Ah, gotcha. So you're not using overlapping subnets then. Unfortunately that hack wouldn't work in our environment, but definitely something that others might consider using.
On Wed, Apr 15, 2015 at 4:13 AM, Mike Spreitzer <mspre...@us.ibm.com> wrote: > > From: Daniel Comnea <comnea.d...@gmail.com> > > To: Jacob Godin <jacobgo...@gmail.com> > > Cc: Mike Spreitzer/Watson/IBM@IBMUS, OpenStack Operators <openstack- > > operat...@lists.openstack.org> > > Date: 04/15/2015 02:34 AM > > Subject: Re: [Openstack-operators] [Neutron] Floating IPs / Router > Gateways > > Sent by: daniel.com...@gmail.com > > > > Mike, pls share the solution, some are interested even if is a hack > > as long as it gets the job done. > > > > > > > On Tue, Apr 14, 2015 at 10:24 PM, Jacob Godin <jacobgo...@gmail.com> > wrote: > > Hey Mike, > > > > Would you send along your solution off-list? I'm curious, and I won't > judge :) > > > > On Tue, Apr 14, 2015 at 6:22 PM, Mike Spreitzer <mspre...@us.ibm.com> > wrote: > > Jacob Godin <jacobgo...@gmail.com> wrote on 04/14/2015 05:12:48 PM: > > > > > Absolutely. We're trying to reduce our public IPv4 usage, so having > > > one per tenant network (not even including floating IPs) is a drain. > > > > I am having exactly the same issue. I am currently solving it with > > a different hack that nobody likes, I will not even describe it > > here. But total agreement that the problem is important. > > > > IPv6 is the ultimate answer, provided there is a reasonably smooth > > transition. I think we will need to support a tenant that is using > > both v4 and v6 during his transition. This will require NAT between > > a tenant's v4 and v6. > > > > Regards, > > Mike > > OK, you asked for it. What we do is share Neutron routers, and add some > iptables rules that prevent communication between the tenants sharing a > router. I told you it was a hack. > > Regards, > Mike > >
_______________________________________________ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators