Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cloudstack.apache.org
Received-SPF: pass (athena.apache.org: domain of
 geoff.higginbottom@shapeblue.com designates 213.199.154.84 as permitted
 sender)
From: Geoff Higginbottom <geoff.higginbottom@shapeblue.com>
To: "<users@cloudstack.apache.org>" <users@cloudstack.apache.org>
Subject: Re: System vm's with wrong network routing
Thread-Topic: System vm's with wrong network routing
Thread-Index: 
 AQHPUqe3xXVjXo0GxUOfbFsHe3iJwJsHM1tegACPD4CAAA/DAIAAAdMAgAAQ2ICAAAlsAIAAHQvu
Date: Tue, 8 Apr 2014 18:28:17 +0000
Message-ID: <3F82715B-85A2-4D49-9A70-5BEE183D55A2@shapeblue.com>
References: <svwb0gvdvbhxstpbesu5dm0a.1396905814334@email.android.com>
	<7E300889-0F26-4EA3-B709-E7043FCC07A8@shapeblue.com>
	<5344029B.5000302@trickhosting.biz>
	<CAP997Uf35D2TNP9hOm5-YJCsbLJKF-boDmk5t+4nDgh-iYi_6A@mail.gmail.com>
	<5344115C.2040403@trickhosting.biz>
 <CAP997UfESfKQyGizHtvd=4K1sc1f5_4M2SkDdY2uVeVsQmw4cw@mail.gmail.com>,<53442764.7060206@trickhosting.biz>
In-Reply-To: <53442764.7060206@trickhosting.biz>
Accept-Language: en-GB, en-US
Content-Language: en-GB
received-spf: None (: shapeblue.com does not designate permitted sender
 hosts)
Content-Type: multipart/alternative;
	boundary="_000_3F82715B85A24D499A705BEE183D55A2shapebluecom_"
MIME-Version: 1.0

--_000_3F82715B85A24D499A705BEE183D55A2shapebluecom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I would check the traffic labels for the management network match for your =
zone and hosts.

Regards

Geoff Higginbottom
CTO / Cloud Architect

D: +44 20 3603 0542<tel:+442036030542> | S: +44 20 3603 0540<tel:+442036030=
540> | M: +447968161581<tel:+447968161581>

geoff.higginbottom@shapeblue.com<mailto:geoff.higginbottom@shapeblue.com> |=
 www.shapeblue.com<htp://www.shapeblue.com/> | Twitter:@cloudstackguru<http=
s://twitter.com/#!/cloudstackguru>

ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS<x-apple-da=
ta-detectors://5>


On 8 Apr 2014, at 17:44, "Matthew Midgett" <support@trickhosting.biz<mailto=
:support@trickhosting.biz>> wrote:

My problem is that the ssvm will not ping anything on the management networ=
k, It will not do dns lookups as it will not ping past the default public g=
ateway. The ssvm is up and I can ping the public ip from a different subnet=
.

If i remove this I can use external dns and the ssvm can ping anything publ=
ic
8.8.4.4         172.16.0.1      255.255.255.255 UGH   0 0        0 eth1
8.8.8.8         172.16.0.1      255.255.255.255 UGH   0 0        0 eth1

I change the values as Geoff had suggested and I rebooted the management se=
rvice. Then i destroyed the ssvm so it would be recreated with the new chan=
ges. Here is the route as it is now and not working.

root@s-9-VM:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref Use Iface
0.0.0.0         216.249.111.1   0.0.0.0         UG    0 0        0 eth2
8.8.4.4         172.16.0.1      255.255.255.255 UGH   0 0        0 eth1
8.8.8.8         172.16.0.1      255.255.255.255 UGH   0 0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0 0        0 eth0
172.16.0.0      0.0.0.0         255.255.0.0     U     0 0        0 eth1
172.16.0.0      0.0.0.0         255.255.0.0     U     0 0        0 eth3
216.249.111.0   0.0.0.0         255.255.255.0   U     0 0        0 eth2

To me it doesn't look like the use external dns setting to true didn't do a=
nything. It sill wants to tell the dns to go across the management network.=
 That would be fine if the routes to the management network worked.

I'm willing to pay someone to help me at this point.


On 04/08/2014 12:10 PM, Erik Weber wrote:
You don't need gateway for network in the same subnet on an interface.

You never told us what your real problem is (i think), so why not start by
telling us what is not working :-)

As i tried to explain, 8.8.8.8 and 8.8.4.4 will be routed over the mgmt
interface if it's entered as the internal dns. If that is your problem, try
changing the value Geoff suggested.

Erik
8. apr. 2014 17:10 skrev "Matthew Midgett" <support@trickhosting.biz<mailto=
:support@trickhosting.biz>>
f=F8lgende:

Erik that would  be fine but this is wrong, this means its going to route
over the public address as 0.0.0.0 points to my public gateway.

172.16.0.0      0.0.0.0         255.255.0.0     U     0 0        0 eth1
172.16.0.0      0.0.0.0         255.255.0.0     U     0 0        0 eth3


On 04/08/2014 11:03 AM, Erik Weber wrote:

If you use the same dns servers for both internal and external it will add
a route over mgmt interface.

Erik Weber
8. apr. 2014 16:07 skrev "Matthew Midgett" <support@trickhosting.biz<mailto=
:support@trickhosting.biz>>
f=F8lgende:

 I destroyed the VM so it would create a new route. First off the 8.8.8.8
and 8.8.4.4 should have a default gateway of 0.0.0.0 if its to use the
public address to get dns. If its supposed to use the management network
then the 172.16.0.0     0.0.0.0 should be 172.16.0.0     172.16.0.1

This way it doesn't route properly

root@s-4-VM:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref Use
Iface
0.0.0.0         216.249.111.1   0.0.0.0         UG    0 0        0 eth2
8.8.4.4         172.16.0.1      255.255.255.255 UGH   0 0        0 eth1
8.8.8.8         172.16.0.1      255.255.255.255 UGH   0 0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0 0        0 eth0
172.16.0.0      0.0.0.0         255.255.0.0     U     0 0        0 eth1
172.16.0.0      0.0.0.0         255.255.0.0     U     0 0        0 eth3
216.249.111.0   0.0.0.0         255.255.255.0   U     0 0        0 eth2

This way works.

root@s-4-VM:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref Use
Iface
0.0.0.0         216.249.111.1   0.0.0.0         UG    0 0        0 eth2
169.254.0.0     0.0.0.0         255.255.0.0     U     0 0        0 eth0
172.16.0.0      172.16.0.1         255.255.0.0     U     0 0        0
eth1
172.16.0.0      172.16.0.1         255.255.0.0     U     0 0        0
eth3
216.249.111.0   0.0.0.0         255.255.255.0   U     0 0        0 eth2

Still  not sure where I should put this. I know its the way that Im
connecting to it but what route should it take? I'm thinking it should be
172.16.0.0
169.254.0.0     0.0.0.0         255.255.0.0     U     0 0        0 eth0


On 04/08/2014 01:35 AM, Geoff Higginbottom wrote:

 Matthew,
Can you give examples of the routes you are seeing and explain why they
are wrong please.

Regards

Geoff Higginbottom
CTO / Cloud Architect

D: +44 20 3603 0542<tel:+442036030542> | S: +44 20 3603 0540<tel:
+442036030540> | M: +447968161581<tel:+447968161581>

geoff.higginbottom@shapeblue.com<mailto:geoff.higginbottom@shapeblue.com><m=
ailto:geoff.higginbottom@
shapeblue.com<http://shapeblue.com>>
| www.shapeblue.com<http://www.shapeblue.com><htp://www.shapeblue.com/> | T=
witter:@cloudstackguru
<
https://twitter.com/#!/cloudstackguru>

ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N
4HS<x-apple-data-detectors://5>


On 7 Apr 2014, at 22:24, "Matthew Midgett" <support@trickhosting.biz<mailto=
:support@trickhosting.biz><
mailto:support@trickhosting.biz>> wrote:

My system vm's are being created with the wrong routes. Manually
deleting
and adding them fixes the problem. Where would I go to fix this
permanently?


Sent from my Galaxy S(r)III
Need Enterprise Grade Support for Apache CloudStack?
Our CloudStack Infrastructure Support<http://shapeblue.com/
cloudstack-infrastructure-support/> offers the best 24/7 SLA for
CloudStack Environments.

Apache CloudStack Bootcamp training courses

**NEW!** CloudStack 4.2.1 training<http://shapeblue.com/
cloudstack-training/>
28th-29th May 2014, Bangalore. Classromm<http://shapeblue.
com/cloudstack-training/>
16th-20th June 2014, Region A. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>
23rd-27th June 2014, Region B. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>
15th-20th September 2014, Region A. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>
22nd-27th September 2014, Region B. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>
1st-6th December 2014, Region A. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>
8th-12th December 2014, Region B. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>

This email and any attachments to it may be confidential and are
intended
solely for the use of the individual to whom it is addressed. Any views
or
opinions expressed are solely those of the author and do not necessarily
represent those of Shape Blue Ltd or related companies. If you are not
the
intended recipient of this email, you must neither take any action based
upon its contents, nor copy or show it to anyone. Please contact the
sender
if you believe you have received this email in error. Shape Blue Ltd is
a
company incorporated in England & Wales. ShapeBlue Services India LLP
is a
company incorporated in India and is operated under license from Shape
Blue
Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in
Brasil
and is operated under license from Shape Blue Ltd. ShapeBlue is a
registered trademark.


This email and any attachments to it may be confidential and are intended s=
olely for the use of the individual to whom it is addressed. Any views or o=
pinions expressed are solely those of the author and do not necessarily rep=
resent those of Shape Blue Ltd or related companies. If you are not the int=
ended recipient of this email, you must neither take any action based upon =
its contents, nor copy or show it to anyone. Please contact the sender if y=
ou believe you have received this email in error. Shape Blue Ltd is a compa=
ny incorporated in England & Wales. ShapeBlue Services India LLP is a compa=
ny incorporated in India and is operated under license from Shape Blue Ltd.=
 Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and=
 is operated under license from Shape Blue Ltd. ShapeBlue is a registered t=
rademark.

--_000_3F82715B85A24D499A705BEE183D55A2shapebluecom_--