ether fa:16:3e:32:6a:f9 brd ff:ff:ff:ff:ff:ff
  99. inet 10.0.12.23/24 brd 10.0.12.255 scope global sg-15cd47f6-9f
  100. valid_lft forever preferred_lft forever
  101. inet6 fe80::f816:3eff:fe32:6af9/64 scope link
  102. valid_lft forever preferred_lft forever
  103.  
  104.  
  105.  
  106. ############ip netns exec qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41 ip r
  107. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  108. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  109. inet 127.0.0.1/8 scope host lo
  110. valid_lft forever preferred_lft forever
  111. inet6 ::1/128 scope host
  112. valid_lft forever preferred_lft forever
  113. 17: qr-c08eeda3-3b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  114. link/ether fa:16:3e:1e:f9:ee brd ff:ff:ff:ff:ff:ff
  115. inet 10.0.12.1/24 brd 10.0.12.255 scope global qr-c08eeda3-3b
  116. valid_lft forever preferred_lft forever
  117. inet6 fe80::f816:3eff:fe1e:f9ee/64 scope link
  118. valid_lft forever preferred_lft forever
  119.  
  120. ############ iptables-save
  121. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
  122. *filter
  123. :INPUT ACCEPT [1756960:637587242]
  124. :FORWARD ACCEPT [0:0]
  125. :OUTPUT ACCEPT [1735350:549163601]
  126. :neutron-filter-top - [0:0]
  127. :neutron-openvswi-FORWARD - [0:0]
  128. :neutron-openvswi-INPUT - [0:0]
  129. :neutron-openvswi-OUTPUT - [0:0]
  130. :neutron-openvswi-local - [0:0]
  131. :neutron-openvswi-sg-chain - [0:0]
  132. :neutron-openvswi-sg-fallback - [0:0]
  133. :nova-api-FORWARD - [0:0]
  134. :nova-api-INPUT - [0:0]
  135. :nova-api-OUTPUT - [0:0]
  136. :nova-api-local - [0:0]
  137. :nova-filter-top - [0:0]
  138. -A INPUT -j neutron-openvswi-INPUT
  139. -A INPUT -j nova-api-INPUT
  140. -A FORWARD -j neutron-filter-top
  141. -A FORWARD -j neutron-openvswi-FORWARD
  142. -A FORWARD -j nova-filter-top
  143. -A FORWARD -j nova-api-FORWARD
  144. -A OUTPUT -j neutron-filter-top
  145. -A OUTPUT -j neutron-openvswi-OUTPUT
  146. -A OUTPUT -j nova-filter-top
  147. -A OUTPUT -j nova-api-OUTPUT
  148. -A neutron-filter-top -j neutron-openvswi-local
  149. -A neutron-openvswi-sg-chain -j ACCEPT
  150. -A neutron-openvswi-sg-fallback -m comment --comment "Default drop rule for unmatched traffic." -j DROP
  151. -A nova-api-INPUT -d 10.0.0.106/32 -p tcp -m tcp --dport 8775 -j ACCEPT
  152. -A nova-filter-top -j nova-api-local
  153. COMMIT
  154. # Completed on Fri Dec 16 20:19:35 2016
  155. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
  156. *mangle
  157. :PREROUTING ACCEPT [1770462:638288434]
  158. :INPUT ACCEPT [1770462:638288434]
  159. :FORWARD ACCEPT [0:0]
  160. :OUTPUT ACCEPT [1735350:549163601]
  161. :POSTROUTING ACCEPT [1735350:549163601]
  162. :neutron-openvswi-FORWARD - [0:0]
  163. :neutron-openvswi-INPUT - [0:0]
  164. :neutron-openvswi-OUTPUT - [0:0]
  165. :neutron-openvswi-POSTROUTING - [0:0]
  166. :neutron-openvswi-PREROUTING - [0:0]
  167. :neutron-openvswi-mark - [0:0]
  168. :nova-api-POSTROUTING - [0:0]
  169. -A PREROUTING -j neutron-openvswi-PREROUTING
  170. -A INPUT -j neutron-openvswi-INPUT
  171. -A FORWARD -j neutron-openvswi-FORWARD
  172. -A OUTPUT -j neutron-openvswi-OUTPUT
  173. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  174. -A POSTROUTING -j nova-api-POSTROUTING
  175. -A neutron-openvswi-PREROUTING -j neutron-openvswi-mark
  176. COMMIT
  177. # Completed on Fri Dec 16 20:19:35 2016
  178. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
  179. *nat
  180. :PREROUTING ACCEPT [49507:3019600]
  181. :INPUT ACCEPT [49507:3019600]
  182. :OUTPUT ACCEPT [7370:517303]
  183. :POSTROUTING ACCEPT [7370:517303]
  184. :neutron-openvswi-OUTPUT - [0:0]
  185. :neutron-openvswi-POSTROUTING - [0:0]
  186. :neutron-openvswi-PREROUTING - [0:0]
  187. :neutron-openvswi-float-snat - [0:0]
  188. :neutron-openvswi-snat - [0:0]
  189. :neutron-postrouting-bottom - [0:0]
  190. :nova-api-OUTPUT - [0:0]
  191. :nova-api-POSTROUTING - [0:0]
  192. :nova-api-PREROUTING - [0:0]
  193. :nova-api-float-snat - [0:0]
  194. :nova-api-snat - [0:0]
  195. :nova-postrouting-bottom - [0:0]
  196. -A PREROUTING -j neutron-openvswi-PREROUTING
  197. -A PREROUTING -j nova-api-PREROUTING
  198. -A OUTPUT -j neutron-openvswi-OUTPUT
  199. -A OUTPUT -j nova-api-OUTPUT
  200. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  201. -A POSTROUTING -j neutron-postrouting-bottom
  202. -A POSTROUTING -j nova-api-POSTROUTING
  203. -A POSTROUTING -j nova-postrouting-bottom
  204. -A neutron-openvswi-snat -j neutron-openvswi-float-snat
  205. -A neutron-postrouting-bottom -m comment --comment "Perform source NAT on outgoing traffic." -j neutron-openvswi-snat
  206. -A nova-api-snat -j nova-api-float-snat
  207. -A nova-postrouting-bottom -j nova-api-snat
  208. COMMIT
  209. # Completed on Fri Dec 16 20:19:35 2016
  210. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:35 2016
  211. *raw
  212. :PREROUTING ACCEPT [1770462:638288434]
  213. :OUTPUT ACCEPT [1735350:549163601]
  214. :neutron-openvswi-OUTPUT - [0:0]
  215. :neutron-openvswi-PREROUTING - [0:0]
  216. -A PREROUTING -j neutron-openvswi-PREROUTING
  217. -A OUTPUT -j neutron-openvswi-OUTPUT
  218. COMMIT
  219. # Completed on Fri Dec 16 20:19:35 2016
Advertisement
Add Comment
Please, Sign In to add comment