I can not ssh to a VM on profile openstack that has a floating IP addr

[Gautam Thaker]

https://www.emulab.net/portal/status.php?uuid=e8b096d0-816a-11ee-9f39-e4434b2381fc

I have spun up two VMs, (vm1 yesterday, vm2 today.) I gave both floating IP addresses. (I also have vm2 on a 2nd private net that I created.) I can ssh to to vm1 but not to vm2

> ssh ubu...@155.98.37.47  # vm2
ssh: connect to host 155.98.37.47 port 22: No route to host

What might I have done wrong here?

> ssh ubu...@155.98.37.77   # vm1
WORKS FINE.

Gautam

[David M. Johnson]

Hi Gautaum. If you look at the console log for the VM (the full one),
you will see that it only received network interface config from
cloud-init for the second flat-lan-2 network. This network does not
have a router with an interface in the ext-net (and router interfaces
connected to the ext-net require another public addr from the floating
IP pool), so flat-lan-2 is not reachable from the public network. The
other issue is that you bound the VM's floating IP addr to flat-lan-1,
but that iface is not being configured on the VM. If you logged in and
ran dhclient on that unconfigured interface, I bet your VM would start
responding on the floating IP.

(I haven't done multihoming on openstack VMs for many years, but you
used to have to play tricks like editing the VM's network configuration
files a priori to ensure DHCP on all (relevant) interfaces. I'm not
sure how cloud-init selects the interface on which it reaches out to the
openstack metadata daemon, which is where it finds its configuration;
probably simply "first" by enumeration/carrier.)

> Gautam

David

[Gautam Thaker]

David:

Thanks for these detailed insights and answer. One issue I have had is that I can't open the console for vm2. I get:

The following error was encountered while trying to retrieve the URL: http://155.98.38.104:6080/vnc_auto.html?

Connection to 155.98.38.104 failed.

The system returned: (110) Connection timed out

The remote host or network may be down. Please try the request again.

the URL that "console" is trying to open on my chrome browser is this link (it fails with the message above. Could be a firewall here at LM ATL, I will try this from outside later this evening.)

http://ctl.2computeopnstk.corbatests.emulab.net/horizon/project/instances/1c6129c0-9878-47aa-8e3f-246df9ad1c0c/auto_console

[Gautam Thaker]

Update:

I was able to open a console from outside of  LM ATL networks (so some firewall blocking that) and was able to run 'dhclient' and I am now able to SSH to my vm2 using its external floating IP addr.

Gautam

[David M. Johnson]

Thanks for the update, happy you have it working now.

David

On 11/14/23 08:15, Gautam Thaker wrote:
> Update:
>
> I was able to open a console from outside of  LM ATL networks (so some
> firewall blocking that) and was able to run 'dhclient' and I am now able
> to SSH to my vm2 using its external floating IP addr.
>
> Gautam
>
> On Monday, November 13, 2023 at 6:35:45 PM UTC-5 Gautam Thaker wrote:
>
> David:
>
> Thanks for these detailed insights and answer. One issue I have had
> is that I can't open the console for vm2. I get:
>
> The following error was encountered while trying to retrieve the
> URL: http://155.98.38.104:6080/vnc_auto.html

> <http://155.98.38.104:6080/vnc_auto.html>?

>
> Connection to 155.98.38.104 failed.
>
> The system returned: (110) Connection timed out
>
> The remote host or network may be down. Please try the request again.
>
> the URL that "console" is trying to open on my chrome browser is
> this link (it fails with the message above. Could be a firewall here
> at LM ATL, I will try this from outside later this evening.)
>

> http://ctl.2computeopnstk.corbatests.emulab.net/horizon/project/instances/1c6129c0-9878-47aa-8e3f-246df9ad1c0c/auto_console <http://ctl.2computeopnstk.corbatests.emulab.net/horizon/project/instances/1c6129c0-9878-47aa-8e3f-246df9ad1c0c/auto_console>

>
> On Monday, November 13, 2023 at 5:22:26 PM UTC-5 David M. Johnson wrote:
>
> On 11/13/23 15:46, Gautam Thaker wrote:
> >

> https://www.emulab.net/portal/status.php?uuid=e8b096d0-816a-11ee-9f39-e4434b2381fc <https://www.emulab.net/portal/status.php?uuid=e8b096d0-816a-11ee-9f39-e4434b2381fc>

> --
> You received this message because you are subscribed to the Google
> Groups "emulab-users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to emulab-users...@googlegroups.com
> <mailto:emulab-users...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/emulab-users/3c0fe85e-8eaa-414b-bf2d-6dc04113f5b3n%40googlegroups.com <https://groups.google.com/d/msgid/emulab-users/3c0fe85e-8eaa-414b-bf2d-6dc04113f5b3n%40googlegroups.com?utm_medium=email&utm_source=footer>.