Open andrewtchin opened 6 years ago
Management:
Client:
iptables
TODO investigate Docker/iptables requirements
The additional iptables configuration requirement needed is to block traffic forwarding from one interface to the other. This can be implemented in a similar way as the DOCKER-ISOLATION iptables chain, i.e., one rule to drop forwarding from client net -> mgmt net and another for mgmt net -> client net.
As part of this design, we should consider whether a third interface is needed for public network connectivity to allow outbound connections from Harbor.
User Statement:
As a vSphere admin I want to segregate client and management traffic for the VIC Appliance.
Details:
Acceptance Criteria: