It seems nova-network does not check Host OS ip_forward is enabled or not. By default ip_forward is disabled in RHEL, better nova-network to check and enable it during service bootup. So that, traffic to floating IP of instance can pass through. Regards, Kimi Zhang