You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Chi vediamo <ta...@gmail.com> on 2025/06/20 01:05:29 UTC
VNF Offering and Functionality Cloudstack 4.20.1
Hello Team,
Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
I have the the VNF template and a VNF running, but the VNF is still using the vROUTER.
I saw the video from 3 years ago from Wei about the idea about the VNF as a network service. Is that enabled already?
do I need to enable something else besides the vnf.template.appliance.enabled set to TRUE ?
Maybe a new Table, if needed let me know We can use it and test it, same for SR-IO Passthrough, there use to be a table and its gone, I have the pci.devices loaded in agent.properties, should I use pc.devices.vm instead ?
Thank you.
Tata Y.
>
RE: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Alex Mattioli <Al...@shapeblue.com>.
Hi,
What's your goal using VXLAN?
This is completely normal behaviour, in an Isolated network you have a public interface (VLAN) and a guest interface (VXLAN), while in a L2 network you don't have a public interface (the ACS VR isn't in the data path).
Regards
Alex
-----Original Message-----
From: Chi vediamo <ta...@gmail.com>
Sent: 27 June 2025 17:54
To: users@cloudstack.apache.org
Cc: Wei ZHOU <us...@gmail.com>; weizhou@apache.org; gopalpanda.cp@gmail.com
Subject: Re: VNF Offering and Functionality Cloudstack 4.20.1
Thank you Alex,
I forgot to add that we are using The VLAN id for Public network, and VXLAN is for the Guest.
And I am truggling that on L2 and Shared The vrouter only gets the VXLAN, while on Isolated network it getts both the VLAN-Public and the VXLAN-Guest
Let me know how to test properly and I will let you know asap.
Tata Y.
> On Jun 27, 2025, at 11:41 AM, Alex Mattioli <Al...@shapeblue.com> wrote:
>
> Hi,
>
> You just need to create the shared network in the same VLAN a your router and set that router as the gateway for the shared network.
>
> Regards,
> Alex
>
>
>
>
> -----Original Message-----
> From: Chi vediamo <ta...@gmail.com>
> Sent: 27 June 2025 15:08
> To: users@cloudstack.apache.org
> Cc: Wei ZHOU <us...@gmail.com>; weizhou@apache.org; gopalpanda.cp@gmail.com
> Subject: Re: VNF Offering and Functionality Cloudstack 4.20.1
>
> for Isolated or VPC networks,
>
> Is my understanding I am not able to put a router in front in a shared network. Or it is possible ?
>
>
> Tata Y.
>
>> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
>>
>> Tata,
>>
>> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com> wrote:
>>>
>>> Hello Team,
>>>
>>> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
>>
>> In an l2 network ( or a shared network?)
>
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Chi vediamo <ta...@gmail.com>.
Thank you Alex,
I forgot to add that we are using The VLAN id for Public network, and VXLAN is for the Guest.
And I am truggling that on L2 and Shared The vrouter only gets the VXLAN, while on Isolated network it getts both the VLAN-Public and the VXLAN-Guest
Let me know how to test properly and I will let you know asap.
Tata Y.
> On Jun 27, 2025, at 11:41 AM, Alex Mattioli <Al...@shapeblue.com> wrote:
>
> Hi,
>
> You just need to create the shared network in the same VLAN a your router and set that router as the gateway for the shared network.
>
> Regards,
> Alex
>
>
>
>
> -----Original Message-----
> From: Chi vediamo <ta...@gmail.com>
> Sent: 27 June 2025 15:08
> To: users@cloudstack.apache.org
> Cc: Wei ZHOU <us...@gmail.com>; weizhou@apache.org; gopalpanda.cp@gmail.com
> Subject: Re: VNF Offering and Functionality Cloudstack 4.20.1
>
> for Isolated or VPC networks,
>
> Is my understanding I am not able to put a router in front in a shared network. Or it is possible ?
>
>
> Tata Y.
>
>> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
>>
>> Tata,
>>
>> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com> wrote:
>>>
>>> Hello Team,
>>>
>>> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
>>
>> In an l2 network ( or a shared network?)
>
RE: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Alex Mattioli <Al...@shapeblue.com>.
Hi,
You just need to create the shared network in the same VLAN a your router and set that router as the gateway for the shared network.
Regards,
Alex
-----Original Message-----
From: Chi vediamo <ta...@gmail.com>
Sent: 27 June 2025 15:08
To: users@cloudstack.apache.org
Cc: Wei ZHOU <us...@gmail.com>; weizhou@apache.org; gopalpanda.cp@gmail.com
Subject: Re: VNF Offering and Functionality Cloudstack 4.20.1
for Isolated or VPC networks,
Is my understanding I am not able to put a router in front in a shared network. Or it is possible ?
Tata Y.
> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
>
> Tata,
>
> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com> wrote:
>>
>> Hello Team,
>>
>> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
>
> In an l2 network ( or a shared network?)
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Wei ZHOU <us...@gmail.com>.
Hi Chi,
You can use Public IP in two ways in ACS
- add a public IP range to the system IP pool (via zone-> physical network
-> Public traffic -> add IP range). These IPs will be used as Source NAT or
static nat/port forwarding/load balancer IP of isolated network or VPC.
- create a shared network with Public IPs. The VM (including VNF) and VR on
the shared network will get an IP which is Public if the network is
correctly configured. This is widely used by public cloud providers ( with
the security groups feature).
You can try option 2 if you like.
Kind regards,
Wei
On Sat, Jun 28, 2025 at 12:24 AM Chi vediamo <ta...@gmail.com> wrote:
> Thank you again Wei,
>
> Question can i allocate a public ip to the VR or VNF in Share or L2
> Network ?
>
> Or my only options are Isolated and VPC?
>
> Omar
>
> On Jun 27, 2025, at 3:29 PM, Wei ZHOU <us...@gmail.com> wrote:
>
>
> Hi Chi,
>
> I am not very clear what you said.
>
> > Shared Netowk with the Virtual router but does not get a Public address
> assigned,
> I guess you meant that the shared network in front of the VNF. If so, the
> shared network should use public IP, the gateway is configured on your
> upstream router. similar to public IP range for isolated networks.
>
> > While If i Use the Isolated network the CloudStack VR gets the IP.
> Yes, ACS allocates an IP from the IP range for the VR of
> isolated network. The IP is used as source nat IP of vm instances on the
> isolated network.
> ACS does not allocate a public IP to VR of a shared network as it is not
> required (VR only acts as dhcp/dns/metadata/password server).
>
>
>
>
> -Wei
>
> On Fri, Jun 27, 2025 at 9:01 PM Chi vediamo <ta...@gmail.com> wrote:
>
>> Hello Wei,
>>
>> I was using PFsense I try with cisco and Jupiper too, and vPaloAlto. I am
>> trying to mimic networks that I deployed before in Azure.
>>
>> In this scenario you mentioned.
>>
>> Internet <-> public gateway <-> isolated network with source NAT*(mandatory
>> the CSvirtualROUTER)* <-> VNF (on the isolated network and another
>> shared/L2/isolated network) <-> VM on user network.
>>
>>
>> I created a Shared Netowk with the Virtual router but does not get a
>> Public address assigned, While If i Use the Isolated network the CloudStack
>> VR gets the IP.
>>
>> Thank you
>>
>> Tata Y.
>>
>>
>>
>> On Jun 27, 2025, at 1:58 PM, Wei ZHOU <us...@gmail.com> wrote:
>>
>> Hi Chi,
>>
>> VNF means virtual network appliance, which can provide various services,
>> routing, load balancer, dhcp, dns, ids, ips, etc.
>> it can be on the data path, or out of the data path.
>>
>> you can use pfsense VNF or similar, to replace VR. However, ACS VR has a
>> virtual nic on the Public network, which is not possible for VNF (which is
>> a special type of user vm instance).
>> Therefore, to access the public internet or visa versa, user has to add a
>> network in front of VNF, so the topology looks like
>>
>> Internet <-> public gateway <-> shared network with public IP <-> VNF (on
>> the shared network and another shared/L2/isolated network) <-> VM on user
>> network,
>> OR
>> Internet <-> public gateway <-> isolated network with source NAT <-> VNF
>> (on the isolated network and another shared/L2/isolated network) <-> VM on
>> user network.
>>
>> In my video, I used an isolated network. you can use a shared network
>> instead.
>> if you do not need public access, the isolated/shared network is not
>> needed then.
>>
>>
>> -Wei
>>
>>
>> On Fri, Jun 27, 2025 at 5:50 PM Chi vediamo <ta...@gmail.com> wrote:
>>
>>> Thank you Daan
>>>
>>> Is there Any documentation about this. I read about and saw several
>>> videos, but none explains clearly each type versus VNF or vRouter.
>>> I though based on the videos I can just replace the vRouter with an
>>> appliance for isolated networks or a VPC.
>>>
>>> In a shared network I need the vROUTER or appliance to have a link to
>>> public interface while the others are behind the vRouter or appliance. I
>>> was unsuccessful on this one as there is no way to assign a separate port
>>> for Public network.
>>> everything is in a single VXLAN for some reason. and the VXLAN has to be
>>> routed, which I do not want
>>>
>>>
>>> I DID TRY SHARED OR L2 NETWORK: All Hypervisrors running KVM and
>>> upgraded to 4.20.1.
>>>
>>> Here is the Scneario:
>>>
>>> {Internet}
>>> |
>>> |
>>> Hypervisor1 Hypervisro2
>>> |_____________________________|
>>> | |
>>> [vRouter or Appliance] |
>>> | | |
>>> | | |
>>> VXLAN1 VXLAN2 VXLAN2
>>> | | |
>>> | | |
>>> VM1 VM2 VM3
>>>
>>>
>>> Then for L2 should I be able to pick the VNF appliance instead of a
>>> vROUTER ?
>>>
>>>
>>> Tata Y.
>>>
>>>
>>>
>>>
>>>
>>> > On Jun 27, 2025, at 11:16 AM, Daan Hoogland <da...@gmail.com>
>>> wrote:
>>> >
>>> > Chi,
>>> > I do not fully understand your use-case, but in the cases of isolated
>>> > network and VPC you can put an appliance behind the router, not in
>>> > front of it. (not sure, needs checking)
>>> > In an L2 network you design the routing yourself and can make your VNF
>>> > be the gateway
>>> > In a shared network also you can design a lot, except that there will
>>> > be layer 3 available. (I am not sure if VNFs are useful in this type
>>> > of env)
>>> >
>>> > On Fri, Jun 27, 2025 at 3:08 PM Chi vediamo <ta...@gmail.com>
>>> wrote:
>>> >>
>>> >> for Isolated or VPC networks,
>>> >>
>>> >> Is my understanding I am not able to put a router in front in a
>>> shared network. Or it is possible ?
>>> >>
>>> >>
>>> >> Tata Y.
>>> >>
>>> >>> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
>>> >>>
>>> >>> Tata,
>>> >>>
>>> >>> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com>
>>> wrote:
>>> >>>>
>>> >>>> Hello Team,
>>> >>>>
>>> >>>> Is there a Way to add a VNF Network Offering ? What are the steps
>>> to use a VNF without a vRouter in front of it.
>>> >>>
>>> >>> In an l2 network ( or a shared network?)
>>> >>
>>> >
>>> >
>>> > --
>>> > Daan
>>>
>>>
>>
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Wei ZHOU <us...@gmail.com>.
Hi Chi,
I am not very clear what you said.
> Shared Netowk with the Virtual router but does not get a Public address
assigned,
I guess you meant that the shared network in front of the VNF. If so, the
shared network should use public IP, the gateway is configured on your
upstream router. similar to public IP range for isolated networks.
> While If i Use the Isolated network the CloudStack VR gets the IP.
Yes, ACS allocates an IP from the IP range for the VR of isolated network.
The IP is used as source nat IP of vm instances on the isolated network.
ACS does not allocate a public IP to VR of a shared network as it is not
required (VR only acts as dhcp/dns/metadata/password server).
-Wei
On Fri, Jun 27, 2025 at 9:01 PM Chi vediamo <ta...@gmail.com> wrote:
> Hello Wei,
>
> I was using PFsense I try with cisco and Jupiper too, and vPaloAlto. I am
> trying to mimic networks that I deployed before in Azure.
>
> In this scenario you mentioned.
>
> Internet <-> public gateway <-> isolated network with source NAT*(mandatory
> the CSvirtualROUTER)* <-> VNF (on the isolated network and another
> shared/L2/isolated network) <-> VM on user network.
>
>
> I created a Shared Netowk with the Virtual router but does not get a
> Public address assigned, While If i Use the Isolated network the CloudStack
> VR gets the IP.
>
> Thank you
>
> Tata Y.
>
>
>
> On Jun 27, 2025, at 1:58 PM, Wei ZHOU <us...@gmail.com> wrote:
>
> Hi Chi,
>
> VNF means virtual network appliance, which can provide various services,
> routing, load balancer, dhcp, dns, ids, ips, etc.
> it can be on the data path, or out of the data path.
>
> you can use pfsense VNF or similar, to replace VR. However, ACS VR has a
> virtual nic on the Public network, which is not possible for VNF (which is
> a special type of user vm instance).
> Therefore, to access the public internet or visa versa, user has to add a
> network in front of VNF, so the topology looks like
>
> Internet <-> public gateway <-> shared network with public IP <-> VNF (on
> the shared network and another shared/L2/isolated network) <-> VM on user
> network,
> OR
> Internet <-> public gateway <-> isolated network with source NAT <-> VNF
> (on the isolated network and another shared/L2/isolated network) <-> VM on
> user network.
>
> In my video, I used an isolated network. you can use a shared network
> instead.
> if you do not need public access, the isolated/shared network is not
> needed then.
>
>
> -Wei
>
>
> On Fri, Jun 27, 2025 at 5:50 PM Chi vediamo <ta...@gmail.com> wrote:
>
>> Thank you Daan
>>
>> Is there Any documentation about this. I read about and saw several
>> videos, but none explains clearly each type versus VNF or vRouter.
>> I though based on the videos I can just replace the vRouter with an
>> appliance for isolated networks or a VPC.
>>
>> In a shared network I need the vROUTER or appliance to have a link to
>> public interface while the others are behind the vRouter or appliance. I
>> was unsuccessful on this one as there is no way to assign a separate port
>> for Public network.
>> everything is in a single VXLAN for some reason. and the VXLAN has to be
>> routed, which I do not want
>>
>>
>> I DID TRY SHARED OR L2 NETWORK: All Hypervisrors running KVM and upgraded
>> to 4.20.1.
>>
>> Here is the Scneario:
>>
>> {Internet}
>> |
>> |
>> Hypervisor1 Hypervisro2
>> |_____________________________|
>> | |
>> [vRouter or Appliance] |
>> | | |
>> | | |
>> VXLAN1 VXLAN2 VXLAN2
>> | | |
>> | | |
>> VM1 VM2 VM3
>>
>>
>> Then for L2 should I be able to pick the VNF appliance instead of a
>> vROUTER ?
>>
>>
>> Tata Y.
>>
>>
>>
>>
>>
>> > On Jun 27, 2025, at 11:16 AM, Daan Hoogland <da...@gmail.com>
>> wrote:
>> >
>> > Chi,
>> > I do not fully understand your use-case, but in the cases of isolated
>> > network and VPC you can put an appliance behind the router, not in
>> > front of it. (not sure, needs checking)
>> > In an L2 network you design the routing yourself and can make your VNF
>> > be the gateway
>> > In a shared network also you can design a lot, except that there will
>> > be layer 3 available. (I am not sure if VNFs are useful in this type
>> > of env)
>> >
>> > On Fri, Jun 27, 2025 at 3:08 PM Chi vediamo <ta...@gmail.com> wrote:
>> >>
>> >> for Isolated or VPC networks,
>> >>
>> >> Is my understanding I am not able to put a router in front in a shared
>> network. Or it is possible ?
>> >>
>> >>
>> >> Tata Y.
>> >>
>> >>> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
>> >>>
>> >>> Tata,
>> >>>
>> >>> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com>
>> wrote:
>> >>>>
>> >>>> Hello Team,
>> >>>>
>> >>>> Is there a Way to add a VNF Network Offering ? What are the steps to
>> use a VNF without a vRouter in front of it.
>> >>>
>> >>> In an l2 network ( or a shared network?)
>> >>
>> >
>> >
>> > --
>> > Daan
>>
>>
>
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Chi vediamo <ta...@gmail.com>.
Hello Wei,
I was using PFsense I try with cisco and Jupiper too, and vPaloAlto. I am trying to mimic networks that I deployed before in Azure.
In this scenario you mentioned.
> Internet <-> public gateway <-> isolated network with source NAT(mandatory the CSvirtualROUTER) <-> VNF (on the isolated network and another shared/L2/isolated network) <-> VM on user network.
I created a Shared Netowk with the Virtual router but does not get a Public address assigned, While If i Use the Isolated network the CloudStack VR gets the IP.
Thank you
Tata Y.
> On Jun 27, 2025, at 1:58 PM, Wei ZHOU <us...@gmail.com> wrote:
>
> Hi Chi,
>
> VNF means virtual network appliance, which can provide various services, routing, load balancer, dhcp, dns, ids, ips, etc.
> it can be on the data path, or out of the data path.
>
> you can use pfsense VNF or similar, to replace VR. However, ACS VR has a virtual nic on the Public network, which is not possible for VNF (which is a special type of user vm instance).
> Therefore, to access the public internet or visa versa, user has to add a network in front of VNF, so the topology looks like
>
> Internet <-> public gateway <-> shared network with public IP <-> VNF (on the shared network and another shared/L2/isolated network) <-> VM on user network,
> OR
> Internet <-> public gateway <-> isolated network with source NAT <-> VNF (on the isolated network and another shared/L2/isolated network) <-> VM on user network.
>
> In my video, I used an isolated network. you can use a shared network instead.
> if you do not need public access, the isolated/shared network is not needed then.
>
>
> -Wei
>
>
> On Fri, Jun 27, 2025 at 5:50 PM Chi vediamo <tatay188@gmail.com <ma...@gmail.com>> wrote:
>> Thank you Daan
>>
>> Is there Any documentation about this. I read about and saw several videos, but none explains clearly each type versus VNF or vRouter.
>> I though based on the videos I can just replace the vRouter with an appliance for isolated networks or a VPC.
>>
>> In a shared network I need the vROUTER or appliance to have a link to public interface while the others are behind the vRouter or appliance. I was unsuccessful on this one as there is no way to assign a separate port for Public network.
>> everything is in a single VXLAN for some reason. and the VXLAN has to be routed, which I do not want
>>
>>
>> I DID TRY SHARED OR L2 NETWORK: All Hypervisrors running KVM and upgraded to 4.20.1.
>>
>> Here is the Scneario:
>>
>> {Internet}
>> |
>> |
>> Hypervisor1 Hypervisro2
>> |_____________________________|
>> | |
>> [vRouter or Appliance] |
>> | | |
>> | | |
>> VXLAN1 VXLAN2 VXLAN2
>> | | |
>> | | |
>> VM1 VM2 VM3
>>
>>
>> Then for L2 should I be able to pick the VNF appliance instead of a vROUTER ?
>>
>>
>> Tata Y.
>>
>>
>>
>>
>>
>> > On Jun 27, 2025, at 11:16 AM, Daan Hoogland <daan.hoogland@gmail.com <ma...@gmail.com>> wrote:
>> >
>> > Chi,
>> > I do not fully understand your use-case, but in the cases of isolated
>> > network and VPC you can put an appliance behind the router, not in
>> > front of it. (not sure, needs checking)
>> > In an L2 network you design the routing yourself and can make your VNF
>> > be the gateway
>> > In a shared network also you can design a lot, except that there will
>> > be layer 3 available. (I am not sure if VNFs are useful in this type
>> > of env)
>> >
>> > On Fri, Jun 27, 2025 at 3:08 PM Chi vediamo <tatay188@gmail.com <ma...@gmail.com>> wrote:
>> >>
>> >> for Isolated or VPC networks,
>> >>
>> >> Is my understanding I am not able to put a router in front in a shared network. Or it is possible ?
>> >>
>> >>
>> >> Tata Y.
>> >>
>> >>> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <dahn@apache.org <ma...@apache.org>> wrote:
>> >>>
>> >>> Tata,
>> >>>
>> >>> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <tatay188@gmail.com <ma...@gmail.com>> wrote:
>> >>>>
>> >>>> Hello Team,
>> >>>>
>> >>>> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
>> >>>
>> >>> In an l2 network ( or a shared network?)
>> >>
>> >
>> >
>> > --
>> > Daan
>>
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Wei ZHOU <us...@gmail.com>.
Hi Chi,
VNF means virtual network appliance, which can provide various services,
routing, load balancer, dhcp, dns, ids, ips, etc.
it can be on the data path, or out of the data path.
you can use pfsense VNF or similar, to replace VR. However, ACS VR has a
virtual nic on the Public network, which is not possible for VNF (which is
a special type of user vm instance).
Therefore, to access the public internet or visa versa, user has to add a
network in front of VNF, so the topology looks like
Internet <-> public gateway <-> shared network with public IP <-> VNF (on
the shared network and another shared/L2/isolated network) <-> VM on user
network,
OR
Internet <-> public gateway <-> isolated network with source NAT <-> VNF
(on the isolated network and another shared/L2/isolated network) <-> VM on
user network.
In my video, I used an isolated network. you can use a shared network
instead.
if you do not need public access, the isolated/shared network is not needed
then.
-Wei
On Fri, Jun 27, 2025 at 5:50 PM Chi vediamo <ta...@gmail.com> wrote:
> Thank you Daan
>
> Is there Any documentation about this. I read about and saw several
> videos, but none explains clearly each type versus VNF or vRouter.
> I though based on the videos I can just replace the vRouter with an
> appliance for isolated networks or a VPC.
>
> In a shared network I need the vROUTER or appliance to have a link to
> public interface while the others are behind the vRouter or appliance. I
> was unsuccessful on this one as there is no way to assign a separate port
> for Public network.
> everything is in a single VXLAN for some reason. and the VXLAN has to be
> routed, which I do not want
>
>
> I DID TRY SHARED OR L2 NETWORK: All Hypervisrors running KVM and upgraded
> to 4.20.1.
>
> Here is the Scneario:
>
> {Internet}
> |
> |
> Hypervisor1 Hypervisro2
> |_____________________________|
> | |
> [vRouter or Appliance] |
> | | |
> | | |
> VXLAN1 VXLAN2 VXLAN2
> | | |
> | | |
> VM1 VM2 VM3
>
>
> Then for L2 should I be able to pick the VNF appliance instead of a
> vROUTER ?
>
>
> Tata Y.
>
>
>
>
>
> > On Jun 27, 2025, at 11:16 AM, Daan Hoogland <da...@gmail.com>
> wrote:
> >
> > Chi,
> > I do not fully understand your use-case, but in the cases of isolated
> > network and VPC you can put an appliance behind the router, not in
> > front of it. (not sure, needs checking)
> > In an L2 network you design the routing yourself and can make your VNF
> > be the gateway
> > In a shared network also you can design a lot, except that there will
> > be layer 3 available. (I am not sure if VNFs are useful in this type
> > of env)
> >
> > On Fri, Jun 27, 2025 at 3:08 PM Chi vediamo <ta...@gmail.com> wrote:
> >>
> >> for Isolated or VPC networks,
> >>
> >> Is my understanding I am not able to put a router in front in a shared
> network. Or it is possible ?
> >>
> >>
> >> Tata Y.
> >>
> >>> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
> >>>
> >>> Tata,
> >>>
> >>> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com>
> wrote:
> >>>>
> >>>> Hello Team,
> >>>>
> >>>> Is there a Way to add a VNF Network Offering ? What are the steps to
> use a VNF without a vRouter in front of it.
> >>>
> >>> In an l2 network ( or a shared network?)
> >>
> >
> >
> > --
> > Daan
>
>
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Chi vediamo <ta...@gmail.com>.
Thank you Daan
Is there Any documentation about this. I read about and saw several videos, but none explains clearly each type versus VNF or vRouter.
I though based on the videos I can just replace the vRouter with an appliance for isolated networks or a VPC.
In a shared network I need the vROUTER or appliance to have a link to public interface while the others are behind the vRouter or appliance. I was unsuccessful on this one as there is no way to assign a separate port for Public network.
everything is in a single VXLAN for some reason. and the VXLAN has to be routed, which I do not want
I DID TRY SHARED OR L2 NETWORK: All Hypervisrors running KVM and upgraded to 4.20.1.
Here is the Scneario:
{Internet}
|
|
Hypervisor1 Hypervisro2
|_____________________________|
| |
[vRouter or Appliance] |
| | |
| | |
VXLAN1 VXLAN2 VXLAN2
| | |
| | |
VM1 VM2 VM3
Then for L2 should I be able to pick the VNF appliance instead of a vROUTER ?
Tata Y.
> On Jun 27, 2025, at 11:16 AM, Daan Hoogland <da...@gmail.com> wrote:
>
> Chi,
> I do not fully understand your use-case, but in the cases of isolated
> network and VPC you can put an appliance behind the router, not in
> front of it. (not sure, needs checking)
> In an L2 network you design the routing yourself and can make your VNF
> be the gateway
> In a shared network also you can design a lot, except that there will
> be layer 3 available. (I am not sure if VNFs are useful in this type
> of env)
>
> On Fri, Jun 27, 2025 at 3:08 PM Chi vediamo <ta...@gmail.com> wrote:
>>
>> for Isolated or VPC networks,
>>
>> Is my understanding I am not able to put a router in front in a shared network. Or it is possible ?
>>
>>
>> Tata Y.
>>
>>> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
>>>
>>> Tata,
>>>
>>> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com> wrote:
>>>>
>>>> Hello Team,
>>>>
>>>> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
>>>
>>> In an l2 network ( or a shared network?)
>>
>
>
> --
> Daan
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Daan Hoogland <da...@gmail.com>.
Chi,
I do not fully understand your use-case, but in the cases of isolated
network and VPC you can put an appliance behind the router, not in
front of it. (not sure, needs checking)
In an L2 network you design the routing yourself and can make your VNF
be the gateway
In a shared network also you can design a lot, except that there will
be layer 3 available. (I am not sure if VNFs are useful in this type
of env)
On Fri, Jun 27, 2025 at 3:08 PM Chi vediamo <ta...@gmail.com> wrote:
>
> for Isolated or VPC networks,
>
> Is my understanding I am not able to put a router in front in a shared network. Or it is possible ?
>
>
> Tata Y.
>
> > On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
> >
> > Tata,
> >
> > On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com> wrote:
> >>
> >> Hello Team,
> >>
> >> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
> >
> > In an l2 network ( or a shared network?)
>
--
Daan
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Chi vediamo <ta...@gmail.com>.
for Isolated or VPC networks,
Is my understanding I am not able to put a router in front in a shared network. Or it is possible ?
Tata Y.
> On Jun 27, 2025, at 2:35 AM, Daan Hoogland <da...@apache.org> wrote:
>
> Tata,
>
> On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com> wrote:
>>
>> Hello Team,
>>
>> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
>
> In an l2 network ( or a shared network?)
Re: VNF Offering and Functionality Cloudstack 4.20.1
Posted by Daan Hoogland <da...@apache.org>.
Tata,
On Fri, Jun 20, 2025 at 3:05 AM Chi vediamo <ta...@gmail.com> wrote:
>
> Hello Team,
>
> Is there a Way to add a VNF Network Offering ? What are the steps to use a VNF without a vRouter in front of it.
In an l2 network ( or a shared network?)