Re: [ceph-users] Multi-Tenancy: Network Isolation

2017-05-29 Thread Deepak Naidu
Thanks much Vlad and Dave for suggestions appreciate it ! -- Deepak On May 29, 2017, at 1:04 AM, Дробышевский, Владимир mailto:v...@itgorod.ru>> wrote: Hi, Deepak! The easiest way I can imagine is to use multiple VLANs, put all ceph hosts ports into every VLAN and use a wider subnet. For ex

Re: [ceph-users] Multi-Tenancy: Network Isolation

2017-05-29 Thread Дробышевский , Владимир
Hi, Deepak! The easiest way I can imagine is to use multiple VLANs, put all ceph hosts ports into every VLAN and use a wider subnet. For example, you can set 192.168.0.0/16 for the public ceph network, use 192.168.0.1-254 IPs for ceph hosts, 192.168.1.1-254/16 IPs for the first tenant, 192.168.2

Re: [ceph-users] Multi-Tenancy: Network Isolation

2017-05-28 Thread Deepak Naidu
Thanks David. >>Every single one of the above needs to be able to access all of the mons and >>osds. I don't think you can have multiple subnets for this, Yes that's why this multi tenancy question >>but you can do this via routing. Say your private osd network is >>xxx.xxx.10.0, your public

Re: [ceph-users] Multi-Tenancy: Network Isolation

2017-05-28 Thread David Turner
AFAIK, you only have 2 networks for Ceph. The private internal traffic between the OSDs. Only servers running OSD daemons need access to this vlan/subnet. The other is the public network. The following things need access to this subnet/vlan: 1) Anything that accesses data like rbds, cephfs, or usin

Re: [ceph-users] Multi-Tenancy: Network Isolation

2017-05-26 Thread Deepak Naidu
Hi Vlad, Thanks for chiming in. >>It's not clear what you want to achieve from the ceph point of view? Multiple tenancy. We will have multiple tenants from different isolated subnet/network accessing single ceph cluster which can support multiple tenants. The only problem I see with ceph in a

Re: [ceph-users] Multi-Tenancy: Network Isolation

2017-05-26 Thread Дробышевский , Владимир
Hi, Deepak! It's not clear what you want to achieve from the ceph point of view? For example, for the network isolation you can use managed switches, set different VLANs and put ceph hosts to the every VLAN. But it's a shoot in the dark as I don't know what exactly you need. For example, what se

[ceph-users] Multi-Tenancy: Network Isolation

2017-05-25 Thread Deepak Naidu
I am trying to gather and understand on how can or has multitenancy solved for network interfaces or isolation. I can get ceph under a virtualized env and achieve the isolation but my question or though is more on the physical ceph deployment. Is there a way, we can have multiple networks(publi