A little more context to what Somesh mentioned.

If you are running Xen/KVM, then you can deploy a cloudstack zone with Security Groups.

This means cloudstack will manage the iptables rules on the hypervisors and push only the ACL rules you define in cloudstack.

This suppose to be very scalable and would solve the common firewall management challenges as well as need for running VLAN isolation.

Really powerful concept to say the least in very large setups and abstracts lots of firewall and switch level complexity.

On 5/5/15 3:29 PM, Somesh Naidu wrote:
You could use Security Groups to achieve this.

Somesh
CloudPlatform Escalations
Citrix Systems, Inc.


-----Original Message-----
From: anil lakineni [mailto:anilkumar459.lakin...@gmail.com]
Sent: Tuesday, May 05, 2015 4:32 PM
To: us...@cloudstack.apache.org; dev@cloudstack.apache.org
Subject: Re: Centralized Management console for all tenants on CS 4.3.1..??

Hi All,

Comments are in line,

A quick question, Is there any possibility to stop communication between
two VMs which are using shared network (why because I need communication
between some VMs on this shared network and I don't want communication
between some VMs on this same shared network).

Waiting for your valuable replays.

Thank You,
Anil.

On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
anilkumar459.lakin...@gmail.com> wrote:

Hi All,

I need a help..

I want to monitor all the tenant VMs from a centralized VM with in the
Cloud Stack.

" Here my testing plan is, I have two isolated accounts and each account
contains a VM .And I will be deploying a VM (which is centralized
management VM)  on ROOT account. Now I want to monitor those two isloated
account VMs from ROOT account VM." and here main concern is no two tenants
VMs will communicate.

Please can any one suggest me the best possible ways to solve my task.

My CS version is 4.3.1 and XenServer version is 6.2.0

Looking forward for your valuable comments.

Best Regards,
Anil.


Reply via email to