codepad
[
create a new paste
]
login
|
about
Language:
C
C++
D
Haskell
Lua
OCaml
PHP
Perl
Plain Text
Python
Ruby
Scheme
Tcl
Script started on Tue 02 Apr 2013 12:51:49 PM PDT ]0;nicira@ubuntu: ~ nicira@ubuntu:~$ ]0;nicira@ubuntu: ~ nicira@ubuntu:~$ cd devstack/ ]0;nicira@ubuntu: ~/devstack nicira@ubuntu:~/devstack$ source openrc ad [Kdemo demo ]0;nicira@ubuntu: ~/devstack nicira@ubuntu:~/devstack$ quan tum port-list +--------------------------------------+------------------------------------------+-------------------+---------------------------------------------------------------------------------+ | id | name | mac_address | fixed_ips | +--------------------------------------+------------------------------------------+-------------------+---------------------------------------------------------------------------------+ | 1334c522-14ad-4420-bc1a-53031ed68df9 | vip-37a3eeff-c24b-425f-8f29-c8288e1081c6 | fa:16:3e:e6:87:de | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.8"} | | 1b2f9379-f496-4028-9913-42ec51d44a78 | | fa:16:3e:c9:4a:ca | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.4"} | | 33226b8a-e567-45f3-ab28-2282a309eb1c | | fa:16:3e:21:a1:6f | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.6"} | | 46db1f35-af19-4786-8ce7-2cd215226dbe | | fa:16:3e:f5:6f:18 | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.5"} | | 58ab9db6-e79c-43be-a47d-fc710d26d1da | | fa:16:3e:c4:25:48 | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.2"} | | 728621aa-8ef6-4efa-8980-6b0abd47c88d | | fa:16:3e:90:3d:1f | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.1"} | | 90b2cf8c-8926-4dfe-a06f-f7eb7620f58d | | fa:16:3e:14:06:2f | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.7"} | +--------------------------------------+------------------------------------------+-------------------+---------------------------------------------------------------------------------+ ]0;nicira@ubuntu: ~/devstack nicira@ubuntu:~/devstack$ quan tum port-show 1334c522-14ad-4420-bc1a-53031ed68df9 +-----------------+---------------------------------------------------------------------------------+ | Field | Value | +-----------------+---------------------------------------------------------------------------------+ | admin_state_up | True | | device_id | 724fc160-2b2e-597e-b9ed-7f65313cd73f | | device_owner | quantum:LOADBALANCER | | fixed_ips | {"subnet_id": "73f1413b-04cc-4c04-a595-5c26224e3afe", "ip_address": "10.0.0.8"} | | id | 1334c522-14ad-4420-bc1a-53031ed68df9 | | mac_address | fa:16:3e:e6:87:de | | name | vip-37a3eeff-c24b-425f-8f29-c8288e1081c6 | | network_id | ada12958-7ca8-43cb-bfa1-9d9f5e858a07 | | security_groups | e11e7617-2683-48f2-a474-8634721248d2 | | status | ACTIVE | | tenant_id | 7a8580cc54264663ac71d669de4c96c9 | +-----------------+---------------------------------------------------------------------------------+ ]0;nicira@ubuntu: ~/devstack nicira@ubuntu:~/devstack$ quan tum securityy [Kquan tum security-group-list +--------------------------------------+----------+-------------+ | id | name | description | +--------------------------------------+----------+-------------+ | 4a65c786-b7a2-4158-a8fd-8ceff9d40337 | ssh | | | 51eaf14f-d873-4e6b-ac12-648ba0bf4ce0 | web | | | e11e7617-2683-48f2-a474-8634721248d2 | default | default | | e637afb3-831e-4298-8e54-ceddedcd33ee | database | | +--------------------------------------+----------+-------------+ ]0;nicira@ubuntu: ~/devstack nicira@ubuntu:~/devstack$ sudo iptables-save # Generated by iptables-save v1.4.12 on Tue Apr 2 12:52:29 2013 *nat :PREROUTING ACCEPT [189:21429] :INPUT ACCEPT [3:530] :OUTPUT ACCEPT [139:8430] :POSTROUTING ACCEPT [324:29274] :nova-api-OUTPUT - [0:0] :nova-api-POSTROUTING - [0:0] :nova-api-PREROUTING - [0:0] :nova-api-float-snat - [0:0] :nova-api-snat - [0:0] :nova-postrouting-bottom - [0:0] :quantum-openvswi-OUTPUT - [0:0] :quantum-openvswi-POSTROUTING - [0:0] :quantum-openvswi-PREROUTING - [0:0] :quantum-openvswi-float-snat - [0:0] :quantum-openvswi-snat - [0:0] :quantum-postrouting-bottom - [0:0] -A PREROUTING -j quantum-openvswi-PREROUTING -A PREROUTING -j nova-api-PREROUTING -A OUTPUT -j quantum-openvswi-OUTPUT -A OUTPUT -j nova-api-OUTPUT -A POSTROUTING -j quantum-openvswi-POSTROUTING -A POSTROUTING -j nova-api-POSTROUTING -A POSTROUTING -j nova-postrouting-bottom -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE -A POSTROUTING -j quantum-postrouting-bottom -A nova-api-snat -j nova-api-float-snat -A nova-postrouting-bottom -j nova-api-snat -A quantum-openvswi-snat -j quantum-openvswi-float-snat -A quantum-postrouting-bottom -j quantum-openvswi-snat COMMIT # Completed on Tue Apr 2 12:52:29 2013 # Generated by iptables-save v1.4.12 on Tue Apr 2 12:52:29 2013 *mangle :PREROUTING ACCEPT [623860:279364603] :INPUT ACCEPT [590211:276910091] :FORWARD ACCEPT [37076:3467654] :OUTPUT ACCEPT [604991:325164524] :POSTROUTING ACCEPT [638993:327768483] :nova-api-POSTROUTING - [0:0] -A POSTROUTING -j nova-api-POSTROUTING -A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill COMMIT # Completed on Tue Apr 2 12:52:29 2013 # Generated by iptables-save v1.4.12 on Tue Apr 2 12:52:29 2013 *filter :INPUT ACCEPT [32701:33338290] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [38077:47770361] :nova-api-FORWARD - [0:0] :nova-api-INPUT - [0:0] :nova-api-OUTPUT - [0:0] :nova-api-local - [0:0] :nova-filter-top - [0:0] :quantum-filter-top - [0:0] :quantum-openvswi-FORWARD - [0:0] :quantum-openvswi-INPUT - [0:0] :quantum-openvswi-OUTPUT - [0:0] :quantum-openvswi-i1334c522-1 - [0:0] :quantum-openvswi-i1b2f9379-f - [0:0] :quantum-openvswi-i33226b8a-e - [0:0] :quantum-openvswi-i46db1f35-a - [0:0] :quantum-openvswi-i90b2cf8c-8 - [0:0] :quantum-openvswi-local - [0:0] :quantum-openvswi-o1334c522-1 - [0:0] :quantum-openvswi-o1b2f9379-f - [0:0] :quantum-openvswi-o33226b8a-e - [0:0] :quantum-openvswi-o46db1f35-a - [0:0] :quantum-openvswi-o90b2cf8c-8 - [0:0] :quantum-openvswi-sg-chain - [0:0] :quantum-openvswi-sg-fallback - [0:0] -A INPUT -j quantum-openvswi-INPUT -A INPUT -j nova-api-INPUT -A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT -A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT -A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT -A INPUT -p tcp -m tcp --dport 7471 -j ACCEPT -A INPUT -p gre -j ACCEPT -A FORWARD -j quantum-filter-top -A FORWARD -j quantum-openvswi-FORWARD -A FORWARD -j nova-filter-top -A FORWARD -j nova-api-FORWARD -A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT -A FORWARD -i virbr0 -o virbr0 -j ACCEPT -A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable -A OUTPUT -j quantum-filter-top -A OUTPUT -j quantum-openvswi-OUTPUT -A OUTPUT -j nova-filter-top -A OUTPUT -j nova-api-OUTPUT -A nova-api-INPUT -d 10.34.106.187/32 -p tcp -m tcp --dport 8775 -j ACCEPT -A nova-filter-top -j nova-api-local -A quantum-filter-top -j quantum-openvswi-local -A quantum-openvswi-FORWARD -m physdev --physdev-out tap1334c522-14 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-in tap1334c522-14 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-out tap90b2cf8c-89 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-in tap90b2cf8c-89 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-out tap46db1f35-af --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-in tap46db1f35-af --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-out tap1b2f9379-f4 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-in tap1b2f9379-f4 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-out tap33226b8a-e5 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-FORWARD -m physdev --physdev-in tap33226b8a-e5 --physdev-is-bridged -j quantum-openvswi-sg-chain -A quantum-openvswi-INPUT -m physdev --physdev-in tap1334c522-14 --physdev-is-bridged -j quantum-openvswi-o1334c522-1 -A quantum-openvswi-INPUT -m physdev --physdev-in tap90b2cf8c-89 --physdev-is-bridged -j quantum-openvswi-o90b2cf8c-8 -A quantum-openvswi-INPUT -m physdev --physdev-in tap46db1f35-af --physdev-is-bridged -j quantum-openvswi-o46db1f35-a -A quantum-openvswi-INPUT -m physdev --physdev-in tap1b2f9379-f4 --physdev-is-bridged -j quantum-openvswi-o1b2f9379-f -A quantum-openvswi-INPUT -m physdev --physdev-in tap33226b8a-e5 --physdev-is-bridged -j quantum-openvswi-o33226b8a-e -A quantum-openvswi-i1334c522-1 -m state --state INVALID -j DROP -A quantum-openvswi-i1334c522-1 -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-i1334c522-1 -s 10.0.0.7/32 -j RETURN -A quantum-openvswi-i1334c522-1 -s 10.0.0.2/32 -p udp -m udp --sport 67 --dport 68 -j RETURN -A quantum-openvswi-i1334c522-1 -j quantum-openvswi-sg-fallback -A quantum-openvswi-i1b2f9379-f -m state --state INVALID -j DROP -A quantum-openvswi-i1b2f9379-f -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-i1b2f9379-f -p tcp -m tcp --dport 80 -j RETURN -A quantum-openvswi-i1b2f9379-f -s 10.0.0.6/32 -p tcp -m tcp --dport 22 -j RETURN -A quantum-openvswi-i1b2f9379-f -s 10.0.0.2/32 -p udp -m udp --sport 67 --dport 68 -j RETURN -A quantum-openvswi-i1b2f9379-f -j quantum-openvswi-sg-fallback -A quantum-openvswi-i33226b8a-e -m state --state INVALID -j DROP -A quantum-openvswi-i33226b8a-e -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-i33226b8a-e -p tcp -m tcp --dport 22 -j RETURN -A quantum-openvswi-i33226b8a-e -s 10.0.0.2/32 -p udp -m udp --sport 67 --dport 68 -j RETURN -A quantum-openvswi-i33226b8a-e -j quantum-openvswi-sg-fallback -A quantum-openvswi-i46db1f35-a -m state --state INVALID -j DROP -A quantum-openvswi-i46db1f35-a -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-i46db1f35-a -s 10.0.0.6/32 -p tcp -m tcp --dport 22 -j RETURN -A quantum-openvswi-i46db1f35-a -s 10.0.0.4/32 -p tcp -m tcp --dport 3306 -j RETURN -A quantum-openvswi-i46db1f35-a -s 10.0.0.2/32 -p udp -m udp --sport 67 --dport 68 -j RETURN -A quantum-openvswi-i46db1f35-a -j quantum-openvswi-sg-fallback -A quantum-openvswi-i90b2cf8c-8 -m state --state INVALID -j DROP -A quantum-openvswi-i90b2cf8c-8 -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-i90b2cf8c-8 -s 10.0.0.8/32 -j RETURN -A quantum-openvswi-i90b2cf8c-8 -s 10.0.0.2/32 -p udp -m udp --sport 67 --dport 68 -j RETURN -A quantum-openvswi-i90b2cf8c-8 -j quantum-openvswi-sg-fallback -A quantum-openvswi-o1334c522-1 -m mac ! --mac-source FA:16:3E:E6:87:DE -j DROP -A quantum-openvswi-o1334c522-1 -p udp -m udp --sport 68 --dport 67 -j RETURN -A quantum-openvswi-o1334c522-1 ! -s 10.0.0.8/32 -j DROP -A quantum-openvswi-o1334c522-1 -p udp -m udp --sport 67 --dport 68 -j DROP -A quantum-openvswi-o1334c522-1 -m state --state INVALID -j DROP -A quantum-openvswi-o1334c522-1 -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-o1334c522-1 -j RETURN -A quantum-openvswi-o1334c522-1 -j quantum-openvswi-sg-fallback -A quantum-openvswi-o1b2f9379-f -m mac ! --mac-source FA:16:3E:C9:4A:CA -j DROP -A quantum-openvswi-o1b2f9379-f -p udp -m udp --sport 68 --dport 67 -j RETURN -A quantum-openvswi-o1b2f9379-f ! -s 10.0.0.4/32 -j DROP -A quantum-openvswi-o1b2f9379-f -p udp -m udp --sport 67 --dport 68 -j DROP -A quantum-openvswi-o1b2f9379-f -m state --state INVALID -j DROP -A quantum-openvswi-o1b2f9379-f -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-o1b2f9379-f -j RETURN -A quantum-openvswi-o1b2f9379-f -j quantum-openvswi-sg-fallback -A quantum-openvswi-o33226b8a-e -m mac ! --mac-source FA:16:3E:21:A1:6F -j DROP -A quantum-openvswi-o33226b8a-e -p udp -m udp --sport 68 --dport 67 -j RETURN -A quantum-openvswi-o33226b8a-e ! -s 10.0.0.6/32 -j DROP -A quantum-openvswi-o33226b8a-e -p udp -m udp --sport 67 --dport 68 -j DROP -A quantum-openvswi-o33226b8a-e -m state --state INVALID -j DROP -A quantum-openvswi-o33226b8a-e -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-o33226b8a-e -j RETURN -A quantum-openvswi-o33226b8a-e -j quantum-openvswi-sg-fallback -A quantum-openvswi-o46db1f35-a -m mac ! --mac-source FA:16:3E:F5:6F:18 -j DROP -A quantum-openvswi-o46db1f35-a -p udp -m udp --sport 68 --dport 67 -j RETURN -A quantum-openvswi-o46db1f35-a ! -s 10.0.0.5/32 -j DROP -A quantum-openvswi-o46db1f35-a -p udp -m udp --sport 67 --dport 68 -j DROP -A quantum-openvswi-o46db1f35-a -m state --state INVALID -j DROP -A quantum-openvswi-o46db1f35-a -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-o46db1f35-a -j RETURN -A quantum-openvswi-o46db1f35-a -j quantum-openvswi-sg-fallback -A quantum-openvswi-o90b2cf8c-8 -m mac ! --mac-source FA:16:3E:14:06:2F -j DROP -A quantum-openvswi-o90b2cf8c-8 -p udp -m udp --sport 68 --dport 67 -j RETURN -A quantum-openvswi-o90b2cf8c-8 ! -s 10.0.0.7/32 -j DROP -A quantum-openvswi-o90b2cf8c-8 -p udp -m udp --sport 67 --dport 68 -j DROP -A quantum-openvswi-o90b2cf8c-8 -m state --state INVALID -j DROP -A quantum-openvswi-o90b2cf8c-8 -m state --state RELATED,ESTABLISHED -j RETURN -A quantum-openvswi-o90b2cf8c-8 -j RETURN -A quantum-openvswi-o90b2cf8c-8 -j quantum-openvswi-sg-fallback -A quantum-openvswi-sg-chain -m physdev --physdev-out tap1334c522-14 --physdev-is-bridged -j quantum-openvswi-i1334c522-1 -A quantum-openvswi-sg-chain -m physdev --physdev-in tap1334c522-14 --physdev-is-bridged -j quantum-openvswi-o1334c522-1 -A quantum-openvswi-sg-chain -m physdev --physdev-out tap90b2cf8c-89 --physdev-is-bridged -j quantum-openvswi-i90b2cf8c-8 -A quantum-openvswi-sg-chain -m physdev --physdev-in tap90b2cf8c-89 --physdev-is-bridged -j quantum-openvswi-o90b2cf8c-8 -A quantum-openvswi-sg-chain -m physdev --physdev-out tap46db1f35-af --physdev-is-bridged -j quantum-openvswi-i46db1f35-a -A quantum-openvswi-sg-chain -m physdev --physdev-in tap46db1f35-af --physdev-is-bridged -j quantum-openvswi-o46db1f35-a -A quantum-openvswi-sg-chain -m physdev --physdev-out tap1b2f9379-f4 --physdev-is-bridged -j quantum-openvswi-i1b2f9379-f -A quantum-openvswi-sg-chain -m physdev --physdev-in tap1b2f9379-f4 --physdev-is-bridged -j quantum-openvswi-o1b2f9379-f -A quantum-openvswi-sg-chain -m physdev --physdev-out tap33226b8a-e5 --physdev-is-bridged -j quantum-openvswi-i33226b8a-e -A quantum-openvswi-sg-chain -m physdev --physdev-in tap33226b8a-e5 --physdev-is-bridged -j quantum-openvswi-o33226b8a-e -A quantum-openvswi-sg-chain -j ACCEPT -A quantum-openvswi-sg-fallback -j DROP COMMIT # Completed on Tue Apr 2 12:52:29 2013 ]0;nicira@ubuntu: ~/devstack nicira@ubuntu:~/devstack$ exit Script done on Tue 02 Apr 2013 12:52:30 PM PDT
Private
[
?
]
Run code
Submit