81c73bd1b5
Our present amphora image create scripts set up the ssh daemon on the amphora to bind to the wildcard interface (which is the default). However, this causes problems for anyone who tries to set up a listener on TCP port 22, since haproxy will not be able to bind to the same IP. This patch introduces a dhclient post-bind script to the amphora image to gracefully rebind the SSH-daemon to only the load balancer management net IP when it comes up on the network, solving the above use case. This patch has the secondary benefit of making the amphora's SSH daemon only respond to requests on the management network, which incrementally increases the security of the amphora. Change-Id: Iab93cec1f4dc4a2e37ad3cb8a92c132383dcda6a Closes-Bug: #1551505
Octavia
Operator-grade open source scalable load balancer.
- Free software: Apache license
- Documentation: http://docs.openstack.org/developer/octavia
- Source: http://git.openstack.org/cgit/openstack/octavia
- Bugs: http://bugs.launchpad.net/octavia/
The Octavia project seeks to become the standard operator-grade load balancer in use in large OpenStack deployments. Note that it is not competing with the Neutron LBaaS extension and may never actually replace it. Rather, Octavia should be seen as "yet another vendor" which is accessed via a driver for Neutron LBaaS.
For more information on project direction and guiding principles for contributors, please see the CONSTITUTION.rst file in this directory, or specifications in the specs/ subdirectory. Other documentation can be found in the docs/ directory.
Please also see https://wiki.openstack.org/wiki/Octavia/Roadmap for the latest version of our project roadmap.