etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

CLOUDSTACK-3389

This commit is contained in:
radhikap 2013-07-17 10:33:06 +05:30
parent e370968fb2
commit 164ce32a88
1 changed files with 15 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
docs/en-US/inter-vlan-routing.xml
View File

@ -19,17 +19,17 @@
under the License.
-->
<section id="inter-vlan-routing">
<title>About Inter-VLAN Routing</title>
<para>Inter-VLAN Routing is the capability to route network traffic between VLANs. This feature
enables you to build Virtual Private Clouds (VPC), an isolated segment of your cloud, that can
hold multi-tier applications. These tiers are deployed on different VLANs that can communicate
with each other. You provision VLANs to the tiers your create, and VMs can be deployed on
different tiers. The VLANs are connected to a virtual router, which facilitates communication
between the VMs. In effect, you can segment VMs by means of VLANs into different networks that
can host multi-tier applications, such as Web, Application, or Database. Such segmentation by
means of VLANs logically separate application VMs for higher security and lower broadcasts,
while remaining physically connected to the same device.</para>
<para>This feature is supported on XenServer and VMware hypervisors.</para>
<title>About Inter-VLAN Routing (nTier Apps)</title>
<para>Inter-VLAN Routing (nTier Apps) is the capability to route network traffic between VLANs.
This feature enables you to build Virtual Private Clouds (VPC), an isolated segment of your
cloud, that can hold multi-tier applications. These tiers are deployed on different VLANs that
can communicate with each other. You provision VLANs to the tiers your create, and VMs can be
deployed on different tiers. The VLANs are connected to a virtual router, which facilitates
communication between the VMs. In effect, you can segment VMs by means of VLANs into different
networks that can host multi-tier applications, such as Web, Application, or Database. Such
segmentation by means of VLANs logically separate application VMs for higher security and lower
broadcasts, while remaining physically connected to the same device.</para>
<para>This feature is supported on XenServer, KVM, and VMware hypervisors.</para>
<para>The major advantages are:</para>
<itemizedlist>
<listitem>
@ -88,10 +88,10 @@
</itemizedlist>
</listitem>
<listitem>
<para>The administrator can define Access Control List (ACL) on the virtual router to filter
the traffic among the VLANs or between the Internet and a VLAN. You can define ACL based on
CIDR, port range, protocol, type code (if ICMP protocol is selected) and Ingress/Egress
type.</para>
<para>The administrator can define Network Access Control List (ACL) on the virtual router to
filter the traffic among the VLANs or between the Internet and a VLAN. You can define ACL
based on CIDR, port range, protocol, type code (if ICMP protocol is selected) and
Ingress/Egress type.</para>
</listitem>
</itemizedlist>
<para>The following figure shows the possible deployment scenarios of a Inter-VLAN setup:</para>