Support a simple PAT (port address translation) API as alternative to LBaaS.
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| neutron |
New
|
Undecided
|
Unassigned | ||
Bug Description
I would like to SSH to my VMs without assigning them each a Floating IP address. Today this requires managing a bastion VM or LBaaS API.
Instead, I would like to use a PAT API in order to tell Neutron that given my L2 port with address IP-A (on the provider network):
- tcp packets to IP-A and port 1000 should have their destination re-written to VM-1's private IP and port 22.
- tcp packets to IP-A and port 2000 should have their destination re-written to VM-2's private IP and port 22.
- ... and so on.
Similarly:
- packets from VM-1's port 22 should have their source re-written to IP-A and port 1000
- packets from VM-2's port 22 should have their source re-written to IP-A and port 2000
- ... and so on.
I can do this with LBaaS v2 API, but it's not really meant for this use-case.
| Slawek Kaplonski (slaweq) wrote | #1 |
I think it is duplicate of https:/