OpenStack VIP Modes: Allowed Address Pairs and Interface Secondary IPs
Avi Vantage supports two OpenStack virtual IP modes, allowed-address pairs and interface-secondary IPs.
For details about virtual IP modes with Nuage or Contrail SDN platforms, please refer to:
Option 1. Using Allowed-Address Pairs
This is the default mode of for VIP placement and VIP traffic. In this mode …
- An unbound VIP port is created.
- The VIP address is added as an AAP entry on the SE’s DATA-vnic
- The floating IP is associated to the unbound VIP port.
This mode works well for non-DVR Neutron OVS+IPTables. It is not supported for DVR with floating IPs, Contrail, NVP, ACI OpFlex (< v0.9.14). There is a limit of 10 AAPs on a vNIC by default.
Option 2. Using Interface-Secondary IPs
In this mode …
- The VIP address is added as a secondary IP on the SE DATA-vnic.
- The floating IP is associated to the secondary IP on the SE DATA-vnic.
This mode works well for most implementations (except Contrail). It overcomes limitations of AAP.
The CLI commands to configure this mode are shown below.
:> configure cloud :cloud> openstack_configuration :cloud:openstack_configuration> intf_sec_ips :cloud:openstack_configuration> save :cloud> save
Updated: 2018-01-19 07:12:45 +0000