oxidecomputer / omicron

Omicron: Oxide control plane
Mozilla Public License 2.0
251 stars 39 forks source link

Dynamically assign boundary services address #3278

Closed internet-diglett closed 9 months ago

internet-diglett commented 1 year ago

Currently the boundary services address is hard-coded to be assigned to the first switch. Once we enable multi-switch capability, we will need to be able to determine which switch should get the address based off of the configuration.

internet-diglett commented 1 year ago

Ref: https://github.com/oxidecomputer/omicron/pull/3262#discussion_r1245598673

Currently the strategy being implemented in #3262 is to create NAT entries on switches that have external networking configured.

rcgoodfellow commented 9 months ago

As of #3859 boundary services underlay addresses are no longer managed by Omicron. They are transient dynamic addresses that are managed by mgd with a lifetime that is tied to the switch zone lifetime they are assigned to. More details are in RFD 404 Section 2.1.