search

cloudfoundry / bosh-openstack-cpi-release

BOSH OpenStack CPI
Apache License 2.0
36 stars 59 forks source link

add a cloud properties to manage VRRP port check. #243

Closed o-orand closed 2 years ago

o-orand commented 2 years ago

Using cloud_properties.vrrp_port_check, we can choose to enable (when true), or to disable (when false) VRRP port check. By default, nothing change: we ensure VRRP port is available.

To use this feature, it is required to set cloud_properties in network definition, but it is used only when allowed_address_pair is defined.

o-orand commented 2 years ago

@beyhan here is some details. Our main goal was to be able to use some specifics features of our Openstack Provider that disable source IP check. If you want to further info: Change the allowed-address-pairs of the ECS NIC to 1.1.1.1/0 to disable the source/destination check. We also want to be able to use an subnet range, but this PR does not handle it properly as it only target default network. It requires deeper changes to be able to select a specific network for allow_address_pair. Unfortunately, I won't be able to work on this now, maybe later.