Re: [openstack-dev] Chalenges with highly available service VMs

2013-07-18 Thread Ian Wells
On 18 July 2013 19:48, Aaron Rosen aro...@nicira.com wrote: Is there something this is missing that could be added to cover your use case? I'd be curious to hear where this doesn't work for your case. One would need to implement the port_security extension if they want to completely allow all

Re: [openstack-dev] [openstack][neutron] Reserved fixed IPs

2013-07-17 Thread Ian Wells
It's already possible to port-create with an IP address-and-subnet specified, which seems like an effective way of allocating an address and setting it aside for later. Doesn't this satisfy your needs? -- Ian. On 16 July 2013 19:42, Mark McClain mark.mccl...@dreamhost.com wrote: Have you

Re: [openstack-dev] Fwd: Chalenges with highly available service VMs

2013-07-04 Thread Ian Wells
On 4 July 2013 23:42, Robert Collins robe...@robertcollins.net wrote: Seems like a tweak would be to identify virtual IPs as separate to the primary IP on a port: you don't need to permit spoofing of the actual host IP for each host in the HA cluster; you just need to permit spoofing of the

<    1   2   3