search

contiv / netplugin

Container networking for various use cases
Apache License 2.0
515 stars 178 forks source link

ACI EPG vlan assignment across tenants #456

Open fgisiger opened 8 years ago

fgisiger commented 8 years ago

If I create two tenants with the same vlan range, overlapping EPG vlans is permitted with current netplugin. This will be an issue if customer is using the same interface or same docker host for multiple tenants. In ACI mode, fault F0467 - Configuration failed due to Encap Already Used in Another EPG will be raised.

<Request 'http://localhost:5000/createAppProf' [POST]> {u'epgs': [{u'vlantag': u'853', u'nwname': u'bd1', u'name': u'web', u'gwcidr': u'10.10.1.1/24', u'conscontracts': [u'uni/tn-common/brc-default', u'uni/tn-common/brc-FG_ABC']}, {u'vlantag': u'852', u'nwname': u'bd2', u'name': u'app', u'gwcidr': u'20.10.1.1/24', u'provcontracts': [u'uni/tn-common/brc-default', u'uni/tn-common/brc-FG_ABC']}], u'app': u'ap', u'tenant': u't3'}

<Request 'http://localhost:5000/createAppProf' [POST]> {u'epgs': [{u'vlantag': u'853', u'nwname': u'bd1', u'name': u'web', u'gwcidr': u'30.10.1.1/24', u'conscontracts': [u'uni/tn-common/brc-default', u'uni/tn-common/brc-FG_ABC']}, {u'vlantag': u'852', u'nwname': u'bd2', u'name': u'app', u'gwcidr': u'40.10.1.1/24', u'provcontracts': [u'uni/tn-common/brc-default', u'uni/tn-common/brc-FG_ABC']}], u'app': u'ap', u'tenant': u't4'}

Is there a way that different vlans can be assigned across tenants?

gaurav-dalvi commented 8 years ago

Thanks @fgisiger . I believe tenant creation is one time. Vlan range in terms of Contiv is attached to Global object.

netctl global set --fabric-mode aci --vlan-range <range of Vlans>

and we can create multiple tenants inside that. Yes this vlan range will be shared among all tenants under this same global object.

I dont think we have functionality suggested by you in Contiv today. @jainvipin , @jojimt : Any comments ?

jojimt commented 8 years ago

Yes, there is an issue here that we need to address.

From: Gaurav Dalvi [mailto:notifications@github.com] Sent: Wednesday, July 13, 2016 4:07 PM To: contiv/netplugin Cc: Joji Mekkattuparamban (joji); Mention Subject: Re: [contiv/netplugin] ACI EPG vlan assignment across tenants (#456)

Thanks @fgisigerhttps://github.com/fgisiger . I believe tenant creation is one time. Vlan range in terms of Contiv is attached to Global object.

netctl global set --fabric-mode aci --vlan-range

and we can create multiple tenants inside that. Yes this vlan range will be shared among all tenants under this same global object.

I dont think we have functionality suggested by you in Contiv today. @jainvipinhttps://github.com/jainvipin , @jojimthttps://github.com/jojimt : Any comments ?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/contiv/netplugin/issues/456#issuecomment-232512651, or mute the threadhttps://github.com/notifications/unsubscribe/ABiDk5ybDFsRjC-bOAkHnR7rxL7aBxmzks5qVW-VgaJpZM4JL7ZG.