Skip to content
This repository was archived by the owner on Mar 16, 2021. It is now read-only.
This repository was archived by the owner on Mar 16, 2021. It is now read-only.

Need heat template launch nNIC (multi NIC) cluster  #26

@q2807c

Description

@q2807c

The current clustered heat templates support two NICs. In a 2-NIC implementation, each BIG-IP VE has one interface used for management and data-plane traffic from the Internet, and the second interface connected into the Neutron networks where traffic is processed by the pool members.

The concerns on current deployment mode are:

  1. If we use internet facing NIC as management, which means we have to open 22 and 443 port, there will be potential risk for brute force attack.
  2. In case we move the management function to internal NIC, the central management system need to have access to all tenants’ VE through internal NIC. That will not fully matching the tenant isolation policy. VEs in different tenant can see each other via the central management system.

Would you please help to check if we can provide Heat Orchestration Template to launch an nNIC (multi NIC) cluster deployment, which has separate management NIC.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions