Reserve IP address for out of bounds machines

[aleskxyz]

Ability to define IP address beside of choosing VMs in Static NAT, Port Forward and Load balancer services to provide those services to servers outside of CloudStack.

ISSUE TYPE

• Feature Idea

COMPONENT NAME

VR

CLOUDSTACK VERSION

All versions

CONFIGURATION

Advanced networking

OS / ENVIRONMENT

N/A

SUMMARY

In some network services we need to specify which VM should use it. For example Static NAT, Port Forward and Load balancer.
It would be a good idea if we can also specify IP address of a server which is not managed by CloudStack.
This feature helps us to use network services provided by virtual router for physical servers or even VMs outside of CloudStack management area but share a common L2 network with other VMs in CloudStack.
This feature also requires reserve IP address capability in all type of networks. We can expand the issue #4357 for private IPs in isolated networks too.

STEPS TO REPRODUCE

1. Create an isolated network
2. In Port forward section define a new rule
3. In "Add VM" panel write IP address of the server outside of CloudStack

EXPECTED RESULTS

An iptables rule created in virtual router to forward desired port to the server IP

ACTUAL RESULTS

It is not possible to mention IP address of the server outside of CloudStack

[DaanHoogland]

sounds good, but with lots of buts. are you going to invest in tech design @aleskxyz ?

I think I am reversing direction as opposed to what you are proposing but assigning loadbalancer configuration to an out of band (virtual) machine, would require an API served by that machine that cloudstack can use to add/remove hosts for a service.
If indeed you mean the other way around, it sounds like a simple change given #4357 .

[aleskxyz]

@DaanHoogland
I think this diagram can help:

[DaanHoogland]

like i described as the simple change ;)

[aleskxyz]

like i described as the simple change ;)

@DaanHoogland 👍
As I told before this feature is dependent to #4357
User must reserve the IP before using it in Static NAT, Port Forward and Load balancer. Otherwise he/she should get an error message.
What do you mean about "tech design"?
If you mean writing "Design Document" in https://cwiki.apache.org/confluence/display/CLOUDSTACK/ , I can help.

[DaanHoogland]

tnx @aleskxyz If you are not going to implement this it is sufficent to just be very precise here and find consent on it. With our discussion here it seems well scoped.

[weizhouapache]

@aleskxyz
this looks different from #4357 which requested to reserve public IP.
this means to reserve private IPs in isolated networks/vpc tiers.

cc @nvazquez

[DaanHoogland]

@aleskxyz this looks different from #4357 which requested to reserve public IP. this means to reserve private IPs in isolated networks/vpc tiers.

cc @nvazquez

I don't think necessarily private, but as part of the range of IPs serving on the networkside, which would include the guestIPs, but also in this case an outside IP. Correct me If I'm wrong, but the Physical server having an IP inside the guest network in @aleskxyz ' picture seems irrelevant. It might as well be a google address.