[rhos-list] Problems with compute node after update.

[Jon Thomas]

Hi

On which host did you stop iptables?

I'm assuming controller.

Depends on how secure you want, but these should work. However, they are
wide open in terms of source.

iptables -I INPUT -p tcp -m tcp --dport 5672 -j ACCEPT
iptables -I INPUT -p tcp -m tcp --dport 3306 -j ACCEPT

so to avoid saving the openstack changes to iptables into /etc/sysconfig
on the controller

$for svc in api objectstore network volume scheduler consoleauth cert
novncproxy; do sudo service openstack-nova-$svc stop; done
$service iptables restart ....to clean out nova entries
$iptables -I INPUT -p tcp -m tcp --dport 5672 -j ACCEPT
$iptables -I INPUT -p tcp -m tcp --dport 3306 -j ACCEPT
$service iptables save
$service iptables restart
$iptables -L  .....to verify the entries for 5672,3306 persist
$for svc in api objectstore network volume scheduler consoleauth cert
novncproxy; do sudo service openstack-nova-$svc start; done




On Thu, 2013-02-28 at 19:17 +0000, Minton, Rich wrote:
> Well I think I broke it…
> 
>  
> 
> After running yum update to try to fix my autofs  problem, my compute
> node can no longer talk to mysql server or my AMQP server on my
> controller node.
> 
>  
> 
> ==> network.log <==
> 
> 2013-02-28 14:10:39 15088 ERROR nova.manager [-] Error during
> VlanManager._disassociate_stale_fixed_ips: (OperationalError) (2003,
> "Can't connect to MySQL server on '10.10.12.245' (113)") None None
> 
> ==> compute.log <==
> 
> 2013-02-28 14:14:55 15113 ERROR nova.openstack.common.rpc.impl_qpid
> [-] Unable to connect to AMQP server: [Errno 113] EHOSTUNREACH.
> Sleeping 60 seconds
> 
>  
> 
> If I turn off iptables they begin talking again. I’m not quite sure
> what I need to reapply to get them talking again.
> 
>  
> 
> Any ideas?
> 
>  
> 
> Thanks again.
> 
> Rick
> 
>  
> 
> Richard Minton
> 
> LMICC Systems Administrator
> 
> 4000 Geerdes Blvd, 13D31
> 
> King of Prussia, PA 19406
> 
> Phone: 610-354-5482
> 
>  
> 
> 
> _______________________________________________
> rhos-list mailing list
> rhos-list at redhat.com
> https://www.redhat.com/mailman/listinfo/rhos-list