Open Stack

To cope with such cases, allowed-address-pairs extension was implemented.
http://docs.openstack.org/api/openstack-network/2.0/content/allowed_address_pair_ext_ops.html

(2014/04/17 13:39), Kevin Benton wrote:
> I was under the impression that the security group rules blocked
> addresses not assigned by neutron[1].
>
> 1.https://github.com/openstack/neutron/blob/master/neutron/agent/linux/iptables_firewall.py#L188
>
>
> On Wed, Apr 16, 2014 at 9:20 PM, Aaron Rosen <aaronorosen at gmail.com
> <mailto:aaronorosen at gmail.com>> wrote:
>
>     You can do it with ip aliasing and use one interface:
>
>     ifconfig eth0 10.0.0.22/24 <http://10.0.0.22/24>
>     ifconfig eth0:1 10.0.0.23/24 <http://10.0.0.23/24>
>     ifconfig eth0:2 10.0.0.24/24 <http://10.0.0.24/24>
>
>     2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state
>     DOWN qlen 1000
>          link/ether 40:6c:8f:1a:a9:31 brd ff:ff:ff:ff:ff:ff
>          inet 10.0.0.22/24 <http://10.0.0.22/24> brd 10.0.0.255 scope
>     global eth0
>             valid_lft forever preferred_lft forever
>          inet 10.0.0.23/24 <http://10.0.0.23/24> brd 10.0.0.255 scope
>     global secondary eth0:1
>             valid_lft forever preferred_lft forever
>          inet 10.0.0.24/24 <http://10.0.0.24/24> brd 10.0.0.255 scope
>     global secondary eth0:2
>             valid_lft forever preferred_lft forever
>
>
>
>     On Wed, Apr 16, 2014 at 8:53 PM, Kevin Benton <blak111 at gmail.com
>     <mailto:blak111 at gmail.com>> wrote:
>
>         Web server running multiple SSL sites that wants to be
>         compatible with clients that don't support the SNI extension.
>         There is no way for a server to get multiple IP addresses on the
>         same interface is there?
>
>
>         On Wed, Apr 16, 2014 at 5:50 PM, Aaron Rosen
>         <aaronorosen at gmail.com <mailto:aaronorosen at gmail.com>> wrote:
>
>             This is true. Several people have asked this same question
>             over the years though I've yet to hear a use case why one
>             really need to do this. Do you have one?
>
>
>             On Wed, Apr 16, 2014 at 3:12 PM, Ronak Shah
>             <ronak at nuagenetworks.net <mailto:ronak at nuagenetworks.net>>
>             wrote:
>
>                 Hi Vikash,
>                 Currently this is not supported. the NIC not only needs
>                 to be in different subnet, they have to be in different
>                 network as well (container for the subnet)
>
>                 Thanks
>                 Ronak
>
>                 On Wed, Apr 16, 2014 at 3:51 AM, Vikash Kumar
>                 <vikash.kumar at oneconvergence.com
>                 <mailto:vikash.kumar at oneconvergence.com>> wrote:
>
>                     *With 'interfaces' I mean 'nics' of VM*.
>
>
>                     On Wed, Apr 16, 2014 at 4:18 PM, Vikash Kumar
>                     <vikash.kumar at oneconvergence.com
>                     <mailto:vikash.kumar at oneconvergence.com>> wrote:
>
>                         Hi,
>
>                               I want to launch one VM which will have
>                         two Ethernet interfaces with IP of single
>                         subnet. Is this supported now in openstack ? Any
>                         suggestion ?
>
>
>                         Thanx
>
>
>
>                     _______________________________________________
>                     OpenStack-dev mailing list
>                     OpenStack-dev at lists.openstack.org
>                     <mailto:OpenStack-dev at lists.openstack.org>
>                     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
>                 _______________________________________________
>                 OpenStack-dev mailing list
>                 OpenStack-dev at lists.openstack.org
>                 <mailto:OpenStack-dev at lists.openstack.org>
>                 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
>             _______________________________________________
>             OpenStack-dev mailing list
>             OpenStack-dev at lists.openstack.org
>             <mailto:OpenStack-dev at lists.openstack.org>
>             http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
>
>         --
>         Kevin Benton
>
>         _______________________________________________
>         OpenStack-dev mailing list
>         OpenStack-dev at lists.openstack.org
>         <mailto:OpenStack-dev at lists.openstack.org>
>         http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
>     _______________________________________________
>     OpenStack-dev mailing list
>     OpenStack-dev at lists.openstack.org
>     <mailto:OpenStack-dev at lists.openstack.org>
>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
>
> --
> Kevin Benton
>
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>