Skip to content

Commit e7707b6

Browse files
authored
Merge pull request #53312 from tmalove/sdn-neutron-4608-tlove
[OSDOCS-4608]: Document limitation for the RHOSP egress ip neutron port
2 parents c7618e1 + 11e1444 commit e7707b6

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

modules/nw-egress-ips-about.adoc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,11 @@ The {product-title} egress IP address functionality allows you to ensure that th
1818
For example, you might have a pod that periodically queries a database that is hosted on a server outside of your cluster. To enforce access requirements for the server, a packet filtering device is configured to allow traffic only from specific IP addresses.
1919
To ensure that you can reliably allow access to the server from only that specific pod, you can configure a specific egress IP address for the pod that makes the requests to the server.
2020

21+
[NOTE]
22+
====
23+
The {rh-openstack} egress IP address feature creates a neutron reservation port called `egressip-<IP address>`. You can assign a floating IP address to this reservation port to have a predictable SNAT address for egress traffic. When an egress IP address on an {rh-openstack} network is moved from one node to another, because of a node failover, for example, the neutron reservation port is removed and recreated. This means that the floating IP association is lost and you need to manually reassign the floating IP address to the new reservation port.
24+
====
25+
2126
An egress IP address assigned to a namespace is different from an egress router, which is used to send traffic to specific destinations.
2227

2328
In some cluster configurations, application pods and ingress router pods run on the same node. If you configure an egress IP address for an application project in this scenario, the IP address is not used when you send a request to a route from the application project.

0 commit comments

Comments
 (0)