weizhouapache commented on issue #10012:
URL: https://github.com/apache/cloudstack/issues/10012#issuecomment-2544888933

   > > > So, for now we need to tell vmware/cks users to create loadbalancer 
rules by hand. Would that work, @weizhouapache @vishesh92 ?
   > > 
   > > 
   > > We can tell users to create the LB rules by hand. But, the user would 
also have to ensure that the list of VMs stays up to date in the load balancer 
rules. IMO, for long term, solution is to allow connectivity between MS & 
nodes. As of now, this also prevents the user to run a VM which could runs some 
automation scripts to manage cloudstack resources.
   > 
   > How about setting a rule on the VR, only in the case the VM is a CKS 
control node?
   
   @DaanHoogland 
   technically it is feasible, there are multiple options to achieve it.
   however, from security concern, I would suggest not to enable it. The 
control IP of VR on VMware is `private`, uservm should not be able to use it.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to