Chapter 2. Basic environment in OpenStack Installation Guide for Ubuntu 14.04 (LTS) - juno

[Bobby Yakovich]

-----------------------------------
Built: 2014-09-29T07:05:10 00:00
git SHA: 38e8bd8654c0e1c729cfc55a2d9f89b313e8efca
URL: http://docs.openstack.org/trunk/install-guide/install/apt/content/ch_basic_environment.html

In order to test network connectivity a firewall rule needs to be set up on network node to grant compute node access to internet.

such as:
sudo iptables -A FORWARD -i (PUBLIC INTERFACE ex:eth1)-o br-ex -s 10.1.1.0/24 -m conntrack --ctstate NEW -j ACCEPT
sudo iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
sudo iptables -A POSTROUTING -s 10.1.1.0/24 -t nat -j MASQUERADE

[Matt Kassawara (ionosphere80)]

By default, Ubuntu does not enable a firewall.

[Bobby Yakovich (bgyako)]

These instructions were included in Grizzly in order to grant internet access to compute nodes.
I believe they are still needed in Ice house.

[Matt Kassawara (ionosphere80)]

Perhaps this applies to providing internet access to instances using nova-network?

[Bobby Yakovich (bgyako)]

I guess that will work for both.
Just confirmed...

[Matt Kassawara (ionosphere80)]

Your example iptables rules reference 'br-ex' which implies neutron instead of nova-network. However, you mention providing internet access from compute nodes, a configuration that the installation guide doesn't support. Can you clarify your network service and issue?