Ubuntu 22.04
Sponsored Link

OpenStack Caracal : Neutron Network (VXLAN)2024/04/08

 
Configure virtual networking by OpenStack Network Service (Neutron).
For example, configure VXLAN type of networking on here.
Before it, Configure basic settings on Control Node, Network Node, Compute Node.
Furthermore, this example is based on the environment that Network Node and Compute Node have 2 network interfaces.
And also [eth1] is up without IP Address, refer to here of [1] to up anonymous interface on Netplan.
------------+--------------------------+--------------------------+------------
            |                          |                          |
        eth0|10.0.0.30             eth0|10.0.0.50             eth0|10.0.0.51
+-----------+-----------+  +-----------+-----------+  +-----------+-----------+
|   [ dlp.srv.world ]   |  | [ network.srv.world ] |  |  [ node01.srv.world ] |
|     (Control Node)    |  |     (Network Node)    |  |     (Compute Node)    |
|                       |  |                       |  |                       |
|  MariaDB    RabbitMQ  |  |  Neutron L2/L3 Agent  |  |        Libvirt        |
|  Memcached  Nginx     |  |   Neutron Metadata    |  |      Nova Compute     |
|  Keystone   httpd     |  |     Open vSwitch      |  |    Neutron L2 Agent   |
|  Glance     Nova API  |  |                       |  |      Open vSwitch     |
|  Neutron Server       |  |                       |  |                       |
|  Neutron Metadata     |  |                       |  |                       |
+-----------------------+  +-----------+-----------+  +-----------------------+
                                   eth1|(UP with no IP)

[1] Change settings on Control Node.
root@dlp ~(keystone)#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# line 158 : add a value to [tenant_network_types]

tenant_network_types =
vxlan
# line 218 : add

[ml2_type_flat]
flat_networks = physnet1
# line 274 : add

[ml2_type_vxlan]
vni_ranges = 1:1000
root@dlp ~(keystone)#
systemctl restart neutron-server

[2] Change settings on Network Node.
# add bridge

root@network:~#
ovs-vsctl add-br br-eth1
# add [eth1] to the port of the bridge above
# replace the interface name [eth1] to your own environment

root@network:~#
ovs-vsctl add-port br-eth1 eth1
root@network:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# line 158 : add a value to [tenant_network_type]

tenant_network_types =
vxlan
# line 218 : add

[ml2_type_flat]
flat_networks = physnet1
# line 274 : add

[ml2_type_vxlan]
vni_ranges = 1:1000
root@network:~#
vi /etc/neutron/plugins/ml2/openvswitch_agent.ini
# line 164 : add

[agent]
tunnel_types = vxlan
prevent_arp_spoofing = True
# line 303 : add

[ovs]
local_ip = 10.0.0.50
bridge_mappings = physnet1:br-eth1
root@network:~#
vi /etc/neutron/dhcp_agent.ini
# line 77 : add

dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf
root@network:~#
vi /etc/neutron/dnsmasq-neutron.conf
# create new

dhcp-option-force=26,1450
root@network:~#
systemctl restart neutron-l3-agent neutron-dhcp-agent neutron-metadata-agent neutron-openvswitch-agent

[3] Change settings on Compute Node.
root@node01:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# line 158 : add a value to [tenant_network_types]

tenant_network_types =
vxlan
# line 218 : add

[ml2_type_flat]
flat_networks = physnet1
# line 274 : add

[ml2_type_vxlan]
vni_ranges = 1:1000
root@node01:~#
vi /etc/neutron/plugins/ml2/openvswitch_agent.ini
# line 164 : add

[agent]
tunnel_types = vxlan
prevent_arp_spoofing = True
# line 303 : specify IP address of this host

[ovs]
local_ip = 10.0.0.51
root@node01:~#
systemctl restart neutron-openvswitch-agent

[4] Create a Virtual router. It's OK to work on any node. (example below is on Control Node)
root@dlp ~(keystone)#
openstack router create router01

+-------------------------+--------------------------------------+
| Field                   | Value                                |
+-------------------------+--------------------------------------+
| admin_state_up          | UP                                   |
| availability_zone_hints |                                      |
| availability_zones      |                                      |
| created_at              | 2024-04-08T04:43:03Z                 |
| description             |                                      |
| distributed             | False                                |
| enable_ndp_proxy        | None                                 |
| external_gateway_info   | null                                 |
| flavor_id               | None                                 |
| ha                      | False                                |
| id                      | 38efd908-497b-45f8-83dc-f54fca2cc1db |
| name                    | router01                             |
| project_id              | 334656902e8c4d2187d3413c604c1f89     |
| revision_number         | 1                                    |
| routes                  |                                      |
| status                  | ACTIVE                               |
| tags                    |                                      |
| tenant_id               | 334656902e8c4d2187d3413c604c1f89     |
| updated_at              | 2024-04-08T04:43:03Z                 |
+-------------------------+--------------------------------------+
[5] Create internal network and associate with the router above.
# create internal network

root@dlp ~(keystone)#
openstack network create private --provider-network-type vxlan

+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2024-04-08T04:43:24Z                 |
| description               |                                      |
| dns_domain                | None                                 |
| id                        | 5eabdc12-985d-4cba-951f-92e94afa781d |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| is_vlan_transparent       | None                                 |
| mtu                       | 1450                                 |
| name                      | private                              |
| port_security_enabled     | True                                 |
| project_id                | 334656902e8c4d2187d3413c604c1f89     |
| provider:network_type     | vxlan                                |
| provider:physical_network | None                                 |
| provider:segmentation_id  | 635                                  |
| qos_policy_id             | None                                 |
| revision_number           | 1                                    |
| router:external           | Internal                             |
| segments                  | None                                 |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      |                                      |
| tenant_id                 | 334656902e8c4d2187d3413c604c1f89     |
| updated_at                | 2024-04-08T04:43:24Z                 |
+---------------------------+--------------------------------------+

# create subnet for internal network

root@dlp ~(keystone)#
openstack subnet create private-subnet --network private \
--subnet-range 192.168.100.0/24 --gateway 192.168.100.1 \
--dns-nameserver 10.0.0.10

+----------------------+--------------------------------------+
| Field                | Value                                |
+----------------------+--------------------------------------+
| allocation_pools     | 192.168.100.2-192.168.100.254        |
| cidr                 | 192.168.100.0/24                     |
| created_at           | 2024-04-08T04:43:49Z                 |
| description          |                                      |
| dns_nameservers      | 10.0.0.10                            |
| dns_publish_fixed_ip | None                                 |
| enable_dhcp          | True                                 |
| gateway_ip           | 192.168.100.1                        |
| host_routes          |                                      |
| id                   | d341aadd-ee8c-423a-9d20-7b2ba50e8843 |
| ip_version           | 4                                    |
| ipv6_address_mode    | None                                 |
| ipv6_ra_mode         | None                                 |
| name                 | private-subnet                       |
| network_id           | 5eabdc12-985d-4cba-951f-92e94afa781d |
| project_id           | 334656902e8c4d2187d3413c604c1f89     |
| revision_number      | 0                                    |
| segment_id           | None                                 |
| service_types        |                                      |
| subnetpool_id        | None                                 |
| tags                 |                                      |
| updated_at           | 2024-04-08T04:43:49Z                 |
+----------------------+--------------------------------------+

# set subnet to the router above

root@dlp ~(keystone)#
openstack router add subnet router01 private-subnet
[6] Create external network and associate with the router above.
# create external network

root@dlp ~(keystone)#
openstack network create \
--provider-physical-network physnet1 \
--provider-network-type flat --external public

+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2024-04-08T04:44:21Z                 |
| description               |                                      |
| dns_domain                | None                                 |
| id                        | 7334ffeb-dc76-4fe1-a81e-c57de9b43679 |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| is_vlan_transparent       | None                                 |
| mtu                       | 1500                                 |
| name                      | public                               |
| port_security_enabled     | True                                 |
| project_id                | 334656902e8c4d2187d3413c604c1f89     |
| provider:network_type     | flat                                 |
| provider:physical_network | physnet1                             |
| provider:segmentation_id  | None                                 |
| qos_policy_id             | None                                 |
| revision_number           | 1                                    |
| router:external           | External                             |
| segments                  | None                                 |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      |                                      |
| tenant_id                 | 334656902e8c4d2187d3413c604c1f89     |
| updated_at                | 2024-04-08T04:44:21Z                 |
+---------------------------+--------------------------------------+

# create subnet for external network

root@dlp ~(keystone)#
openstack subnet create public-subnet \
--network public --subnet-range 10.0.0.0/24 \
--allocation-pool start=10.0.0.200,end=10.0.0.254 \
--gateway 10.0.0.1 --dns-nameserver 10.0.0.10 --no-dhcp

+----------------------+--------------------------------------+
| Field                | Value                                |
+----------------------+--------------------------------------+
| allocation_pools     | 10.0.0.200-10.0.0.254                |
| cidr                 | 10.0.0.0/24                          |
| created_at           | 2024-04-08T04:44:48Z                 |
| description          |                                      |
| dns_nameservers      | 10.0.0.10                            |
| dns_publish_fixed_ip | None                                 |
| enable_dhcp          | False                                |
| gateway_ip           | 10.0.0.1                             |
| host_routes          |                                      |
| id                   | 0ba7f9f5-078e-425b-b9ba-884b19a02e3e |
| ip_version           | 4                                    |
| ipv6_address_mode    | None                                 |
| ipv6_ra_mode         | None                                 |
| name                 | public-subnet                        |
| network_id           | 7334ffeb-dc76-4fe1-a81e-c57de9b43679 |
| project_id           | 334656902e8c4d2187d3413c604c1f89     |
| revision_number      | 0                                    |
| segment_id           | None                                 |
| service_types        |                                      |
| subnetpool_id        | None                                 |
| tags                 |                                      |
| updated_at           | 2024-04-08T04:44:48Z                 |
+----------------------+--------------------------------------+

# set gateway to the router above

root@dlp ~(keystone)#
openstack router set router01 --external-gateway public

[7] By default, it's possible to access for all projects to external network, but for internal network, only admin projects can access to it, so grant access permission for internal network to a project you'd like to let users in the project use.
# show network RBAC list

root@dlp ~(keystone)#
openstack network rbac list

+-------------------------------+-------------+--------------------------------+
| ID                            | Object Type | Object ID                      |
+-------------------------------+-------------+--------------------------------+
| f08cd516-8334-4cae-8702-      | network     | 7334ffeb-                      |
| c981fcb32c07                  |             | dc76-4fe1-a81e-c57de9b43679    |
+-------------------------------+-------------+--------------------------------+

# RBAC details
# all projects can access only to [access_as_external]

root@dlp ~(keystone)#
openstack network rbac show f08cd516-8334-4cae-8702-c981fcb32c07

+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| action            | access_as_external                   |
| id                | f08cd516-8334-4cae-8702-c981fcb32c07 |
| object_id         | 7334ffeb-dc76-4fe1-a81e-c57de9b43679 |
| object_type       | network                              |
| project_id        | 334656902e8c4d2187d3413c604c1f89     |
| target_project_id | *                                    |
+-------------------+--------------------------------------+

# show network list

root@dlp ~(keystone)#
openstack network list

+---------------------------------+---------+----------------------------------+
| ID                              | Name    | Subnets                          |
+---------------------------------+---------+----------------------------------+
| 5eabdc12-985d-4cba-951f-        | private | d341aadd-                        |
| 92e94afa781d                    |         | ee8c-423a-9d20-7b2ba50e8843      |
| 7334ffeb-                       | public  | 0ba7f9f5-078e-425b-b9ba-         |
| dc76-4fe1-a81e-c57de9b43679     |         | 884b19a02e3e                     |
+---------------------------------+---------+----------------------------------+

# show project list

root@dlp ~(keystone)#
openstack project list

+----------------------------------+-----------+
| ID                               | Name      |
+----------------------------------+-----------+
| 334656902e8c4d2187d3413c604c1f89 | admin     |
| c8fe37b15914498993f4222c1be9342f | service   |
| caf4551824d8499c984a70fc038b32e3 | hiroshima |
+----------------------------------+-----------+

# grant [access_as_shared] permission for [private] to [hiroshima] project

root@dlp ~(keystone)#
netID=$(openstack network list | grep private | awk '{ print $2 }')

root@dlp ~(keystone)#
prjID=$(openstack project list | grep hiroshima | awk '{ print $2 }')

root@dlp ~(keystone)#
openstack network rbac create --target-project $prjID --type network --action access_as_shared $netID

+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| action            | access_as_shared                     |
| id                | b1fc2a59-a4a1-456b-aeae-63a4703ebf55 |
| object_id         | f0de107e-2177-474b-b40e-1ebaec740691 |
| object_type       | network                              |
| project_id        | 39e8c6d7a2d14ee581902f0703a53b66     |
| target_project_id | f30cd546632e484cb24414d83207694b     |
+-------------------+--------------------------------------+
[8] Login with a user who is in the project you granted access permission to internal network and Create and boot an instance.
# confirm available [flavor] list

ubuntu@dlp ~(keystone)$
openstack flavor list

+----+----------+------+------+-----------+-------+-----------+
| ID | Name     |  RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+----------+------+------+-----------+-------+-----------+
| 1  | m1.tiny  | 2048 |   10 |         0 |     1 | True      |
| 2  | m1.small | 4096 |   10 |         0 |     2 | True      |
| 3  | m1.large | 8192 |   10 |         0 |     4 | True      |
| 4  | m2.large | 8192 |   10 |        10 |     4 | True      |
+----+----------+------+------+-----------+-------+-----------+

# confirm available image list

ubuntu@dlp ~(keystone)$
openstack image list

+--------------------------------------+------------+--------+
| ID                                   | Name       | Status |
+--------------------------------------+------------+--------+
| 855cee7b-5ced-495e-9e75-48117212a310 | Ubuntu2204 | active |
+--------------------------------------+------------+--------+

# confirm available network list

ubuntu@dlp ~(keystone)$
openstack network list

+---------------------------------+---------+----------------------------------+
| ID                              | Name    | Subnets                          |
+---------------------------------+---------+----------------------------------+
| 5eabdc12-985d-4cba-951f-        | private | d341aadd-                        |
| 92e94afa781d                    |         | ee8c-423a-9d20-7b2ba50e8843      |
| 7334ffeb-                       | public  | 0ba7f9f5-078e-425b-b9ba-         |
| dc76-4fe1-a81e-c57de9b43679     |         | 884b19a02e3e                     |
+---------------------------------+---------+----------------------------------+

# create a security group for instances

ubuntu@dlp ~(keystone)$
openstack security group create secgroup01

+-----------------+------------------------------------------------------------+
| Field           | Value                                                      |
+-----------------+------------------------------------------------------------+
| created_at      | 2024-04-08T04:29:23Z                                       |
| description     | secgroup01                                                 |
| id              | 5f634717-8f1d-4907-9dd6-729454d76e8b                       |
| name            | secgroup01                                                 |
| project_id      | caf4551824d8499c984a70fc038b32e3                           |
| revision_number | 1                                                          |
| rules           | created_at='2024-04-08T04:29:23Z', direction='egress',     |
|                 | ethertype='IPv6',                                          |
|                 | id='7d42a829-b075-4e2e-bb0a-f4248031273e',                 |
|                 | standard_attr_id='21', updated_at='2024-04-08T04:29:23Z'   |
|                 | created_at='2024-04-08T04:29:23Z', direction='egress',     |
|                 | ethertype='IPv4',                                          |
|                 | id='893532f2-2fc9-43c1-b81e-e4aee7e10b1e',                 |
|                 | standard_attr_id='20', updated_at='2024-04-08T04:29:23Z'   |
| shared          | False                                                      |
| stateful        | True                                                       |
| tags            | []                                                         |
| updated_at      | 2024-04-08T04:29:23Z                                       |
+-----------------+------------------------------------------------------------+

# create an SSH keypair for connecting to instances

ubuntu@dlp ~(keystone)$
ssh-keygen -q -N ""

Enter file in which to save the key (/home/ubuntu/.ssh/id_rsa):
# add public-key

ubuntu@dlp ~(keystone)$
openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey

+-------------+-------------------------------------------------+
| Field       | Value                                           |
+-------------+-------------------------------------------------+
| created_at  | None                                            |
| fingerprint | 58:18:a6:19:45:50:99:ae:7d:3f:7c:ea:8b:d9:63:c7 |
| id          | mykey                                           |
| is_deleted  | None                                            |
| name        | mykey                                           |
| type        | ssh                                             |
| user_id     | fbbb44f2e3d440c581966f6c1cdbc359                |
+-------------+-------------------------------------------------+

ubuntu@dlp ~(keystone)$
netID=$(openstack network list | grep private | awk '{ print $2 }')

ubuntu@dlp ~(keystone)$
openstack server create --flavor m1.small --image Ubuntu2204 --security-group secgroup01 --nic net-id=$netID --key-name mykey Ubuntu-2204
ubuntu@dlp ~(keystone)$
openstack server list

+--------------+-------------+--------+---------------+------------+----------+
| ID           | Name        | Status | Networks      | Image      | Flavor   |
+--------------+-------------+--------+---------------+------------+----------+
| 75f03008-    | Ubuntu-2204 | ACTIVE | private=192.1 | Ubuntu2204 | m1.small |
| a889-4d5f-   |             |        | 68.100.138    |            |          |
| bb6b-        |             |        |               |            |          |
| a0f40b181fec |             |        |               |            |          |
+--------------+-------------+--------+---------------+------------+----------+
[9] Assign floating IP address to the Instance above.
ubuntu@dlp ~(keystone)$
openstack floating ip create public

+---------------------+--------------------------------------+
| Field               | Value                                |
+---------------------+--------------------------------------+
| created_at          | 2024-04-08T04:50:31Z                 |
| description         |                                      |
| dns_domain          | None                                 |
| dns_name            | None                                 |
| fixed_ip_address    | None                                 |
| floating_ip_address | 10.0.0.248                           |
| floating_network_id | 7334ffeb-dc76-4fe1-a81e-c57de9b43679 |
| id                  | 095b2ff8-c0c8-4952-a11e-9c847b3a6256 |
| name                | 10.0.0.248                           |
| port_details        | None                                 |
| port_id             | None                                 |
| project_id          | caf4551824d8499c984a70fc038b32e3     |
| qos_policy_id       | None                                 |
| revision_number     | 0                                    |
| router_id           | None                                 |
| status              | DOWN                                 |
| subnet_id           | None                                 |
| tags                | []                                   |
| updated_at          | 2024-04-08T04:50:31Z                 |
+---------------------+--------------------------------------+

ubuntu@dlp ~(keystone)$
openstack server add floating ip Ubuntu-2204 10.0.0.248
# confirm settings

ubuntu@dlp ~(keystone)$
openstack floating ip show 10.0.0.248

+---------------------+--------------------------------------------------------+
| Field               | Value                                                  |
+---------------------+--------------------------------------------------------+
| created_at          | 2024-04-08T04:50:31Z                                   |
| description         |                                                        |
| dns_domain          | None                                                   |
| dns_name            | None                                                   |
| fixed_ip_address    | 192.168.100.138                                        |
| floating_ip_address | 10.0.0.248                                             |
| floating_network_id | 7334ffeb-dc76-4fe1-a81e-c57de9b43679                   |
| id                  | 095b2ff8-c0c8-4952-a11e-9c847b3a6256                   |
| name                | 10.0.0.248                                             |
| port_details        | admin_state_up='True',                                 |
|                     | device_id='75f03008-a889-4d5f-bb6b-a0f40b181fec',      |
|                     | device_owner='compute:nova',                           |
|                     | mac_address='fa:16:3e:64:7a:ec', name='',              |
|                     | network_id='5eabdc12-985d-4cba-951f-92e94afa781d',     |
|                     | status='ACTIVE'                                        |
| port_id             | cf4d279e-b0e9-4b50-85af-8ca0227767ff                   |
| project_id          | caf4551824d8499c984a70fc038b32e3                       |
| qos_policy_id       | None                                                   |
| revision_number     | 2                                                      |
| router_id           | 38efd908-497b-45f8-83dc-f54fca2cc1db                   |
| status              | ACTIVE                                                 |
| subnet_id           | None                                                   |
| tags                | []                                                     |
| updated_at          | 2024-04-08T04:50:57Z                                   |
+---------------------+--------------------------------------------------------+

ubuntu@dlp ~(keystone)$
openstack server list

+--------------+-------------+--------+---------------+------------+----------+
| ID           | Name        | Status | Networks      | Image      | Flavor   |
+--------------+-------------+--------+---------------+------------+----------+
| 75f03008-    | Ubuntu-2204 | ACTIVE | private=10.0. | Ubuntu2204 | m1.small |
| a889-4d5f-   |             |        | 0.248, 192.16 |            |          |
| bb6b-        |             |        | 8.100.138     |            |          |
| a0f40b181fec |             |        |               |            |          |
+--------------+-------------+--------+---------------+------------+----------+
[10] Configure security settings for the security group you created above to access with SSH and ICMP.
# permit ICMP

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol icmp --ingress secgroup01

+-------------------------+--------------------------------------+
| Field                   | Value                                |
+-------------------------+--------------------------------------+
| belongs_to_default_sg   | False                                |
| created_at              | 2024-04-08T04:31:44Z                 |
| description             |                                      |
| direction               | ingress                              |
| ether_type              | IPv4                                 |
| id                      | 8c256545-d6c2-4cad-b89d-aafd15871cbb |
| name                    | None                                 |
| normalized_cidr         | 0.0.0.0/0                            |
| port_range_max          | None                                 |
| port_range_min          | None                                 |
| project_id              | caf4551824d8499c984a70fc038b32e3     |
| protocol                | icmp                                 |
| remote_address_group_id | None                                 |
| remote_group_id         | None                                 |
| remote_ip_prefix        | 0.0.0.0/0                            |
| revision_number         | 0                                    |
| security_group_id       | 5f634717-8f1d-4907-9dd6-729454d76e8b |
| tags                    | []                                   |
| updated_at              | 2024-04-08T04:31:44Z                 |
+-------------------------+--------------------------------------+

# permit SSH

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01

+-------------------------+--------------------------------------+
| Field                   | Value                                |
+-------------------------+--------------------------------------+
| belongs_to_default_sg   | False                                |
| created_at              | 2024-04-08T04:32:00Z                 |
| description             |                                      |
| direction               | ingress                              |
| ether_type              | IPv4                                 |
| id                      | dc98e423-39cc-4fac-a352-66e71ec71a47 |
| name                    | None                                 |
| normalized_cidr         | 0.0.0.0/0                            |
| port_range_max          | 22                                   |
| port_range_min          | 22                                   |
| project_id              | caf4551824d8499c984a70fc038b32e3     |
| protocol                | tcp                                  |
| remote_address_group_id | None                                 |
| remote_group_id         | None                                 |
| remote_ip_prefix        | 0.0.0.0/0                            |
| revision_number         | 0                                    |
| security_group_id       | 5f634717-8f1d-4907-9dd6-729454d76e8b |
| tags                    | []                                   |
| updated_at              | 2024-04-08T04:32:00Z                 |
+-------------------------+--------------------------------------+

ubuntu@dlp ~(keystone)$
openstack security group rule list secgroup01

+----------+-------------+-----------+----------+------------+-----------+-----------------------+----------------------+
| ID       | IP Protocol | Ethertype | IP Range | Port Range | Direction | Remote Security Group | Remote Address Group |
+----------+-------------+-----------+----------+------------+-----------+-----------------------+----------------------+
| 7d42a829 | None        | IPv6      | ::/0     |            | egress    | None                  | None                 |
| -b075-   |             |           |          |            |           |                       |                      |
| 4e2e-    |             |           |          |            |           |                       |                      |
| bb0a-    |             |           |          |            |           |                       |                      |
| f4248031 |             |           |          |            |           |                       |                      |
| 273e     |             |           |          |            |           |                       |                      |
| 893532f2 | None        | IPv4      | 0.0.0.0/ |            | egress    | None                  | None                 |
| -2fc9-   |             |           | 0        |            |           |                       |                      |
| 43c1-    |             |           |          |            |           |                       |                      |
| b81e-    |             |           |          |            |           |                       |                      |
| e4aee7e1 |             |           |          |            |           |                       |                      |
| 0b1e     |             |           |          |            |           |                       |                      |
| 8c256545 | icmp        | IPv4      | 0.0.0.0/ |            | ingress   | None                  | None                 |
| -d6c2-   |             |           | 0        |            |           |                       |                      |
| 4cad-    |             |           |          |            |           |                       |                      |
| b89d-    |             |           |          |            |           |                       |                      |
| aafd1587 |             |           |          |            |           |                       |                      |
| 1cbb     |             |           |          |            |           |                       |                      |
| dc98e423 | tcp         | IPv4      | 0.0.0.0/ | 22:22      | ingress   | None                  | None                 |
| -39cc-   |             |           | 0        |            |           |                       |                      |
| 4fac-    |             |           |          |            |           |                       |                      |
| a352-    |             |           |          |            |           |                       |                      |
| 66e71ec7 |             |           |          |            |           |                       |                      |
| 1a47     |             |           |          |            |           |                       |                      |
+----------+-------------+-----------+----------+------------+-----------+-----------------------+----------------------+
[11] It's possible to login to the Instance to connect to the floating IP address with SSH like follows.
ubuntu@dlp ~(keystone)$
openstack server list

+--------------+-------------+--------+---------------+------------+----------+
| ID           | Name        | Status | Networks      | Image      | Flavor   |
+--------------+-------------+--------+---------------+------------+----------+
| 75f03008-    | Ubuntu-2204 | ACTIVE | private=10.0. | Ubuntu2204 | m1.small |
| a889-4d5f-   |             |        | 0.248, 192.16 |            |          |
| bb6b-        |             |        | 8.100.138     |            |          |
| a0f40b181fec |             |        |               |            |          |
+--------------+-------------+--------+---------------+------------+----------+

ubuntu@dlp ~(keystone)$
ssh ubuntu@10.0.0.248

The authenticity of host '10.0.0.248 (10.0.0.248)' can't be established.
ED25519 key fingerprint is SHA256:jUeeeGEqzXQHaC1TIdTk1Ji2c6IVEOBvBrph+IApYec.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '10.0.0.248' (ED25519) to the list of known hosts.
Welcome to Ubuntu 22.04.4 LTS (GNU/Linux 5.15.0-101-generic x86_64)

.....
.....

To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

ubuntu@ubuntu-2204:~$     # logined
Matched Content