For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

OpenStack Heat Template Composition

Heat Orchestration Templates (HOT) for OpenStack's Heat service can quickly grow in length as users need to pile in ever more resources to define their applications. A simple Nova instance requires a...
Published Jun 27, 2016
Version 1.0
BIG-IP
cloud
heat
openstack
George_San_Pedr's avatar
George_San_Pedr
Icon for Altostratus rankAltostratus
Nov 01, 2017

In my experience Openstack tenant instances that source or receive traffic from/to IPs not tied to a neutron net/port are denied by the default port security. This is the case of traffic from/to VS in LTM. To work around this I usually disable port security when creating the network:

 

client_data_network: type: OS::Neutron::Net properties: name: client_data_network port_security_enabled: False

 

or the more safe approach of using allowed_address_pairs with the port and declaring all the VS IP addresses that I'm planning to use.