yahoo-eng-team team mailing list archive

[Takao Indoh <indou.takao@xxxxxxxxxxxxxx>]

Public bug reported:

This RFE is requesting feature "Multi-region Security Group" to
configure security group across multiple regions.

[Backgroud]
OpenStack 'Regions' is used to construct more than one openstack environments between geographically-distributed places. Each region is independent openstack environment and placed in a datacenter which is geographically distant from each other, for example, different country. This is important to ensure availability. Even if one region stops due to problems, we can continue our work in other regions.

[Existing problem]
In multi-region environment, the one of inconvenient points is configuring security group. For example, there are two regions 'region 1' and 'region 2'. Each region has web server and its db server.
Region 1: web server(W1) and db server (D1)
Region 2: web server(W2) and db server (D2)
Say that each region is connected in L3 layer (IP is reachable each other).

In such a case, we want to set up security group so that both of W1 and
W2 can access to D1 and D2. But each region is independent and we have
to set up security group one by one in each region.

[Proposal]
Multi-region security group enables us to create security group across regions. Once it is introduced, we can add security group which can be shared between regions. In the case above:
- Make two multi-region security group, SG1 and SG2
- Add W1,W2 to SG1
- Add D1,D2 to SG2
And then by adding rule to SG2 to allow access from SG1, W1 and W2 can access to D1 and D2.

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: rfe

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1534458

Title:
  [RFE] Multi-region Security Group

Status in neutron:
  New

Bug description:
  This RFE is requesting feature "Multi-region Security Group" to
  configure security group across multiple regions.

  [Backgroud]
  OpenStack 'Regions' is used to construct more than one openstack environments between geographically-distributed places. Each region is independent openstack environment and placed in a datacenter which is geographically distant from each other, for example, different country. This is important to ensure availability. Even if one region stops due to problems, we can continue our work in other regions.

  [Existing problem]
  In multi-region environment, the one of inconvenient points is configuring security group. For example, there are two regions 'region 1' and 'region 2'. Each region has web server and its db server.
  Region 1: web server(W1) and db server (D1)
  Region 2: web server(W2) and db server (D2)
  Say that each region is connected in L3 layer (IP is reachable each other).

  In such a case, we want to set up security group so that both of W1
  and W2 can access to D1 and D2. But each region is independent and we
  have to set up security group one by one in each region.

  [Proposal]
  Multi-region security group enables us to create security group across regions. Once it is introduced, we can add security group which can be shared between regions. In the case above:
  - Make two multi-region security group, SG1 and SG2
  - Add W1,W2 to SG1
  - Add D1,D2 to SG2
  And then by adding rule to SG2 to allow access from SG1, W1 and W2 can access to D1 and D2.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1534458/+subscriptions