sparameswaran / nsx-t-gen

concourse pipeline to install nsx-t - DEPRECATED
Apache License 2.0
21 stars 9 forks source link

SNAT rules on T0: we need to be able to specify destination IP #11

Closed guillierf closed 6 years ago

guillierf commented 6 years ago

for now, the SNAT rule in the param file looks like this:

Sample entry for PKS PKS-Infra network

SNAT is dangerous when the destination network is too wide (i.e destination IP = ANY).

for PKS, we usually restrict the destination IP to a specific CIDR (we don't use ANY because it can break internal communications, from T1 to T1).

request is to be able to specify destination IP (or destination_network) in the above NAT section

sparameswaran commented 6 years ago

added destination_network as optional param for snat rule set.