[Openstack] [openstack][neutron] dvr_snat + l3_ha on compute nodes

Brian Haley brian.haley at hpe.com
Fri Jul 15 14:25:44 UTC 2016


On 07/14/2016 07:12 AM, Vladislav Belogrudov wrote:
> Hello,
>
> is it possible to run dvr_snat on computes only (in ha mode as well)? Docs [1]
> tell that dvr_snat+l3_ha agents should be on controllers / network nodes while
> dvr agents on computes. Does dvr part of dvr_snat only work in active/passive if
> we do ha?
>
> I wonder if compute nodes can be network ones as well without much overhead.
> This way network nodes would go away from the setup.

SNAT is always a centralized component of Neutron, since there is a single 
default SNAT IP address that must be shared by all VMs for a tenant - that IP 
can't be in two places at once.  Running in dvr_snat mode on computes will just 
make them all network nodes, which should be avoided since losing a compute then 
means you've lost more of your control plane.  They are typically separate due 
to the differences in how they are managed - network nodes are more like pets, 
computes more like cattle.

-Brian




More information about the Openstack mailing list