Does DVR require promiscuous mode on compute nodes?

asked 2016-07-01 01:46:30 -0600

Herr-Herner gravatar image

A have a Mitaka HA-deployment running and what to use DVR. I am using Open vSwitch with GRE. But I have a small question. Hopefully, I got it right: In order to setup DVR, each compute nodes requires a connection to the external network and a br-ex attached to this port. In this case the port must have the promiscuous mode enabled. Is this right?

edit retag flag offensive close merge delete

Comments

Do you mean 3 Node HA Mitaka Controler or "HA" stands for something different from Controller ?
If you have 3 Node HA Mitaka Controler, then how DVR_SNAT has been setup for egress && ingress traffic ?

dbaxps gravatar imagedbaxps ( 2016-07-01 10:08:39 -0600 )edit

We have installed and configured OpenStack "Mitaka" for high availability (HA). We use 2 controllers with a loadbalancer (HAProxy) and a virtual ip managed by keepalived. We have not setup DVR yet, because we require approval for promiscuous mode from our IT department.

Herr-Herner gravatar imageHerr-Herner ( 2016-07-05 00:33:19 -0600 )edit