I don’t want VMs exposed to Internet directly, and I don’t have enough Internet IP address for every compute node.
Is it possible that the compute nodes only attach to management and tenant network and access internet via NAT? Best regards, Rui Mao 发件人: Neil Jerram [mailto:n...@tigera.io] 发送时间: 2016年5月19日 16:20 收件人: Rui Mao <maoru...@163.com>; openstack@lists.openstack.org 主题: Re: [Openstack] Does compute node require provider network? If you attach a VM to a provider network - instead of to a tenant network - and give it an Internet-routable fixed IP address, it can access the Internet without any NAT. This has been the case for several OpenStack releases. Now that Neutron has address scopes, I believe it will soon be the case that a Neutron virtual router will avoid NAT when forwarding traffic between networks with the same address scope. That means that it should soon be possible for VMs attached to tenant networks to access the Internet without any NAT, too. Regards, Neil On Thu, May 19, 2016 at 6:02 AM Rui Mao <maoru...@163.com <mailto:maoru...@163.com> > wrote: http://docs.openstack.org/mitaka/install-guide-ubuntu/environment-networking.html#environment-networking In the guide, the compute node requires a provider network connection, and the neutron run in controller node. But per my understanding, all VMs access the internet via NAT, and the nova node has no internet access requirement in production environment. Anything I missed or misunderstood? Best regards, Rui Mao _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org <mailto:openstack@lists.openstack.org> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
