[Openstack] [openstack][neutron] dvr_snat + l3_ha on compute nodes
Brian Haley
brian.haley at hpe.com
Fri Jul 15 14:25:44 UTC 2016
On 07/14/2016 07:12 AM, Vladislav Belogrudov wrote:
> Hello,
>
> is it possible to run dvr_snat on computes only (in ha mode as well)? Docs [1]
> tell that dvr_snat+l3_ha agents should be on controllers / network nodes while
> dvr agents on computes. Does dvr part of dvr_snat only work in active/passive if
> we do ha?
>
> I wonder if compute nodes can be network ones as well without much overhead.
> This way network nodes would go away from the setup.
SNAT is always a centralized component of Neutron, since there is a single
default SNAT IP address that must be shared by all VMs for a tenant - that IP
can't be in two places at once. Running in dvr_snat mode on computes will just
make them all network nodes, which should be avoided since losing a compute then
means you've lost more of your control plane. They are typically separate due
to the differences in how they are managed - network nodes are more like pets,
computes more like cattle.
-Brian
More information about the Openstack
mailing list