[Openstack-operators] How to define transparent proxy in Neutron
George Shuklin
george.shuklin at gmail.com
Tue Apr 8 06:08:12 UTC 2014
Well, it's bit complicated. Because 'proxy' usually working on L5+
(http,https, ftp,etc). And instances wants pure L3 functionality. For
example, how you expects to 'proxy' NFS connection from instance to
white IP outside your networking? Even if you not plan to do this,
architecture expects to be capable to.
Theoretically you can intercept http/ftp/https traffic on router and
push it to the transparent proxy (google it!). I think this can be done
even on neutron-l3-agent host, but it better to disable network
namespaces and add some hacks to iptables 'for all tenants'.
On 04/03/2014 02:21 PM, Dmitry wrote:
> Hi,
> Our OpenStack cluster is under the corporate internet proxy. Each
> request which is coming from Nova instance will need to go through
> this proxy.
> Can you please help me to create such configuration?
>
> Thanks a lot,
> Dmitry
>
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20140408/cbb86d1e/attachment.html>
More information about the OpenStack-operators
mailing list