diff options
| author | Dean Troyer <dtroyer@gmail.com> | 2010-11-11 13:35:06 -0800 |
|---|---|---|
| committer | Dean Troyer <dtroyer@gmail.com> | 2010-11-11 13:35:06 -0800 |
| commit | e465c8b9a89ed6f547de4d7ee27de94712504630 (patch) | |
| tree | 53125d85a4d2edb0efde88dedb0c4b21ca33ada5 /doc/source | |
| parent | c520235ca70e42f42cfd364c2c76343d4d12a757 (diff) | |
Add Flat mode doc
Diffstat (limited to 'doc/source')
| -rw-r--r-- | doc/source/adminguide/network.vlan.rst | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/doc/source/adminguide/network.vlan.rst b/doc/source/adminguide/network.vlan.rst index f59976fb2..06ba590c2 100644 --- a/doc/source/adminguide/network.vlan.rst +++ b/doc/source/adminguide/network.vlan.rst @@ -23,6 +23,7 @@ VLAN Network Mode is the default mode for Nova. It provides a private network segment for each project's instances that can be accessed via a dedicated VPN connection from the Internet. + Goals ----- @@ -40,12 +41,14 @@ Goals * metadata * dashboard + Limitations ----------- * Projects / cluster limited to available VLANs in switching infrastructure * Requires VPN for access to project segment + Implementation -------------- @@ -64,7 +67,8 @@ network node maps a dedicated public IP/port to the CloudPipe instance. Compute nodes have per-VLAN interfaces and bridges created as required. These do NOT have IP addresses in the host to protect host access. Compute nodes have iptables/ebtables entries created per project and -instance to protect against IP/MAC spoofing. +instance to protect against IP/MAC address spoofing and ARP poisoning. + External Infrastructure ----------------------- @@ -75,6 +79,7 @@ Nova assumes the following is available: * NTP * Internet connectivity + Example ------- @@ -85,6 +90,7 @@ routing and gateway functions. It uses a 10GB network for instance traffic and a 1GB network for management. + Hardware ~~~~~~~~ @@ -98,6 +104,7 @@ Hardware * switch needs to support enough simultaneous VLANs for number of projects * production network configured as 802.1q trunk on switch + Operation ~~~~~~~~~ @@ -121,6 +128,7 @@ When starting an instance the compute node: * sets up a VLAN interface and bridge on each host as required when an instance is started on that host + Setup ~~~~~ |