[Openstack-operators] [openstack-operators]disable snat for router gateway

Bajin, Joseph jbajin at verisign.com
Sat Jan 16 02:04:58 UTC 2016


The instance would still require a floating IP. That is the only way the host would get outside of the tenant network.

We do this for some of our tenants to ensure that we know that only connections outbound would be controlled by Floating IPs.



On Jan 15, 2016, at 6:55 PM, Akshay Kumar Sanghai <akshaykumarsanghai at gmail.com<mailto:akshaykumarsanghai at gmail.com>> wrote:

Hi,
In the cli of neutron router-gateway-set, thers is an option of disable snat. http://docs.openstack.org/cli-reference/neutron.html#neutron-router-gateway-set

Does that mean i can create a tenant network and the packet will go out with the same fixed ip of the vm? Assume the tenant network created is routable or identifiable in the physical network.
I tried to disable snat for the router gateway, but the packet wasn't going out from the external interface. Do i need to edit some iptable rules or the disable snat option doesn't work?

Thanks,
Akshay
_______________________________________________
OpenStack-operators mailing list
OpenStack-operators at lists.openstack.org<mailto:OpenStack-operators at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160116/38f8ac75/attachment.html>


More information about the OpenStack-operators mailing list