openstack team mailing list archive

[Vishvananda Ishaya <vishvananda@xxxxxxxxx>]

On Dec 20, 2012, at 2:24 PM, Andrew Holway <a.holway@xxxxxxxxxxxx> wrote:

> Hi Vish,
> 
> Manually creating vlans would be quite tiresome if you are using a vlan per project and I'm not sure flatdhcp is good for serious use in multi tenanted production environments. (thoughts?)

Personally I think vlan isolation just makes people feel better. But you can always go the quantum route if you want to make sure your networks are isolated.

> 
> I tested the vlan manager functionality and this is *really* great for when you want to keep a customer on its own logical network with its own subnet but if you want to have a instance on more than one network your seem kinda screwed. This starts to be a problem when you think about DMZ's and proxys and stuff.

Why not just use vlan mode and normal floating ips for public addressses?

Vish