Open Stack

Hi Endre!

I tried it too but, L3 do NAT even without needing it (i.e. when using
public "routable" address for tenant's subnet)... I see that L3 "thinks"
that it always needs to do NAT...

More details, as follows:

Even using real public IPv4 for tenants (trying to avoid Floating IPs and /
or NAT), at the network node, I'm still seeing SNAT rules within the chain
"quantum-l3-agent-float-snat / quantum-l3-agent-float-snat"...

How can I disable it, running my cloud entirely by pure routing (i.e. no
NAT on L3)...? Making/tagging somehow the tenant subnet as public?!

Tks!
Thiago


On 5 August 2013 08:03, Endre Karlson <endre.karlson at gmail.com> wrote:

> FYI I think you should be able to put your instances directly on the
> public network with Quantum no?
>
> Endre.
>
>
> 2013/8/5 Martinx - ジェームズ <thiagocmartinsc at gmail.com>
>
>> Guys!
>>
>> I'm so tired of dealing with this NAT-thing, called here as "Floating
>> IPs" or "L3 + Auto NAT for you that you can't disable it easily"...
>>
>> This thing's got to go!
>>
>> So! We have IPv6, all public addresses, no NAT table for it (thanks
>> Nerds), all public, as firsts days of the Internet... Good days...
>>
>> I'm wondering when OpenStack will works in a pure IPv6 environment, any
>> ideas?!
>>
>> I do not want to deal with NAT tables anymore, neither "Floating IPs"...
>> This is all $#%#% for me.
>>
>>
>> I just read the following OpenStack (I think) doc:
>>
>>
>> https://docs.google.com/document/d/1RaKIfaIpy0NhHtssWhlUYgtzPpRgQzjJTF5N1DAKD_c/edit
>>
>> Which says:
>>
>> "IPv6 Only Tenant Network" <- YES!!
>>
>> "The router will not support v6 for NAT"  <- YES! PLEASE! When?!
>>
>>
>> NOTE: Please, if you guys are planning to enable "Floating IPs" for IPv6,
>> PLEASE, don't do it! Or, at least, leave it entirely disabled by default...
>>
>>
>> Forget about "NAT + Floating IPs" is a priority for my public cloud... I
>> do not want ANY NAT table within my OpenStack environment, never. This is a
>> very important part of my business plan: no NAT, no Floating IPs, public
>> IPs everywhere.
>>
>> Maybe for Havana?! Is it mature enough, so I can test it today?!
>>
>> I just want to give automatically 1 IPv6 /64 for each tanant subnet and
>> be happy... Also, tenants will be able to request more, pre-configured,
>> IPv6 subnets, for sure...
>>
>> We're almost there?! Or maybe next year?!
>>
>> Tks!
>> Thiago
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130805/1c489941/attachment.html>