Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cloudstack.apache.org
From: Muhammad Adeel Zahid <16030053@lums.edu.pk>
To: "users@cloudstack.apache.org" <users@cloudstack.apache.org>
Subject: Re: Iptables of Host machine blocks http traffic to Guest VM's
Thread-Topic: Iptables of Host machine blocks http traffic to Guest VM's
Thread-Index: AQHTSQ0fAeds4f5Hd0Gul7zqAnkeMaLri4eRgAAA1YCAAALtZQ==
Date: Thu, 19 Oct 2017 19:32:15 +0000
Message-ID: <AM0PR0702MB374556FBB987EC2FE424F8AF90420@AM0PR0702MB3745.eurprd07.prod.outlook.com>
References: <AM0PR0702MB37450814D17EE8461368336890420@AM0PR0702MB3745.eurprd07.prod.outlook.com>
 <AM0PR0702MB3745DDB9BCCD83762A83875490420@AM0PR0702MB3745.eurprd07.prod.outlook.com>,<CAG97rafM+_jtLJL+qiEcaACTqFq019u4LyzCJ5Ff+_7O1UpanA@mail.gmail.com>
In-Reply-To: <CAG97rafM+_jtLJL+qiEcaACTqFq019u4LyzCJ5Ff+_7O1UpanA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
received-spf: None (protection.outlook.com: lums.edu.pk does not designate
 permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
	boundary="_000_AM0PR0702MB374556FBB987EC2FE424F8AF90420AM0PR0702MB3745_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 5c468b48-f7e3-4c6d-eac9-08d517281abb
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2017 19:32:15.7134
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 75df096c-8b72-48e4-9b91-cbf79d87ee3a
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR0702MB3747
archived-at: Thu, 19 Oct 2017 19:32:30 -0000

--_000_AM0PR0702MB374556FBB987EC2FE424F8AF90420AM0PR0702MB3745_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

I am using KVM as hypervisor and for network configuration I followed the f=
ollowing link

http://docs.cloudstack.apache.org/projects/cloudstack-installation/en/4.6/q=
ig.html


Except that my ip addresses are from 10.0.0.x series. And I do not know abo=
ut ingress/egress rules and how to configure them.

Quick Installation Guide for CentOS 6 =97 Apache CloudStack ...<http://docs=
.cloudstack.apache.org/projects/cloudstack-installation/en/4.6/qig.html>
docs.cloudstack.apache.org
High level overview of the process=B6 This runbook will focus on building a=
 CloudStack cloud using KVM on CentOS 6.5 with NFS storage on a flat layer-=
2 network ...


________________________________
From: Rafael Weing=E4rtner <rafaelweingartner@gmail.com>
Sent: Friday, October 20, 2017 12:19:49 AM
To: users@cloudstack.apache.org
Subject: Re: Iptables of Host machine blocks http traffic to Guest VM's

What type of deployment are you using?
Did you try configuring the ingress/egress rules for the network of the VM
you are creating?

On Thu, Oct 19, 2017 at 5:17 PM, Muhammad Adeel Zahid <16030053@lums.edu.pk=
>
wrote:

> One more finding. Even restarting the iptables service does the trick. Wh=
y
> is that? What can I do to avoid having to restart the iptables service?
>
>
>
> Regards
>
> Adeel
>
> ________________________________
> From: Muhammad Adeel Zahid <16030053@lums.edu.pk>
> Sent: Friday, October 20, 2017 12:08:43 AM
> To: users@cloudstack.apache.org
> Subject: Iptables of Host machine blocks http traffic to Guest VM's
>
> Hello,
>
>
> Finally, I have created a template from centos 6.8 ISO with jdk 1.8
> installed and a web application hosted. I can now create VM's from this
> templates and they work fine except one problem. The web applications in
> guest VMs created from template are only accessible from the host running
> the VMs. If I access them (web applications) from some other system on th=
e
> same LAN they are not accessible until I turn off the iptables service on
> host machine. Is there an ip table rule that I can add to work around thi=
s
> problem not only for the existing VMs but for the VMs I will be creating =
on
> this host in the future?
>
>
> Regards
>
> Adeel
>
>


--
Rafael Weing=E4rtner

--_000_AM0PR0702MB374556FBB987EC2FE424F8AF90420AM0PR0702MB3745_--