无法从同一本地网络ping和连接云堆栈VM实例IP

Question

我是云计算的初学者，现在正在学习构建私有云的云堆栈。根据此文档，我已经在一个节点上安装了管理服务器以及存储，在另一个节点上安装了KVM计算服务器。我还设置了管理服务器并添加了区域，吊舱，群集和主机。一切似乎都正常运行。但是，当我在云堆栈中创建实例时，我可以使用云堆栈提供的控制台进入该虚拟机，但无法使用该IP ping并连接该实例通过ssh解决问题。现在有人可以解决这个问题吗？谢谢您的关注。

Answer 1

If you can access the VM's console that is provided by the Console Proxy VM than CloudStack has no role in you unable to ping the VM on your local machine. Can you provide some more details regarding your network? I think as you have just started you would be using L2 (flat) networking right now (providing IP of the same network CIDR or subnet) There has got to be a problem with your network configuration either on the local machine from where you are trying or Cloudstack. I suggest you see if both your machine and VM can ping the gateway. That would be the first step, if they can, try accessing internet from both (if you can use internet in your network you used to setup Cloudstack).

The quickstart guide you are using is specificly being designed for configuring management server, NFS storage and agent in one machine only. When you use a different machine as a KVM agent, it's configuration changes slightly I have encountered similar issues earlier. I suggest you follow this guide: http://docs.cloudstack.apache.org/projects/cloudstack-installation/en/4.9/hypervisor/kvm.html As you are using separate machine as KVM agent, a frequent issue is out of sync iptables rules. Following should be taken care of in KVM agent's OS environment:

1. Disable firewalld - don't be afraid, CloudStack uses iptables which is indeed used by firewalld service to manage network rules. Leaving firewalld service running is the most common root cause of the issue. You can do it by the following commands ( These disable and stops running of firewalld currently and after reboot)

   systemctl disable firewalld && systemctl stop firewalld

2. Restart the iptables and cloudstack-agent services

   systemctl restart iptables systemctl restart cloudstack-agent

If you still see any issues, I suggest you load the default iptables rules that are given here in ACS documentation and restart the iptables service: http://docs.cloudstack.apache.org/projects/cloudstack-installation/en/4.9/hypervisor/kvm.html

Also, if you are just starting, common places to see and understand the errors are the /var/log/cloudstack/management/management-server.log in management machine and /var/log/cloudstack/agent/agent.log in agent machine. Here you will see the most probable errors or warnings (if they exist) in your cloudstack setup. Tell me if it works. All the best.

PS: Use Cloudstack 4.11 if you are just starting, that's the latest stable LTS release (although there are some minor bugs here and there, but nothing cloud breaking ;)