diff --git a/docs/en-US/add-loadbalancer-rule-vpc.xml b/docs/en-US/add-loadbalancer-rule-vpc.xml index 0f2a83dcbfd..71fc51c1f8f 100644 --- a/docs/en-US/add-loadbalancer-rule-vpc.xml +++ b/docs/en-US/add-loadbalancer-rule-vpc.xml @@ -60,7 +60,7 @@
Creating a Network Offering for External LB - To have internal LB support on VPC, create a network offering as follows: + To have external LB support on VPC, create a network offering as follows: Log in to the &PRODUCT; UI as a user or admin. @@ -111,12 +111,16 @@ Indicate whether a VLAN should be specified when this offering is used. - Supported Services: Select Load Balancer. - Select InternalLbVM from the provider list. + Supported Services: Select Load Balancer. Use + Netscaler or VpcVirtualRouter. - Load Balancer Type: Select external LB from the - drop-down. Use Netscaler + Load Balancer Type: Select Public LB from the + drop-down. + + + LB Isolation: Select Dedicated if Netscaler is + used as the external LB provider. System Offering: Choose the system service @@ -288,7 +292,9 @@
Creating a Network Offering for Internal LB - To have internal LB support on VPC, create a network offering as follows: + To have internal LB support on VPC, either use the default offering, + DefaultIsolatedNetworkOfferingForVpcNetworksWithInternalLB, or create a network offering as + follows: Log in to the &PRODUCT; UI as a user or admin. @@ -364,6 +370,13 @@
Creating an Internal LB Rule + When you create the Internal LB rule and applies to a VM, an Internal LB VM, which is + responsible for load balancing, is created. You can view the created Internal LB VM in the + Instances page if you navigate to Infrastructure > + Zones > <zone_ + name> > <physical_network_name> > + Network Service Providers > Internal LB VM. Log in to the &PRODUCT; UI as an administrator or end user. @@ -398,8 +411,9 @@ Source IP Address: The source IP from which - traffic originates. Typically, this is the IP of an instance on another tier within - your VPC. + traffic originates. The IP is acquired from the CIDR of that particular tier on + which you want to create the Internal LB rule. + For every Source IP, a new Internal LB VM is created for load balancing. Source Port: The port associated with the diff --git a/docs/en-US/configure-acl.xml b/docs/en-US/configure-acl.xml index c89210b3c50..3ac2b7462c4 100644 --- a/docs/en-US/configure-acl.xml +++ b/docs/en-US/configure-acl.xml @@ -22,9 +22,11 @@ Configuring Network Access Control List Define Network Access Control List (ACL) on the VPC virtual router to control incoming (ingress) and outgoing (egress) traffic between the VPC tiers, and the tiers and Internet. By - default, all incoming and outgoing traffic to the guest networks is blocked. To open the ports, - you must create a new network ACL. The network ACLs can be created for the tiers only if the - NetworkACL service is supported. + default, all incoming traffic to the guest networks is blocked and all outgoing traffic from + guest networks is allowed, once you add an ACL rule for outgoing traffic, then only outgoing + traffic specified in this ACL rule is allowed, the rest is blocked. To open the ports, you must + create a new network ACL. The network ACLs can be created for the tiers only if the NetworkACL + service is supported.
About Network ACL Lists In &PRODUCT; terminology, Network ACL is a group of Network ACL items. Network ACL items @@ -35,8 +37,8 @@ VPC tiers within a VPC. A Tier is associated with a Network ACL at all the times. Each tier can be associated with only one ACL. The default Network ACL is used when no ACL is associated. Default behavior is all the - incoming and outgoing traffic is blocked to the tiers. Default network ACL cannot be removed - or modified. Contents of the default Network ACL is: + incoming traffic is blocked and outgoing traffic is allowed from the tiers. Default network + ACL cannot be removed or modified. Contents of the default Network ACL is: @@ -222,7 +224,7 @@
- Assigning a Custom ACL List to a Tier + Creating a Tier with Custom ACL List Create a VPC. diff --git a/docs/en-US/images/add-tier.png b/docs/en-US/images/add-tier.png index 881671e2133..0994dbd0a5a 100644 Binary files a/docs/en-US/images/add-tier.png and b/docs/en-US/images/add-tier.png differ