<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>Hi,</div>
<div><br>
</div>
<div>>> You cannot get around each tenant gateway router consuming an extra public IP address itself as far as I know.</div>
<div><br>
</div>
<div>Almost. With DVR, a FIP namespace is created on compute nodes, with one FIP namespace per external network. The FIP namespace owns an IP address from the external provider network, and all tenant routers connected to the same external network on the same
node connect to the respective FIP namespace via veth pair. It is possible that all compute nodes could each have a FIP namespace connected to the same external network, which would certainly reduce the number of IPs available, but it beats having to give
each tenant router an IP. There is some NAT/routing/Proxy ARP magic that goes into making this config work. Assaf’s blog is a great resource for that info.</div>
<div><br>
</div>
<div>James</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Tom Verdaat <<a href="mailto:tom@server.biz">tom@server.biz</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, January 20, 2016 at 9:02 AM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [Openstack] DVR and public IP consumption<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">
<div>
<div>Hi Tomas,<br>
<br>
</div>
Actually the networking nodes, and in a DVR scenario the compute nodes, don't need a public IP assigned to the node itself. All they need is a networking interface connected to the "public" network. Only tenant routers set as a gateway consume one public IP
address each as overhead. You cannot get around each tenant gateway router consuming an extra public IP address itself as far as I know.<br>
<br>
</div>
<div>Does that answer your question?<br>
<br>
</div>
<div>Cheers,<br>
<br>
</div>
<div>Tom<br>
</div>
<div>
<div><br>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2016-01-20 13:48 GMT+01:00 Tomas Vondra <span dir="ltr">
<<a href="mailto:vondra@czech-itc.cz" target="_blank">vondra@czech-itc.cz</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi!<br>
I have just deployed an OpenStack Kilo installation with DVR and expected<br>
that it will consume one Public IP per network node as per<br>
<a href="http://assafmuller.com/2015/04/15/distributed-virtual-routing-floating-ips/" rel="noreferrer" target="_blank">http://assafmuller.com/2015/04/15/distributed-virtual-routing-floating-ips/</a>,<br>
but it still eats one per virtual Router.<br>
What is the correct behavior?<br>
Otherwise, it works as a DVR should according to documentation. There are<br>
router namespaces at both compute and network nodes, snat namespaces at the<br>
network nodes and fip namespaces at the compute nodes. Every router has a<br>
router_interface_distributed and a router_centralized_snat with private IPs,<br>
however the router_gateway has a public IP, which I would like to getr id of<br>
to increase density.<br>
Thanks<br>
<br>
<br>
_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</span>
</body>
</html>