openstack/openstack-helm
Code Issues Proposed changes

Dev-Deploy: Setup iptables for use with docker >= 1.13.1

Browse Source 
With Docker >= 1.13.1 the default the default FORWARD chain policy
is configured to DROP, for the l3 agent to function as expected and
VMs reach the outside world correctly this needs to be set to ACCEPT.

Change-Id: I6bea3304f5eb4ab6b37283e94e20cda7e4119a44
This commit is contained in:
portdirect 2017-12-27 15:46:10 -05:00 committed by Pete Birley
parent a5ce4c4833
commit 10b4205417
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
tools/deployment/developer/16-setup-gateway.sh
View File

@ -21,6 +21,11 @@ OSH_EXT_SUBNET="172.24.4.0/24"
sudo ip addr add ${OSH_BR_EX_ADDR} dev br-ex
sudo ip link set br-ex up
# NOTE(portdirect): With Docker >= 1.13.1 the default the default FORWARD chain
# policy is configured to DROP, for the l3 agent to function as expected and
# VMs reach the outside world correctly this needs to be set to ACCEPT.
sudo iptables -P FORWARD ACCEPT
# Setup masquerading on default route dev to public subnet
DEFAULT_ROUTE_DEV="$(sudo ip -4 route list 0/0 | awk '{ print $5; exit }')"
sudo iptables -t nat -A POSTROUTING -o ${DEFAULT_ROUTE_DEV} -s ${OSH_EXT_SUBNET} -j MASQUERADE