RDO AIO : VM not reaching Internet / outside (host) networks about coa HOT 2 CLOSED

The solution was
1) Set the interface br-ex with the router gateway IP
sudo ip a a 172.24.4.225/28 dev br-ex

2) Set NAT on the host using iptables to allow traffic from br-ex to go outside using host IP

iptables -I FORWARD -i br-ex -j ACCEPT 
iptables -I FORWARD -o br-ex -j ACCEPT
sudo iptables -t nat -I POSTROUTING -s 172.24.4.0/28 ! -d 172.24.4.0/28 -j MASQUERADE

Now works like a charm:

from coa.

The solution is top put the cloud public GW IP (172.24.4.225) on the br-ex bridge and configure NAT to allow traffic from 172.24.4.0/28 (default RDO AIO public network) to go outside the interface econnected to your outside world (eno1677736 in the case of RDO AIO default settings):

Temporary settings

enable routing (/etc/sysctl.conf)
sysctl -w net.ipv4.ip_forward = 1

Bring br-ex interface up and set its ip to router GW:

ifconfig br-ex up
ip a a 172.24.4.225/28 dev br-ex

Configure NAT on br-ex

iptables -I FORWARD -i br-ex -j ACCEPT 
iptables -I FORWARD -o br-ex -j ACCEPT
iptables -t nat -I POSTROUTING -s 172.24.4.0/28 ! -d 172.24.4.0/28 -j MASQUERADE

Persistent settings:

vi accessoutside

#!/bin/bash
sysctl -w net.ipv4.ip_forward = 1
ifconfig br-ex up
ip a a 172.24.4.225/28 dev br-ex
iptables -I FORWARD -i br-ex -j ACCEPT 
iptables -I FORWARD -o br-ex -j ACCEPT
iptables -t nat -I POSTROUTING -s 172.24.4.0/28 ! -d 172.24.4.0/28 -j MASQUERADE

Then make the script load at start:

cp accessoutside /etc/init.d/accessoutside
echo "/etc/init.d/accessoutside" >> /etc/rc.local

from coa.