Re: [openstack-dev] Linux kernel IPv4 configuration during the neutron installation

2015-11-13 Thread JinXing F 
Yes,I don't understand why Neutron needs enable ip_forward and disable RPF.
And I also don't understand where the neutron need this config during the
instance connect to the extrernal network.

I read the neutron code, found when the L3 agent creating, it needs the
ip_forward config,but i'm not find the RPF config in the neutron code.

Thank you very much!


2015-11-11 18:25 GMT+08:00 JinXing F :

> Hi, guys:
>
> during the neutron installation guide, I found that we need to config
> the linux kernel as bellow:
>
> net.ipv4.ip_forward=1
>
> net.ipv4.conf.all.rp_filter=0
>
> net.ipv4.conf.default.rp_filter=0
>
>
> the first one is the ip address translation between LAN and WLAN, the
> second and third command is used for "Reverse Path Filtering".
>
> I cann't understand the purpose of the config in the neutron.
>
> 1. If the instance in compute node connect with exteral network,what's the
> function of the three config?
>
> 2. The instance connect with each others, what's the function of the three
> config?
>
>
> I am very confused about this config.Please explain the answer to me.
>
> Thanks.
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] Linux kernel IPv4 configuration during the neutron installation

2015-11-13 Thread Akihiro Motoki 
Could you share the exact place of the installation guide?
I would like to check it.

Are you talking about the network node?

I think these settings are required when you configure a network node
without network namespace.

If we use network namespace in a network node, I don't think we need
these settings in a host of a network node.
ip_forward=1 is set automatically in a router network namespace.

I checked my Juno production environment  with network namespace, I
see the following in a host level.
It uses Ubuntu 14.04.

$ cat /proc/sys/net/ipv4/ip_forward
0
$ cat /proc/sys/net/ipv4/conf/all/rp_filter
1
$ cat /proc/sys/net/ipv4/conf/default/rp_filter
1

Akihiro

2015-11-13 18:51 GMT+09:00 JinXing F :
> Yes,I don't understand why Neutron needs enable ip_forward and disable RPF.
> And I also don't understand where the neutron need this config during the
> instance connect to the extrernal network.
>
> I read the neutron code, found when the L3 agent creating, it needs the
> ip_forward config,but i'm not find the RPF config in the neutron code.
>
> Thank you very much!
>
>
> 2015-11-11 18:25 GMT+08:00 JinXing F :
>>
>> Hi, guys:
>>
>> during the neutron installation guide, I found that we need to config
>> the linux kernel as bellow:
>>
>> net.ipv4.ip_forward=1
>>
>> net.ipv4.conf.all.rp_filter=0
>>
>> net.ipv4.conf.default.rp_filter=0
>>
>>
>> the first one is the ip address translation between LAN and WLAN, the
>> second and third command is used for "Reverse Path Filtering".
>>
>> I cann't understand the purpose of the config in the neutron.
>>
>> 1. If the instance in compute node connect with exteral network,what's the
>> function of the three config?
>>
>> 2. The instance connect with each others, what's the function of the three
>> config?
>>
>>
>> I am very confused about this config.Please explain the answer to me.
>>
>> Thanks.
>
>

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] Linux kernel IPv4 configuration during the neutron installation

2015-11-13 Thread JinXing F 
This installation guide is:
http://docs.openstack.org/juno/install-guide/install/yum/content/neutron-network-node.html#treeDiv

In Centos 7,controle node and network node in one machine.my output is:
[root@controller-59 ~]# cat /proc/sys/net/ipv4/ip_forward
1
[root@controller-59 ~]# cat /proc/sys/net/ipv4/conf/all/rp_filter
0
[root@controller-59 ~]# cat /proc/sys/net/ipv4/conf/default/rp_filter
0


2015-11-13 18:01 GMT+08:00 Akihiro Motoki :

> Could you share the exact place of the installation guide?
> I would like to check it.
>
> Are you talking about the network node?
>
> I think these settings are required when you configure a network node
> without network namespace.
>
> If we use network namespace in a network node, I don't think we need
> these settings in a host of a network node.
> ip_forward=1 is set automatically in a router network namespace.
>
> I checked my Juno production environment  with network namespace, I
> see the following in a host level.
> It uses Ubuntu 14.04.
>
> $ cat /proc/sys/net/ipv4/ip_forward
> 0
> $ cat /proc/sys/net/ipv4/conf/all/rp_filter
> 1
> $ cat /proc/sys/net/ipv4/conf/default/rp_filter
> 1
>
> Akihiro
>
> 2015-11-13 18:51 GMT+09:00 JinXing F :
> > Yes,I don't understand why Neutron needs enable ip_forward and disable
> RPF.
> > And I also don't understand where the neutron need this config during the
> > instance connect to the extrernal network.
> >
> > I read the neutron code, found when the L3 agent creating, it needs the
> > ip_forward config,but i'm not find the RPF config in the neutron code.
> >
> > Thank you very much!
> >
> >
> > 2015-11-11 18:25 GMT+08:00 JinXing F :
> >>
> >> Hi, guys:
> >>
> >> during the neutron installation guide, I found that we need to
> config
> >> the linux kernel as bellow:
> >>
> >> net.ipv4.ip_forward=1
> >>
> >> net.ipv4.conf.all.rp_filter=0
> >>
> >> net.ipv4.conf.default.rp_filter=0
> >>
> >>
> >> the first one is the ip address translation between LAN and WLAN, the
> >> second and third command is used for "Reverse Path Filtering".
> >>
> >> I cann't understand the purpose of the config in the neutron.
> >>
> >> 1. If the instance in compute node connect with exteral network,what's
> the
> >> function of the three config?
> >>
> >> 2. The instance connect with each others, what's the function of the
> three
> >> config?
> >>
> >>
> >> I am very confused about this config.Please explain the answer to me.
> >>
> >> Thanks.
> >
> >
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] Linux kernel IPv4 configuration during the neutron installation

2015-11-11 Thread Neil Jerram 
On 11/11/15 10:30, JinXing F wrote:
>
> Hi, guys:
>
> during the neutron installation guide, I found that we need to
> config the linux kernel as bellow: 
>
> net.ipv4.ip_forward=1
>
> net.ipv4.conf.all.rp_filter=0
>
> net.ipv4.conf.default.rp_filter=0
>
>
> the first one is the ip address translation between LAN and WLAN,
>

No, that's incorrect.  net.ipv4.ip_forward simply allows Linux to
forward IPv4 packets - i.e. to receive a packet on one network
interface, determine that it is not a packet that should be delivered
locally, and forward it on to its next IP hop.  There is no IP address
translation involved here.

> the second and third command is used for "Reverse Path Filtering".
>
> I cann't understand the purpose of the config in the neutron.
>

Do you mean that you don't understand what "Reverse Path Filtering" is? 
Or that you don't understand why Neutron needs RPF to be disabled?

For the former, please see
https://en.wikipedia.org/wiki/Reverse_path_forwarding.

Regards,
Neil

> 1. If the instance in compute node connect with exteral network,what's
> the function of the three config?
>
> 2. The instance connect with each others, what's the function of the
> three config?
>
>
> I am very confused about this config.Please explain the answer to me. 
>
> Thanks. 
>


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] Linux kernel IPv4 configuration during the neutron installation

2015-11-11 Thread JinXing F 
Hi, guys:

during the neutron installation guide, I found that we need to config
the linux kernel as bellow:

net.ipv4.ip_forward=1

net.ipv4.conf.all.rp_filter=0

net.ipv4.conf.default.rp_filter=0


the first one is the ip address translation between LAN and WLAN, the
second and third command is used for "Reverse Path Filtering".

I cann't understand the purpose of the config in the neutron.

1. If the instance in compute node connect with exteral network,what's the
function of the three config?

2. The instance connect with each others, what's the function of the three
config?


I am very confused about this config.Please explain the answer to me.

Thanks.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev