Re: [openstack-dev] [nova] Network issue with libvirt-xen driver, iptables race

2015-07-03 Thread Daniel P. Berrange
On Fri, Jul 03, 2015 at 03:55:37PM +0100, Anthony PERARD wrote: On Wed, Jul 01, 2015 at 02:45:13PM +0100, Daniel P. Berrange wrote: On Tue, Jun 30, 2015 at 03:02:54PM +0100, Anthony PERARD wrote: Hi all, We have an issue with the driver libvirt-xen. When a guest is started by Nova,

Re: [openstack-dev] [nova] Network issue with libvirt-xen driver, iptables race

2015-07-01 Thread Anthony PERARD
On Wed, Jul 01, 2015 at 10:26:43AM +0100, Bob Ball wrote: Hi Anthony, The Xen script is simply calling those commands: ... iptables -I FORWARD -m physdev --physdev-is-bridged --physdev-in $dev -j ACCEPT iptables -I FORWARD -m physdev --physdev-is-bridged --physdev-out $dev -j

Re: [openstack-dev] [nova] Network issue with libvirt-xen driver, iptables race

2015-07-01 Thread Daniel P. Berrange
On Tue, Jun 30, 2015 at 03:02:54PM +0100, Anthony PERARD wrote: Hi all, We have an issue with the driver libvirt-xen. When a guest is started by Nova, nova-network is going to do some network setup and call iptables-{save,restore}, and the Xen toolstack is going to setup the vif of the

Re: [openstack-dev] [nova] Network issue with libvirt-xen driver, iptables race

2015-07-01 Thread Bob Ball
Hi Anthony, The Xen script is simply calling those commands: ... iptables -I FORWARD -m physdev --physdev-is-bridged --physdev-in $dev -j ACCEPT iptables -I FORWARD -m physdev --physdev-is-bridged --physdev-out $dev -j ACCEPT Are you saying that these two commands aren't needed to be

[openstack-dev] [nova] Network issue with libvirt-xen driver, iptables race

2015-06-30 Thread Anthony PERARD
Hi all, We have an issue with the driver libvirt-xen. When a guest is started by Nova, nova-network is going to do some network setup and call iptables-{save,restore}, and the Xen toolstack is going to setup the vif of the guest, via a script, which also update the iptables. The Xen script is