Hello Volodymyr, You have two options: 1. When you create your VIP, simply put in your external network as the vip-subnet-id or vip-network-id. This will allocate a public IP to the VIP. 2. Use neutron to assign a floating IP to the VIP address of the load balancer. From your example, let's say the VIP address of lb1 is 10.0.0.10 on the nbt-subnet with port ID 7e11e63e-7dcb-4b2c-835e-f5cd7ca79acf. You would use "openstack floating ip create --port 7e11e63e-7dcb-4b2c-835e-f5cd7ca79acf external". This will assign a floating IP to the VIP address.
Option 1 will have better performance as there is no NAT occurring like there is with a floating IP. Michael On Mon, Nov 27, 2017 at 1:30 AM, Volodymyr Litovka <doka...@gmx.com> wrote: > Hello colleagues, > > I think I'm missing something architectural in LBaaS / Octavia, thus asking > there - how to connect Amphora agent to external network? My current lab > topology is the following: > > + > | > | +----+ > + +----+ n1 | > | +---------+ | +----+ > +----+ Amphora +----+ > | +---------+ | +----+ > m | n +----+ n2 | > g | b | +----+ + e > m | t | | x > t | | +----+ | t > | s +----+ vR +----+ e > | u | +----+ | r > +------------+ b | | n > | Controller | n | +----+ | a > +------------+ e |----+ n3 | + l > t | +----+ > + > > where "Amphora" is agent which loadbalances requests between "n1" and "n2": > > openstack loadbalancer create --name lb1 --vip-subnet-id nbt-subnet > --project bush > openstack loadbalancer listener create --protocol TCP --protocol-port 80 > --name lis1 lb1 > openstack loadbalancer pool create --protocol TCP --listener lis1 --name > lpool1 --lb-algorithm ROUND_ROBIN > openstack loadbalancer member create --protocol-port 80 --name n1 --address > 1.1.1.11 lpool1 > openstack loadbalancer member create --protocol-port 80 --name n2 --address > 1.1.1.14 lpool1 > > Everything works (n3-sourced connections to Amphora-agent return answers > from n1 and n2 respectively in round robin way) and the question is how to > connect Amphora-agent to external network in order to service requests from > outside? > > In example above, nbt-subnet (which is VIP network) has a virtual router > which is connected to external network and has all abilities to provide e.g. > floating ip to Amphora, but I see nothing in octavia config files regarding > floating ip functions. > > Am I missing something? Any ways on connect Web-servers in closed > (project's) networks with Internet using Octavia / LBaaS? > > Thank you! > > -- > Volodymyr Litovka > "Vision without Execution is Hallucination." -- Thomas Edison > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev