2. You c= an't control traffic and make special rules for traffic of each VM.

3. This solution isn't extendable if you want to extend VCL in nea= r future.

So I came with the following solution :

http://users.= cis.fiu.edu/~mshaf012/pdf/OpenVswitch.pdf

BTW, I can't see your attachment, it would be bette= r to upload it somewhere.

Best Regards

M= ani

On Thu, Aug 2, 2012 at 10:29 A= M, Dmitri Chebotarov <dchebota@gmu.edu> wrote:

Hi

I would like to share a method of adding custom networks per a VCL image. This solution is based on the code already present in VCL.

This solution is not end-user/student oriented. There is no option to speci= fy networks during reservation.
Network(s) and VM hosts needs to be preconfigured before custom networks ca= n be used.
Switch Local VLAN IDs can be used to create isolated networks for VCL.
Global VLAN IDs can be used to give VCL reservations access to different ne= tworks.

Isolated network use example would be a security class where malicious traf= fic needs to be generated and analyzed. Running such class on public/privat= e VCL network is not desirable, so an isolated VCL network can be used in t= his case. In case with isolated networks a DHCP server needs to be present = to provide IP addresses on isolated networks. The DHCP server can be part o= f VCL infrastructure or be a very-long-term server reservation (the new fea= ture in VCL 2.3).

Global use example would be a VCL reservation which needs access to a depar= tment network or lab environment. It allows to connect VCL reservations to = existing infrastructure.

It's different from CS/OS implementation as it doesn't give any con= trol over networking to end-user, hence no security concerns about VCL end-= users getting unwanted access to a custom network(s).
Since custom network(s) is part of the image properties, only groups/users = who allowed to make reservation based on the image will have access to spec= ified networks.

Below is PDF file with code changes. I've tested it in sandbox env and = it seems to be working well.

Thanks.

On Jul 31, 2012, at 13:16 , Mani Shafa'atDoost <mani.doost@gmail.com> wrote:

> Hi =A0Dmitri,
>
> This seems interesting to me. =A0I am planing to do a contribution on = VCL
> project which allow you to make a network topology of VMs and load thi= s
> topology instead of one VM. For this reason I need to add more NIC on = some
> images and also I need to make a mechanism for this communication.
> I have read a lot about this and I think the best option is using Open=
> Vswitch on VCL which has a strong support on networking part and allow= you
> to do many things on network side. Currently I am making some document= s and
> I will post it here. I would be happy to see some other people from th= is
> group to work on networking part.
>
>
> On Tue, Jul 31, 2012 at 12:55 PM, Dmitri Chebotarov <dchebota@gmu.edu>wrote:
>
>> Hi
>>
>> Looks like VMware.pm already has a code to add custom networking b= ased on
>> project name:
>>
>> =A0 =A0 =A0 =A0# Add additional Ethernet interfaces if the image p= roject name is
>> not vcl
>> =A0 =A0 =A0 =A0if ($image_project !~ /^vcl$/i &&
>> $self->api->can('get_network_names')) {
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0notify($ERRORS{'DEBUG'}, 0,= "image project is:
>> $image_project, checking if additional network adapters should be<= br> >> configured");
>>
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0# Get a list of all the network nam= es configured on the
>> VMware host
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0my @network_names =3D $self->api= ->get_network_names();
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0notify($ERRORS{'DEBUG'}, 0,= "retrieved network names
>> configured on the VM host: " . join(", ", @network_= names));
>>
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0# Check each network name
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0# Begin the index at 2 for addition= al interfaces added
>> because ethernet0 and ethernet1 have already been added
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0for my $network_name (@network_name= s) {
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0if ($network_name = =3D~ /$image_project/i ||
>> $image_project =3D~ /$network_name/i) {
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0not= ify($ERRORS{'DEBUG'}, 0, "network name
>> ($network_name) and image project name ($image_project) intersect,= adding
>> network interface to VM for network $network_name");
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0%vm= x_parameters =3D (%vmx_parameters,
>> %{$self->get_generated_ethernet_vmx_definition($interface_index= ,
>> $network_name)});
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0$in= terface_index++;
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0}
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0else {
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0not= ify($ERRORS{'DEBUG'}, 0, "network name
>> ($network_name) and image project name ($image_project) do not int= ersect,
>> network interface will not be added to VM for network $network_nam= e");
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0}
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0}
>>
>> =A0 =A0 =A0 =A0}
>> =A0 =A0 =A0 =A0else {
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0notify($ERRORS{'DEBUG'}, 0,= "image project is:
>> $image_project, additional network adapters will not be configured= ");
>> =A0 =A0 =A0 =A0}
>>
>> By default all image has project as 'vcl'.
>> Currently project name can only be in ('vcl','hpc'= ,'vclhpc').
>> Will it be OK to remove ENUM on project column, create correspondi= ng
>> additional networks on ESXi servers and use this option to add cus= tom
>> networks?
>>
>> I've also tested how additional VM networks in Virtual Host pr= ofile work.
>> Once I configured profile with additional networks, these networks= are
>> added to each reservation which starts on corresponding VM host. >> This may not be what I'm looking for, as I don't need all = these networks
>> on each image.
>>
>> Thank you.
>>
>> On Jul 31, 2012, at 11:39 , Dmitri Chebotarov <dchebota@gmu.edu> wrote:
>>
>>> Hi
>>>
>>> VCL 2.3 has added two more VM Networks in Virtual Host profile= .
>>> Can I use these networks (all at once or selectively) in image= s?
>>>
>>> I'm looking to add custom network interface to a Linux ima= ge (in
>> addition to default Private/Public).
>>>
>>> --
>>> Thank you,
>>>
>>> Dmitri Chebotarov
>>> Virtual Computing Lab Systems Engineer, TSD - Ent Servers &= ; Messaging
>>> 223 Aquia Building, Ffx, MSN: 1B5
>>> Phone: (703) 993-6175
>>> Fax: (703) 993-3404
>>>
>>>
>>>
>>>
>>
>>
>>
>> --
>> Thank you,
>>
>> Dmitri Chebotarov
>> Virtual Computing Lab Systems Engineer, TSD - Ent Servers & Me= ssaging
>> 223 Aquia Building, Ffx, MSN: 1B5
>> Phone: (703) 993-6175
>> Fax: (= 703) 993-3404
>>
>>
>>
>>
>>
>
>
> --
> Best Regards
> Mani

--
Thank you,

Dmitri Chebotarov
Virtual Computing Lab Systems Engineer, TSD - Ent Servers & Messaging 223 Aquia Building, Ffx, MSN: 1B5
Phone: (703) 993-6175
Fax: (703) 993-3404

--
Best Reg= ards

Mani

--bcaec54d4b020f584304c649955e--