<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<div>Out of the box, vms usually can contact the controllers though the routers nat, but not visa versa. So its preferable for guest agents to make the connection, not the controller connect to the guest agents. No floating ips, security group rules or special
networks are needed then.<br>
<br>
Thanks,<br>
Kevin <strong>
<div><font face="Tahoma" color="#000000" size="2"> </font></div>
</strong>
<hr tabindex="-1">
<font face="Tahoma" size="2"><b>From:</b> Clint Byrum<br>
<b>Sent:</b> Monday, June 15, 2015 6:10:27 PM<br>
<b>To:</b> openstack-dev<br>
<b>Subject:</b> Re: [openstack-dev] [Magnum] TLS Support in Magnum<br>
</font><br>
<div></div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Excerpts from Fox, Kevin M's message of 2015-06-15 15:59:18 -0700:<br>
> No, I was confused by your statement:<br>
> "When we create a bay, we have an ssh keypair that we use to inject the ssh public key onto the nova instances we create."<br>
> <br>
> It sounded like you were using that keypair to inject a public key. I just misunderstood.<br>
> <br>
> It does raise the question though, are you using ssh between the controller and the instance anywhere? If so, we will still run into issues when we go to try and test it at our site. Sahara does currently, and we're forced to put a floating ip on every instance.
Its less then ideal...<br>
> <br>
<br>
Why not just give each instance a port on a network which can route<br>
directly to the controller's network? Is there some reason you feel<br>
"forced" to use a floating IP?<br>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</div>
</span></font>
</body>
</html>