Aha!!!
Thanks for informing me about that George!
So one solution would be to switch to Neutron which is something that
can't be done right now because I definitely need the auto-assignment of
floating IPs which hasn't been implemented yet.
Any other ideas on how to achieve it? Could a pfSense firewall be the
solution to the problem?
Regards,
G.
The egress filtering is only available with Neutron (Icehouse
included).
On 5 Jan 2015 07:57, "Georgios Dimitrakakis" wrote:
Hi George!
Do I have to configure egress traffic through CLI and how? My
understanding is that from Dashboard everything is for ingress
traffic only. Do I miss something?
I am on Icehouse release using nova (legacy) networking.
Best,
G.
Hi Georgios,
The security groups allow for ingress and egress filtering, so
you
should be good to go.
George
On 5 Jan 2015 07:26, "Georgios Dimitrakakis" wrote:
First of all I d like to wish to each and everyone of you happy
new
year!
Then I d like to know if there is a way to control the outbound
(egress) traffic directly from within Openstack
for a group of VMs rather than modifying the iptables for each
one
of them.
It would be great if there is a way to group the VMs on a
"security" group (like the way its done for the inbound traffic
on
security groups).
If not is there any other way to achieve this? I am thinking of
setting up a pfSense firewall and pass all traffic from there.
Would
that work? Any other ideas/suggestions??
Best regards,
George
_______________________________________________
Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[1] [1]
Post to : openstack@lists.openstack.org [2] [2]
Unsubscribe :
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[3] [3]
Links:
------
[1] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[4]
[2] mailto:openstack@lists.openstack.org [5]
[3] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[6]
[4] mailto:gior...@acmac.uoc.gr [7]
Links:
------
[1] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[2] mailto:openstack@lists.openstack.org
[3] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[4] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[5] mailto:openstack@lists.openstack.org
[6] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[7] mailto:gior...@acmac.uoc.gr
[8] mailto:gior...@acmac.uoc.gr
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
