Imagine you have a data center with quite a large Internet DMZ. That will be a set of subnets, if your DMZ is too big to fit on one subnet. Also, your DMZ probably needs to be highly available, so you might have several subnets on different VLANs, on two or three different switches.
In the language of MAAS, the DMZ is a "space". The switches are different "fabrics" and your servers are in different "availability zones" for redundancy. That space is a set of connected subnets that all have the same basic security policy applied to them. You will need to make sure you setup your routers and firewalls accordingly, but once you have done so you can ask for machines "attached to the DMZ" and you will get them spread across those different subnets, and hence also the different availability zones. We call the switch a fabric because it might actually be two or three trunked switches, meaning they are essentially joined into one sharing all VLANs. In MAAS, because you have "real L2", the VLAN itself is part of the space. Any subnets on that VLAN are thus in that space, which is how an L2 space becomes an L3 space. Mark -- Maas-devel mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/maas-devel
