You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by ra...@apache.org on 2013/07/11 06:57:56 UTC
[2/2] git commit: updated refs/heads/master to 3e8edd7
CLOUDSTACK-770
Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/3e8edd74
Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/3e8edd74
Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/3e8edd74
Branch: refs/heads/master
Commit: 3e8edd74b9095ac6fde6beaf8a7a3a480c0f95c5
Parents: f56d9d7
Author: radhikap <ra...@citrix.com>
Authored: Thu Jul 11 10:26:42 2013 +0530
Committer: radhikap <ra...@citrix.com>
Committed: Thu Jul 11 10:27:31 2013 +0530
----------------------------------------------------------------------
docs/en-US/configure-acl.xml | 2 +-
docs/en-US/inter-vlan-routing.xml | 28 ++++++++++++++--------------
docs/en-US/vpc.xml | 6 ++++++
3 files changed, 21 insertions(+), 15 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/3e8edd74/docs/en-US/configure-acl.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/configure-acl.xml b/docs/en-US/configure-acl.xml
index e4d5dad..c89210b 100644
--- a/docs/en-US/configure-acl.xml
+++ b/docs/en-US/configure-acl.xml
@@ -19,7 +19,7 @@
under the License.
-->
<section id="configure-acl">
- <title>Configuring Access Control List</title>
+ <title>Configuring Network Access Control List</title>
<para>Define Network Access Control List (ACL) on the VPC virtual router to control incoming
(ingress) and outgoing (egress) traffic between the VPC tiers, and the tiers and Internet. By
default, all incoming and outgoing traffic to the guest networks is blocked. To open the ports,
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/3e8edd74/docs/en-US/inter-vlan-routing.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/inter-vlan-routing.xml b/docs/en-US/inter-vlan-routing.xml
index c39d567..59115de 100644
--- a/docs/en-US/inter-vlan-routing.xml
+++ b/docs/en-US/inter-vlan-routing.xml
@@ -19,16 +19,16 @@
under the License.
-->
<section id="inter-vlan-routing">
- <title>About Inter-VLAN Routing</title>
- <para>Inter-VLAN Routing is the capability to route network traffic between VLANs. This feature
- enables you to build Virtual Private Clouds (VPC), an isolated segment of your cloud, that can
- hold multi-tier applications. These tiers are deployed on different VLANs that can communicate
- with each other. You provision VLANs to the tiers your create, and VMs can be deployed on
- different tiers. The VLANs are connected to a virtual router, which facilitates communication
- between the VMs. In effect, you can segment VMs by means of VLANs into different networks that
- can host multi-tier applications, such as Web, Application, or Database. Such segmentation by
- means of VLANs logically separate application VMs for higher security and lower broadcasts,
- while remaining physically connected to the same device.</para>
+ <title>About Inter-VLAN Routing (nTier Apps)</title>
+ <para>Inter-VLAN Routing (nTier Apps) is the capability to route network traffic between VLANs.
+ This feature enables you to build Virtual Private Clouds (VPC), an isolated segment of your
+ cloud, that can hold multi-tier applications. These tiers are deployed on different VLANs that
+ can communicate with each other. You provision VLANs to the tiers your create, and VMs can be
+ deployed on different tiers. The VLANs are connected to a virtual router, which facilitates
+ communication between the VMs. In effect, you can segment VMs by means of VLANs into different
+ networks that can host multi-tier applications, such as Web, Application, or Database. Such
+ segmentation by means of VLANs logically separate application VMs for higher security and lower
+ broadcasts, while remaining physically connected to the same device.</para>
<para>This feature is supported on XenServer, KVM, and VMware hypervisors.</para>
<para>The major advantages are:</para>
<itemizedlist>
@@ -88,10 +88,10 @@
</itemizedlist>
</listitem>
<listitem>
- <para>The administrator can define Access Control List (ACL) on the virtual router to filter
- the traffic among the VLANs or between the Internet and a VLAN. You can define ACL based on
- CIDR, port range, protocol, type code (if ICMP protocol is selected) and Ingress/Egress
- type.</para>
+ <para>The administrator can define Network Access Control List (ACL) on the virtual router to
+ filter the traffic among the VLANs or between the Internet and a VLAN. You can define ACL
+ based on CIDR, port range, protocol, type code (if ICMP protocol is selected) and
+ Ingress/Egress type.</para>
</listitem>
</itemizedlist>
<para>The following figure shows the possible deployment scenarios of a Inter-VLAN setup:</para>
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/3e8edd74/docs/en-US/vpc.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/vpc.xml b/docs/en-US/vpc.xml
index 7c94f0d..d1f0c52 100644
--- a/docs/en-US/vpc.xml
+++ b/docs/en-US/vpc.xml
@@ -75,6 +75,12 @@
Translation for instances to access the Internet via the public gateway. For more
information, see <xref linkend="enable-disable-static-nat-vpc"/>.</para>
</listitem>
+ <listitem>
+ <para><emphasis role="bold">Network ACL</emphasis>: Network ACL is a group of Network ACL
+ items. Network ACL items are nothing but numbered rules that are evaluated in order,
+ starting with the lowest numbered rule. These rules determine whether traffic is allowed in
+ or out of any tier associated with the network ACL. For more information, see <xref linkend="configure-acl"/>.</para>
+ </listitem>
</itemizedlist>
<formalpara>
<title>Network Architecture in a VPC</title>