[Openstack] [Neutron] Deploying Liberty Neutron needs how many NICs

2016-04-11 Thread liyulei
Hello, I am deploying Liberty Neutron in CentOS7, according to the official document there are two interfaces in controller: one for management, the other for public, and the public interface uses a special configuration without an IP address assigned to it. But in my controller, there is only

Re: [Openstack] security group rules

2016-04-11 Thread Sławek Kapłoński
Hello, To be little bit more precise it allows AFAIK ingress from all instances (ports) which have got same security group. -- Pozdrawiam / Best regards Sławek Kapłoński sla...@kaplonski.pl Dnia poniedziałek, 11 kwietnia 2016 21:32:55 CEST Remo Mattei pisze: > it says default not 0/0 which is

Re: [Openstack] security group rules

2016-04-11 Thread rezroo
In neutron a security group rule can have different types of "remote" - either a CIDR or another security group. The rule means that your "remote" is another security group - so any VM in security group "default" can reach any port in this security group - so "default" has opened all its ports

[Openstack] Lessons learned from OpenStack Liberty Deployment

2016-04-11 Thread Mathew Mulamootil Varghese (mathew)
Hi All, Appreciate if any of you could share lessons learned on Liberty Deployment. You can unicast me to avoid an email spam. Need to share the same with a customer who is planning start with a PoC on Liberty. Many Thanks, Matt ___ Mailing list: ht

[Openstack] Neutron can't ping external network

2016-04-11 Thread liyulei
Hello, I hava installed openstack Liberty using vxlan, though there are no error in logs and I can create vm in computer node, I can't ping external network either in vm or in router namespace. In my controller node, there is only one Network Interface, and my tenant_network_type is vxlan. My q

Re: [Openstack] security group rules

2016-04-11 Thread Remo Mattei
it says default not 0/0 which is not from anywhere. So that applies only for the local network (default) > On Apr 11, 2016, at 21:15, Jagga Soorma wrote: > > Hi Guys, > > There is a default security group rule that has the following entry: > > -- > Direction: Ingress > Ether Type: IPv4 > IP

[Openstack] security group rules

2016-04-11 Thread Jagga Soorma
Hi Guys, There is a default security group rule that has the following entry: -- Direction: Ingress Ether Type: IPv4 IP Protocol: Any Port Range: Any Remote Prefix: - Remote Security Group: default -- Now this makes me think that it should basically allow all ingress ipv4 traffic (udp & tcp) on

Re: [Openstack] [mentoring] Mentee project preferrence

2016-04-11 Thread Emily K Hugenbruch
Hi Victoria, A few things to keep in mind. Many of the technical mentoring matches we made were in anticipation of the Upstream University training. So if your mentee is signed up for that, your early mentoring should focus on getting them prepared for upstream and just basically introduced to the

Re: [Openstack] [mentoring] Mentee project preferrence

2016-04-11 Thread Marton Kiss
Hi Victoria, I suggest try to switch somehow, please write me a private email with the details and we will find a solution. Brgds, Marton On Mon, Apr 11, 2016 at 7:53 PM Victoria Martínez de la Cruz < victo...@vmartinezdelacruz.com> wrote: > Hi there, > > What should the mentor do with regard

[Openstack] [mentoring] Mentee project preferrence

2016-04-11 Thread Victoria Martínez de la Cruz
Hi there, What should the mentor do with regards to technical mentorship is the mentee is more interested in a project that the mentor is not familiar with? Thanks, Victoria ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstac

Re: [Openstack] VPNaaS

2016-04-11 Thread Oleg Lodygensky
thanks for your answer :) Oleg > Le 11 avr. 2016 à 13:54, Paul Michali a écrit : > > VPNaaS in OpenStack is a site-to-site VPN using IPSec. It is designed for the > case when you have two clouds and want to interconnect them. So, one > openstack cloud on each end, and an interconnecting n

Re: [Openstack] VPNaaS

2016-04-11 Thread Paul Michali
VPNaaS in OpenStack is a site-to-site VPN using IPSec. It is designed for the case when you have two *clouds* and want to interconnect them. So, one openstack cloud on each end, and an interconnecting network. It's not defined for a *road warrier* case, where you have a computer wanting to connect

[Openstack] VPNaaS

2016-04-11 Thread Oleg Lodygensky
dear all, I am trying to compare OpenVPN and VPNaaS usage in OpenStack. I want to be able to create a VPN between VMs deployed in a single Openstack cloud to ensure communication privacy and security. I also want to be able to connect with my PC to the VPN. To use OpenVPN, post install scripts