[Openstack-operators] Murano in Production

2016-09-16 Thread Joe Topjian
Hi all,

We're planning to deploy Murano to one of our OpenStack clouds and I'm
debating the RabbitMQ setup.

For background: the Murano agent that runs on instances requires access to
RabbitMQ. Murano is able to be configured with two RabbitMQ services: one
for traditional OpenStack communication and one for the Murano/Agent
communication.

>From a security/segregation point of view, would vhost separation on our
existing RabbitMQ cluster be sufficient? Or is it recommended to have an
entirely separate cluster?

As you can imagine, I'd like to avoid having to manage *two* RabbitMQ
clusters. :)

Thanks,
Joe
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


[Openstack-operators] How to launch IPS/IDS on openstack

2016-09-16 Thread shiva m
Hi,


I have lauched an IPS (intrusion prevention system, l2 device) instance on
devstack. I want to examine traffic hitting br-int and pass it back to
br-int. How do I pass traffic hitting br-int to my IPS instance. How do I
re-direct traffic to my IPS VM instance.

I want to examine whatever traffic hitting my compute node. Can anyone
please help in achieving this.


Thanks,
Shiva
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators