Statistics
| Branch: | Tag: | Revision:

root / docs / scale / i-network.rst @ 075b91de

History | View | Annotate | Download (1.8 kB)

1
.. _i-network:
2

    
3
Synnefo
4
-------
5

    
6
:ref:`synnefo <i-synnefo>` ||
7
:ref:`ns <i-ns>` ||
8
:ref:`apt <i-apt>` ||
9
:ref:`mq <i-mq>` ||
10
:ref:`db <i-db>` ||
11
:ref:`gunicorn <i-gunicorn>` ||
12
:ref:`apache <i-apache>` ||
13
:ref:`webproject <i-webproject>` ||
14
:ref:`astakos <i-astakos>` ||
15
:ref:`qh <i-qh>` ||
16
:ref:`cms <i-cms>` ||
17
:ref:`pithos <i-pithos>` ||
18
:ref:`cyclades <i-cyclades>` ||
19
:ref:`kamaki <i-kamaki>` ||
20
:ref:`backends <i-backends>`
21

    
22
Backends
23
++++++++
24

    
25
:ref:`ganeti <i-ganeti>` ||
26
:ref:`image <i-image>` ||
27
:ref:`gtools <i-gtools>` ||
28
network
29

    
30
snf-network Setup
31
~~~~~~~~~~~~~~~~~
32

    
33
The following apply to ``ganeti`` nodes.
34

    
35

    
36
Install the corresponding package:
37

    
38
.. code-block:: console
39

    
40
   # apt-get install nfqueue-bindings-python=0.3+physindev-1
41
   # apt-get install snf-network
42
   # apt-get install nfdhcpd
43

    
44
In `/etc/snf-network/default` add:
45

    
46
.. code-block:: console
47

    
48
   MAC_MASK = ff:ff:f0:00:00:00
49

    
50
Edit `/etc/nfdhcpd/nfdhcpd.conf` to your preferances (DNS, IPv6) and add the
51
following iptables rules:
52

    
53
.. code-block:: console
54

    
55
    # iptables -t mangle -A PREROUTING -i br+ -p udp -m udp --dport 67 -j NFQUEUE --queue-num 42
56
    # iptables -t mangle -A PREROUTING -i tap+ -p udp -m udp --dport 67 -j NFQUEUE --queue-num 42
57
    # iptables -t mangle -A PREROUTING -i prv+ -p udp -m udp --dport 67 -j NFQUEUE --queue-num 42
58

    
59
    # ip6tables -t mangle -A PREROUTING -i br+ -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j NFQUEUE --queue-num 43
60
    # ip6tables -t mangle -A PREROUTING -i br+ -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j NFQUEUE --queue-num 44
61

    
62

    
63
In router node in case you have a NAT setup run:
64

    
65
.. code-block:: console
66

    
67
    # iptables -t nat -A POSTROUTING -s 10.0.1.0/24 -j MASQUERADE
68
    # ip addr add 10.0.1.1/24 dev eth1
69

    
70

    
71
Test your Setup:
72
++++++++++++++++
73

    
74
Create a VM inside the public network via UI or Ganeti and see if it has internet connectivity.