Mailing-List: contact cloudstack-users-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-users@incubator.apache.org
Received-SPF: pass (athena.apache.org: domain of
 alex.heneveld@cloudsoftcorp.com designates 74.125.83.44 as permitted sender)
Message-ID: <5111BE8C.4050004@CloudsoftCorp.com>
Date: Wed, 06 Feb 2013 02:23:08 +0000
From: Alex Heneveld <alex.heneveld@cloudsoftcorp.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8;
 rv:15.0) Gecko/20120907 Thunderbird/15.0.1
MIME-Version: 1.0
To: cloudstack-users@incubator.apache.org
Subject: mgmt VM access to VPC
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

We're trying to set up a VPC/nTier-App such that a single VM (call it a 
management node) outside the VPC has ssh access to the VM's inside the 
VPC.  (And to do this for multiple VPC's, same mgmt node.)  What's the 
best way to implement this?

It seems like #754 [1] would be the right way to go about this when 
available (is that right?) but already there are a few things we could 
do now:

- set up an extra public IP on each tier with careful port forwarding 
and ACL restricted to the mgmt node
- use an s2s vpn where the other "site" is just the mgmt node
- use a shared network, seems supported based on #748 [2] (but this 
would break isolation?)

Any thoughts on these or others?

TIA,
Alex


[1]  https://issues.apache.org/jira/browse/CLOUDSTACK-754
[2]  https://issues.apache.org/jira/browse/CLOUDSTACK-748