[openstack-dev] Chalenges with highly available service VMs

Ian Wells ijw.ubuntu at cack.org.uk
Fri Jul 19 00:15:05 UTC 2013


On 18 July 2013 19:48, Aaron Rosen <arosen at nicira.com> wrote:
> Is there something this is missing that could be added to cover your use
> case? I'd be curious to hear where this doesn't work for your case.  One
> would need to implement the port_security extension if they want to
> completely allow all ips/macs to pass and they could state which ones are
> explicitly allowed with the allowed-address-pair extension (at least that is
> my current thought).

Yes - have you got docs on the port security extension?  All I've
found so far are
http://docs.openstack.org/developer/quantum/api/quantum.extensions.portsecurity.html
and the fact that it's only the Nicira plugin that implements it.  I
could implement it for something else, but not without a few hints...
-- 
Ian.



More information about the OpenStack-dev mailing list