izenk edited a comment on issue #2514: [CLOUDSTACK-10346] Problem with NAT configuration and VMs not accessing each other via public IPs URL: https://github.com/apache/cloudstack/pull/2514#issuecomment-399504872 @rhtyd Sorry for asking here, but can't understand if my situation is covered by this fix or not. Am I understand correctly, now in 4.11.0.0 we can have such situation: vm1 -> vpc1 -> vr1:SNAT:public_ip (192.168.1.11) vm2 -> vpc2 -> vr2:SNAT:public_ip (192.168.1.12) Public network (192.168.0.0/16) gateway is 192.168.1.1 Public network is on eth1 on VR and there is an iptables mark rule for it ~~~ #iptables-save |grep 0x1 -A PREROUTING -i eth1 -m state --state NEW -j CONNMARK --set-xmark 0x1/0xffffffff ~~~ vr1 has rule for public network: ~~~ 32763: from all fwmark 0x1 lookup Table_eth1 ~~~ and rules for table are: ~~~ #ip route show table Table_eth1 default via 192.168.1.1 dev eth1 proto static ~~~ Such configuration means that vm2 can't connect to vm1 by public_ip(192.168.1.11), because it tries to route public ip through gate 192.168.1.1, when it should not (because 1.11 and 1.12 are in the same network) ~~~ #ip route get 192.168.1.12 mark 0x1 192.168.1.12 via 192.168.1.1 dev eth1 table Table_eth1 src 192.168.1.11 mark 1 ~~~ So, the result table should be: ~~~ #ip route show table Table_eth1 default via 192.168.1.1 dev eth1 proto static 192.168.0.0/16 dev eth1 scope link ~~~
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
