2
Copyright 2010-2011 United States Government as represented by the
3
Administrator of the National Aeronautics and Space Administration.
6
Licensed under the Apache License, Version 2.0 (the "License"); you may
7
not use this file except in compliance with the License. You may obtain
8
a copy of the License at
10
http://www.apache.org/licenses/LICENSE-2.0
12
Unless required by applicable law or agreed to in writing, software
13
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
14
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
15
License for the specific language governing permissions and limitations
19
Flat Network Mode (Original and Flat)
20
=====================================
22
Flat network mode removes most of the complexity of VLAN mode by simply
23
bridging all instance interfaces onto a single network.
25
There are two variations of flat mode that differ mostly in how IP addresses
26
are given to instances.
31
IP addresses for VM instances are grabbed from a subnet specified by the network administrator, and injected into the image on launch. All instances of the system are attached to the same Linux networking bridge, configured manually by the network administrator both on the network controller hosting the network and on the computer controllers hosting the instances. To recap:
33
* Each compute host creates a single bridge for all instances to use to attach to the external network.
34
* The networking configuration is injected into the instance before it is booted or it is obtained by a guest agent installed in the instance.
36
Note that the configuration injection currently only works on linux-style systems that keep networking
37
configuration in /etc/network/interfaces.
42
IP addresses for VM instances are grabbed from a subnet specified by the network administrator. Similar to the flat network, a single Linux networking bridge is created and configured manually by the network administrator and used for all instances. A DHCP server is started to pass out IP addresses to VM instances from the specified subnet. To recap:
44
* Like flat mode, all instances are attached to a single bridge on the compute node.
45
* In addition a DHCP server is running to configure instances.
50
The network nodes do not act as a default gateway in flat mode. Instances
51
are given public IP addresses.
53
Compute nodes have iptables/ebtables entries created per project and
54
instance to protect against IP/MAC address spoofing and ARP poisoning.
60
.. todo:: add flat network mode configuration examples