How to isolate the tenants in terms of floating IPs?

asked 2016-05-18 10:56:50 -0600

zekken gravatar image

updated 2016-05-24 06:22:57 -0600

I have a juno multinode setup (Neutron Network) with two tenants with tenant networks : Tenant A : 10.40.0.0/24 Tenant B : 10.50.0.0/24 Tenant network type is GRE. My external network is 192.168.1.0/24 (Flat). Now when I attach a floating IP to the tenants from this pool to the tenant instances, the VMs of different tenants are able to ping to each other. How can I achieve this kind of isolation for the tenants (except from security groups) ? Please help..

edit retag flag offensive close merge delete

Comments

what's wrong with security groups?

darragh-oreilly gravatar imagedarragh-oreilly ( 2016-05-25 02:29:37 -0600 )edit

multiple floating pools, firewall, security groups, floating IP's are 'Public' and are supposed to be reachable usually for some service to be accessible outside of the host only network.

rduncan-t gravatar imagerduncan-t ( 2016-05-25 06:58:23 -0600 )edit