Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-dev@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of Chiradeep.Vittal@citrix.com
 designates 66.165.176.89 as permitted sender)
From: Chiradeep Vittal <Chiradeep.Vittal@citrix.com>
To: "cloudstack-dev@incubator.apache.org"
	<cloudstack-dev@incubator.apache.org>
Date: Fri, 18 May 2012 10:25:39 -0700
Subject: Re: basic zone for public clouds
Thread-Topic: basic zone for public clouds
Thread-Index: Ac01Gz/CofTJl+jUTb+GlseMTmuklQ==
Message-ID: <CBDBD3BD.212F5%chiradeep.vittal@citrix.com>
In-Reply-To: <CBDC7ED5.10E6C%murali.reddy@citrix.com>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/14.13.0.110805
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0


On 5/18/12 10:16 AM, "Murali Reddy" <Murali.Reddy@citrix.com> wrote:

>>
>>
>>
>>> When EIP feature is enabled, all tenant instances automatically get a
>>> public IP that is 1:1 NAT to their RFC1918 IP.
>>
>>Is it true for SSVM and CPVM as well? If so, it will be a minor change
>>for SSVM and CPVM to hand out the public IP backed by EIP to support the
>>feature Murali asks. Otherwise, the public IP/VLAN has to be provided
>>inside SSVM/CPVM, while currently SSVM and CPVM do not do that by
>>default.
>>
>
>I think SSVM, CPVM will have to use public IP backed by EIP model.
>Directly assigning public IP to SSVM, CPVM may result them to be
>non-routable. For e.g NetScaler that provides EIP/ELB service can be the
>only data entry/exit point in a zone and may be setup in two-arm mode[1]
>where only NetScaler is in public network. So SSVM/CPVM on the pod's
>subnet may not be reachable even if they have public IP.
>
>[1]:http://support.citrix.com/proddocs/topic/netscaler-getting-started-map
>-
>91/ns-nw-twoarm-mul-sbnt-con.html


In Advanced mode, the public VLAN is trunked down to the hypervisors as
well as to external devices such as SRX and F5. This is exactly the same
configuration. The public VLAN is trunked down to the hypervisors so that
the system vms can get public ips.

--
Chiradeep