jails Jail to jail communication with two nodes

Hello, I'm in the process of migrating a bigger hosting site from Ubuntu to FreeBSD and the hoster where I need to migrate all this runs OpenStack. From there I get two FreeBSD VMs, bsd-01 and bsd-02, I'm running bastille on both nodes in order to setup jailed environments.

I create compute-01 and compute-02 jail on bsd-01 and compute-03 on bsd-03. The two BSD nodes can see (ping) each other but the jails hosted on bsd-01 can't see or ping the jails on bsd-02 (yes, raw sockets has been enabled, bsd-01 can ping it's jails). The two bsd-01 and 02 VMs have virtual vtnetX interface vtnet0, I tried to create jails on bsd-01 using loopback, shared ip and vnet.

I noticed the following boradcast setting:

Bash:
➜  ~ ifconfig -n | grep 172
inet 172.31.10.10 netmask 0xfffff000 broadcast 172.31.15.255   # VM bsd-01
inet 172.31.10.35 netmask 0xffffffff broadcast 172.31.10.35    # Jail compute-01

172.31.10.10 is bsd-01 IP (VM) and 172.31.10.35 is the IP of the jail using aliasing on vtnet0, the broadcast seems different, could this be a potential issue for network communication between jails running on bsd-01 and jails running on bsd-02?

Thanks in advance on any feedback.
 
Could the issue be related to Openstack in some way? Maybe the network component of Openstack does not allow vnet in jails in some way, maybe a MAC address thing?
 
Back
Top