Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cloudstack.apache.org
Received-SPF: pass (nike.apache.org: domain of shanker.balan@shapeblue.com
 designates 213.199.154.11 as permitted sender)
From: Shanker Balan <shanker.balan@shapeblue.com>
To: CloudStack-Users <users@cloudstack.apache.org>
Subject: Re: Bridge management network
Thread-Topic: Bridge management network
Thread-Index: AQHO/ahV1pve2ge+60GZO6CRoHfEM5phnAoA
Date: Mon, 23 Dec 2013 10:42:36 +0000
Message-ID: <DC27B53E-593B-40C9-8D95-0AE720A922E7@shapeblue.com>
References: 
 <CAHSdJvTXm3NNr+K7QaeBhPU3VfxEyQDZmmQRUjimnXGm1qU0xA@mail.gmail.com>
In-Reply-To: 
 <CAHSdJvTXm3NNr+K7QaeBhPU3VfxEyQDZmmQRUjimnXGm1qU0xA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="Windows-1252"
Content-ID: <334E638F38EC0C42BD1AAF946B132490@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Hi Robert,

Comments inline.

On 20-Dec-2013, at 10:53 pm, Robert Navarro <crshman@gmail.com> wrote:

> Hey All,
>
> I realize that this is a highly unusual use case, but here we are.
>
> I have a 2U, 4 node server going to the Colo and I want to use all the
> nodes as vm hosts.
>
> The biggest thing though, I want to firewall off the management network
> using pfSense or some other software firewall VM that also resides on the=
se
> hosts.

Ok.


> Now I figure I can run two KVM VMs on two separate physical hosts outside
> of CloudStack to accomplish this, but I was wondering if there was a way =
to
> pipe the management network into a CloudStack managed VM so I can take
> advantage of the HA stuff that CloudStack offers.

The CloudStack VM HA features are available only when a shared primary stor=
age
is being used (NFS, iSCSI, FCOE).

Are you planning to use a shared storage service in your CloudStack setup?

> Let me know if you want to know any of the particulars of the networking
> layout and I'd be more than happy to supply the details.

While I have not personally tried what you are attempting but I don=92t see
any reason why you can=92t do it. I would however be concerned from an oper=
ability
point of view - what would happen to your gateway VM:

a) If primary storage is unreachable
b) If primary storage is down for maintenance

Am sure there will be a lot more gotchas along the way which will require
=93workarounds=94.

>From an uptime SLA perspective, I would stick to having a management
network out-of-band from the production network.

Regards.

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, B=
angalore - 560 055

Need Enterprise Grade Support for Apache CloudStack?
Our CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infra=
structure-support/> offers the best 24/7 SLA for CloudStack Environments.

Apache CloudStack Bootcamp training courses

**NEW!** CloudStack 4.2 training<http://shapeblue.com/cloudstack-training/>
08/09 January 2014, London<http://shapeblue.com/cloudstack-training/>
13-17 January 2014, GLOBAL. Instructor led, On-line<http://shapeblue.com/cl=
oudstack-training/>
20-24 January 2014, GLOBAL. Instructor led, On-line<http://shapeblue.com/cl=
oudstack-training/>

This email and any attachments to it may be confidential and are intended s=
olely for the use of the individual to whom it is addressed. Any views or o=
pinions expressed are solely those of the author and do not necessarily rep=
resent those of Shape Blue Ltd or related companies. If you are not the int=
ended recipient of this email, you must neither take any action based upon =
its contents, nor copy or show it to anyone. Please contact the sender if y=
ou believe you have received this email in error. Shape Blue Ltd is a compa=
ny incorporated in England & Wales. ShapeBlue Services India LLP is a compa=
ny incorporated in India and is operated under license from Shape Blue Ltd.=
 Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and=
 is operated under license from Shape Blue Ltd. ShapeBlue is a registered t=
rademark.