Ubuntu
nova package

  1. Bug #1022612
  2. Comment #4

Comment 4 for bug 1022612

Revision history for this message
Tom Haddon (mthaddon) wrote :

From http://docs.openstack.org/folsom/openstack-compute/admin/content/associating-public-ip.html:

"""
Traffic between VMs using floating IPs:

Note that due to the way floating IPs are implemented using a source NAT (SNAT rule in iptables), inconsistent behaviour of security groups can be seen if VMs use their floating IP to communicate with other virtual machines - particularly on the same physical host. Traffic from VM to VM accross the fixed network does not have this issue, and this is the recommended path. To ensure traffic doesn't get SNATed to the floating range, explicitly set dmz_cidr=x.x.x.x/y. x.x.x.x/y is the range of floating ips for each pool of floating ips you define. This configuration is also necessary to make source_groups work if the vms in the source group have floating ips.
"""

This might help...