I am working through a NAT.   To get vdsmd to talk from inside the server and outside, using a secure connection, I made 2 changes:

/etc/vdsm/vdsm.conf

   management_ip=0.0.0.0

Second, add the external IP address to the NIC as a secondary IP:

   ip addr add 72.249.6.135/24 dev rhevm

Now the inside commands work as well:
# vdsClient -s 0 list table


On Sat, Oct 6, 2012 at 1:03 PM, Paul Dyer <pmdyermms@gmail.com> wrote:
My real outside address is 72.    Here are the requested tests.

[root@decatur oracle]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
72.249.6.0      0.0.0.0         255.255.255.0   U     0      0        0 rhevm
10.249.6.0      0.0.0.0         255.255.255.0   U     0      0        0 rhevm
20.249.6.0      0.0.0.0         255.255.255.0   U     0      0        0 data6
30.249.6.0      0.0.0.0         255.255.255.0   U     0      0        0 data30
169.254.0.0     0.0.0.0         255.255.0.0     U     1006   0        0 rhevm
169.254.0.0     0.0.0.0         255.255.0.0     U     1007   0        0 data6
169.254.0.0     0.0.0.0         255.255.0.0     U     1008   0        0 data30
0.0.0.0         10.249.6.130    0.0.0.0         UG    0      0        0 rhevm
[root@decatur oracle]# traceroute 72.249.6.135
traceroute to 72.249.6.135 (72.249.6.135), 30 hops max, 60 byte packets
 1  decatur.ctgcentral.com (72.249.6.135)  0.059 ms  0.008 ms  0.007 ms
[root@decatur oracle]# netstat -lntp |grep 54321
tcp        0      0 10.249.6.135:54321          0.0.0.0:*                   LISTEN      40164/python       


On Sat, Oct 6, 2012 at 2:56 AM, Dan Kenigsberg <danken@redhat.com> wrote:
On Fri, Oct 05, 2012 at 06:19:07PM -0500, Paul Dyer wrote:
> I have vdsm.conf set for ssl=true.   When I run vdsClient from localhost, I
> get connection refused.
>
> # vdsClient -s localhost list table
> Connection to localhost:54321 refused
> # vdsClient -s 0 list table
> Connection to 172.249.6.135:54321 refused
>
> My host IPADDR is set to a 10. address internally, but I have added an
> external secondary address to the nic.
>
> # ip addr show
> 6: xxxx: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state
> UNKNOWN
>     link/ether 14:fe:b5:ca:5a:78 brd ff:ff:ff:ff:ff:ff
>     inet 10.249.6.135/24 brd 10.249.6.255 scope global rhevm
>     inet 172.249.6.135/24 scope global rhevm
>
> >From a remote host, the vdsClient works okay.
>
> # vdsClient -s 172.249.6.135 list table
> 86e03987-8d54-4d1b-af39-85200b959e2f   7268  rh5-royal            Up
>
>
> My question, what could cause ECONNREFUSED from a localhost?
>
> I got this from strace:
> 16:36:49 connect(3, {sa_family=AF_INET, sin_port=htons(54321),
> sin_addr=inet_addr("172.249.6.135")}, 16) = -1 ECONNREFUSED (Connection
> refused) <0.000439>

I would guess that local routing table have 172.249.6.135-bound packet
go outside.

what's your `route -n` ?

could you `traceroute 172.249.6.135` ?

which is the ip address bound to vdsm's port 54321?
    netstat -lntp

Dan.



--
Paul Dyer,
Mercury Consulting Group, RHCE




--
Paul Dyer,
Mercury Consulting Group, RHCE
504-302-8750