History

Adit Sarfaty 4e92f00d1b NSX|v limit access to metadata service to specific protocols

The firewall rule created on the differents edges to allow access
to the metadata service, should be restricted to the specific
supported protocols (tcp 80, 443, 8775), and not open to all protocols
The list of allowed ports can be extended using the nsx.ini parameter
'metadata_service_allowed_ports'

Change-Id: If2f0f30937eb3b7489a36feff1635de4822710bb

2016-04-10 09:05:29 +00:00

lib

NSX|v limit access to metadata service to specific protocols

2016-04-10 09:05:29 +00:00

nsx_v3

Follow the convention

2016-01-29 06:27:42 -08:00

tools

clean tier0 ports created from nsxv3

2016-03-19 08:12:00 +00:00

localrc_nsx_v3

Add sample localrc for nsx_v3

2015-09-15 14:11:49 -04:00

override-defaults

Define has_neutron_plugin_security_group using override-defaults

2016-01-13 23:26:21 +09:00

plugin.sh

nsx-v3: Configure interface and route to external network

2016-02-25 22:49:56 +00:00

README.rst

Fix plugin url in readme

2015-08-04 08:38:31 -07:00

settings

Implement devstack external plugin

2015-02-24 08:46:13 -08:00

README.rst

Devstack external plugin

Add and set the following in your local.conf/localrc file:

enable_plugin vmware-nsx https://git.openstack.org/openstack/vmware-nsx

For Nsx-mh:

Q_PLUGIN=vmware_nsx

PUBLIC_BRIDGE # bridge used for external connectivity, typically br-ex NSX_GATEWAY_NETWORK_INTERFACE # interface used to communicate with the NSX Gateway NSX_GATEWAY_NETWORK_CIDR # CIDR to configure $PUBLIC_BRIDGE, e.g. 172.24.4.211/24

For Nsx-v:

Q_PLUGIN=vmware_nsx_v

NSXV_MANAGER_URI # URL for NSXv manager (e.g - https://management_ip). NSXV_USER # NSXv username. NSXV_PASSWORD # NSXv password. NSXV_CLUSTER_MOID # clusters ids containing OpenStack hosts. NSXV_DATACENTER_MOID # datacenter id for edge deployment. NSXV_RESOURCE_POOL_ID # resource-pool id for edge deployment. NSXV_DATASTORE_ID # datastore id for edge deployment. NSXV_EXTERNAL_NETWORK # id of logic switch for physical network connectivity. NSXV_VDN_SCOPE_ID # network scope id for VXLAN virtual-wires. NSXV_DVS_ID # Dvs id for VLAN based networks. NSXV_BACKUP_POOL # backup edge pools management range, # <edge_type>:[edge_size]:<minimum_pooled_edges>:<maximum_pooled_edges>. # edge_type:'service'(service edge) or 'vdr'(distributed edge). # edge_size: 'compact', 'large'(by default), 'xlarge' or 'quadlarge'.

# To enable the metadata service, the following variables should be also set: NSXV_MGT_NET_PROXY_IPS # management network IP address for metadata proxy. NSXV_MGT_NET_PROXY_NETMASK # management network netmask for metadata proxy. NSXV_NOVA_METADATA_IPS # IP addresses used by Nova metadata service. NSXV_NOVA_METADATA_PORT # TCP Port used by Nova metadata server. NSXV_MGT_NET_MOID # Network ID for management network connectivity