Revision 839e2bd0 snf-cyclades-app/synnefo/app_settings/default/api.py
b/snf-cyclades-app/synnefo/app_settings/default/api.py | ||
---|---|---|
21 | 21 |
# Network Configuration |
22 | 22 |
# |
23 | 23 |
|
24 |
# Synnefo assigns this link id to NICs connected on the public network. |
|
25 |
# An IP pool should be associated with this link by the Ganeti administrator. |
|
26 |
GANETI_PUBLIC_NETWORK = 'snf-1' |
|
27 |
GANETI_PRIVATE_BRIDGE = 'br2990' |
|
28 |
# This link id is assigned to NICs that should be isolated from anything else |
|
29 |
# (e.g., right before the NIC gets deleted). |
|
30 |
# This value is also hardcoded in a fixture in db/fixtures/initial_data.json. |
|
31 |
GANETI_NULL_LINK = 'snf_public' |
|
32 |
|
|
33 |
# The pool of private network links to use is |
|
34 |
# $GANETI_LINK_PREFIX{1..$GANETI_MAX_LINK_NUMBER}. |
|
35 |
# |
|
36 |
# The prefix to use for private network links. |
|
37 |
GANETI_LINK_PREFIX = 'prv' |
|
38 |
# The number of private network links to use. |
|
39 |
GANETI_MAX_LINK_NUMBER = 100 |
|
24 |
# Name of the network in Ganeti corresponding to the default public network. |
|
25 |
# All created VMs will obtain an IP from this network. |
|
26 |
GANETI_PUBLIC_NETWORK = 'snf-net-1' |
|
27 |
|
|
28 |
ENABLED_NETWORKS = ['PUBLIC_ROUTED', |
|
29 |
'PRIVATE_MAC_FILTERED', |
|
30 |
'PRIVATE_PHYSICAL_VLAN'] |
|
31 |
# CUSTOM_ROUTED, |
|
32 |
# CUSTOM_BRIDGED, |
|
33 |
|
|
34 |
# Settings for PUBLIC_ROUTED network: |
|
35 |
# ----------------------------------- |
|
36 |
# In this case VMCs act as routers that forward the traffic to/from VMs, based |
|
37 |
# on the defined routing table($PUBLIC_ROUTED_ROUTING_TABLE) and ip rules, that |
|
38 |
# exist in every node, implenting an IP-less routed and proxy-arp setup. |
|
39 |
# (This value is also hardcoded in fixture db/fixtures/initial_data.json) |
|
40 |
PUBLIC_ROUTED_ROUTING_TABLE = 'snf_public' |
|
41 |
PUBLIC_ROUTED_TAGS = ['ip-less-routed'] |
|
42 |
|
|
43 |
# Settings for PRIVATE_MAC_FILTERED network: |
|
44 |
# ------------------------------------------ |
|
45 |
# All networks of this type are bridged to the same bridge. Isolation between |
|
46 |
# networks is achieved by assigning a unique MAC-prefix to each network and |
|
47 |
# filtering packets via ebtables. |
|
48 |
PRIVATE_MAC_FILTERED_BRIDGE = 'br0' |
|
40 | 49 |
# The first mac prefix to use |
41 |
GANETI_BASE_MAC_PREFIX = 'aa:00:01' |
|
42 |
# The number of mac prefixes to use. |
|
43 |
GANETI_MAX_MAC_PREFIX_NUMBER = 4096 |
|
50 |
PRIVATE_MAC_FILTERED_BASE_MAC_PREFIX = 'aa:00:00' |
|
51 |
PRIVATE_MAC_FILTERED_MAX_PREFIX_NUMBER = 8192 |
|
52 |
PRIVATE_MAC_FILTERED_TAGS = ['private-filtered'] |
|
53 |
|
|
54 |
# Settings for PRIVATE_PHSICAL_VLAN network: |
|
55 |
# ------------------------------------------ |
|
56 |
# Each network of this type is mapped to an isolated physical VLAN, which must |
|
57 |
# be preconfigured in the backend. Each vlan corresponds to a bridge named |
|
58 |
# $PRIVATE_PHYSICAL_VLAN_PREFIX{1..$PRIVATE_PHYSICAL_VLAN_MAX_NUMBER} (e.g. prv5) |
|
59 |
# VirtualMachine's taps are eventually bridged to the corresponding bridge. |
|
60 |
PRIVATE_PHYSICAL_VLAN_BRIDGE_PREFIX = 'prv' |
|
61 |
# The max limit of physical vlan pool |
|
62 |
PRIVATE_PHYSICAL_VLAN_MAX_NUMBER = 100 |
|
63 |
|
|
64 |
|
|
65 |
# Settings for CUSTOM_ROUTED: |
|
66 |
# --------------------------- |
|
67 |
# Same as PUBLIC_ROUTED but with custom values |
|
68 |
CUSTOM_ROUTED_ROUTING_TABLE = 'custom_routing_table' |
|
69 |
CUSTOM_ROUTED_TAGS = [] |
|
70 |
|
|
71 |
# Settings for CUSTOM_BRIDGED: |
|
72 |
# --------------------------- |
|
73 |
# Same as PRIVATE_BRIDGED but with custom values |
|
74 |
CUSTOM_BRIDGED_BRIDGE = 'custom_bridge' |
|
75 |
CUSTOM_BRIDGED_TAGS = [] |
|
44 | 76 |
|
45 | 77 |
# Firewalling |
46 | 78 |
GANETI_FIREWALL_ENABLED_TAG = 'synnefo:network:0:protected' |
47 | 79 |
GANETI_FIREWALL_DISABLED_TAG = 'synnefo:network:0:unprotected' |
48 | 80 |
GANETI_FIREWALL_PROTECTED_TAG = 'synnefo:network:0:limited' |
49 | 81 |
|
50 |
|
|
51 | 82 |
# The default firewall profile that will be in effect if no tags are defined |
52 | 83 |
DEFAULT_FIREWALL_PROFILE = 'DISABLED' |
53 | 84 |
|
Also available in: Unified diff