<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>Mike is talking about our specific way of doing floating ips - which is not the default for neutron, so you do *NOT* have to add an allowed-address pair for the floating ip to work.</div>
<div><br>
</div>
<div>You will however have to add to the security group rules to allow traffic from whatever networks are connecting to your floating ip. The reason for this is because the floating Ip is performed via nat. So traffic from say the internet hits the floating
IP and is destination nat'd to the IP of you vm. So from your vm's stand point it sees traffic from the internet trying to connect to it. If the security group rules on the vm do not allow this traffic it will be dropped.</div>
<div>
<div>
<div>____________________________________________</div>
<div> </div>
<div>Kris Lindgren</div>
<div>Senior Linux Systems Engineer</div>
<div>GoDaddy, LLC.</div>
<div><br>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Michael Dorman <<a href="mailto:mdorman@godaddy.com">mdorman@godaddy.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, April 8, 2015 at 8:38 AM<br>
<span style="font-weight:bold">To: </span>OpenStack Operators <<a href="mailto:openstack-operators@lists.openstack.org">openstack-operators@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [Openstack-operators] [Neutron]floatingip with security group<br>
</div>
<div><br>
</div>
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>Yup, you need to configure an “address pair” for the floating IP. This isn’t specifically a security groups thing, but it will allow traffic to the floating IP to pass into the VM to which it is associated.</div>
<div><br>
</div>
<div>Under the covers, it’s implemented similarly to security groups, but is not directly a security groups function.</div>
<div><br>
</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>LeeKies<br>
<span style="font-weight:bold">Date: </span>Wednesday, April 8, 2015 at 2:42 AM<br>
<span style="font-weight:bold">To: </span>OpenStack Operators<br>
<span style="font-weight:bold">Subject: </span>[Openstack-operators] [Neutron]floatingip with security group<br>
</div>
<div><br>
</div>
<div><style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:????
}
--></style>
<div class="hmmessage">
<div dir="ltr"><span style="color: rgb(68, 68, 68); font-family: 'Microsoft YaHei UI', 'Microsoft YaHei', ??, Calibri, sans-serif; font-size: 15px; line-height: 21.299999237060547px; background-color: rgb(255, 255, 255);">I create a VM with a default security
group , then I create and associate a floating ip with this VM.</span>
<div style="line-height: 21.299999237060547px; color: rgb(68, 68, 68); font-family: 'Microsoft YaHei UI', 'Microsoft YaHei', ??, Calibri, sans-serif; font-size: 15px;">
But I can't connect the floating ip, I check the security group, and I think it's the sg problem. I add a rule in default sg, and then I can connect the floating ip.</div>
<div style="line-height: 21.299999237060547px; color: rgb(68, 68, 68); font-family: 'Microsoft YaHei UI', 'Microsoft YaHei', ??, Calibri, sans-serif; font-size: 15px;">
<br>
</div>
<div style="line-height: 21.299999237060547px; color: rgb(68, 68, 68); font-family: 'Microsoft YaHei UI', 'Microsoft YaHei', ??, Calibri, sans-serif; font-size: 15px;">
When I create a floating ip , Does I have to add a rule in security group to allow the ip for ingress ??</div>
</div>
</div>
</div>
</span></div>
</div>
</span>
</body>
</html>