openstack team mailing list archive

[Alessandro Tagliapietra <tagliapietra.alessandro@xxxxxxxxx>]

Hello list,

at work we've decided to move to openstack, actually we're running proxmox
for vm management and this is our actual server configuration:

2 x kimsufi 24g @ http://www.kimsufi.co.uk/

The network is configured this way on the 2 hosts:

- eth0 with binded the multiple /32 public ip
- eth1 (virtual bridge) with a 10.8.0.0/16 network and all vm's eth0 is
bridged there
- eth2 (virtual bridge) with a 192.168.0.0/24 dhcp and all vm's eth1 is
bridged there

The eth1 interfaces are bridged between hosts so a vm from an host can ping
a vm on the other host, these are the actual features provided:

 - host1 & host2 uses dnat to do a per-public-ip route to the correct vm,
which has a fixed ip on vm's eth0
 - the request can come from both host1 and host2, as each host before
routing uses connmark + dscp to set from which gateway the requests came,
and vm respond using the origin host
 - each vm directly access internet using the host which is running the vm
using the vm's eth1
 - i can migrate a vm from host1 to host2 without any change in the network
configuration
 - i don't need to know which host is running the vm, i just need the vm's
ip

I've set a google doc to show a small example
https://docs.google.com/document/d/1oIhUE7eAWDMtKdJlFmCw1jujo4XOGHD9w_ex_6TrGkw/edit

How can i implement this using openstack? Is that possible?

As the "private network"'s bandwith is shared with the public one because
it's incapsulated between servers, this is what i need:

 - each vm uses its own host as default gateway
 - if a host receive a request for the public ip of a vm in another host it
uses the private network to reach the correct vm in the other host
 - if a host receive a request for the public ip of a vm on that host it
correctly route to the correct vm

PS: in addiction of these 2 servers i was thinking to use a vps to run the
services except compute and storage to be a always available cloud
controller.
2nd PS: later we'll add more servers

Thanks in advance,

Best Regards

Alessandro