Chapter 15. Managing Networks and Traffic

15.1. Guest Traffic

15.2. Networking in a Pod

15.3. Networking in a Zone

15.4. Basic Zone Physical Network Configuration

15.5. Advanced Zone Physical Network Configuration

15.5.1. Configure Guest Traffic in an Advanced Zone
15.5.2. Configure Public Traffic in an Advanced Zone
15.5.3. Configuring a Shared Guest Network

15.6. Using Multiple Guest Networks

15.6.1. Adding an Additional Guest Network
15.6.2. Reconfiguring Networks in VMs
15.6.3. Changing the Network Offering on a Guest Network

15.7. IP Reservation in Isolated Guest Networks

15.7.1. IP Reservation Considerations
15.7.2. Limitations
15.7.3. Best Practices
15.7.4. Reserving an IP Range

15.8. Reserving Public IP Addresses and VLANs for Accounts

15.8.1. Dedicating IP Address Ranges to an Account
15.8.2. Dedicating VLAN Ranges to an Account

15.9. Configuring Multiple IP Addresses on a Single NIC

15.9.1. Use Cases
15.9.2. Guidelines
15.9.3. Assigning Additional IPs to a VM
15.9.4. Port Forwarding and StaticNAT Services Changes

15.10. About Multiple IP Ranges

15.11. About Elastic IP

15.12. Portable IPs

15.12.1. About Portable IP
15.12.2. Configuring Portable IPs
15.12.3. Acquiring a Portable IP
15.12.4. Transferring Portable IP

15.13. Multiple Subnets in Shared Network

15.13.1. Prerequisites and Guidelines
15.13.2. Adding Multiple Subnets to a Shared Network

15.14. Isolation in Advanced Zone Using Private VLAN

15.14.1. About Private VLAN
15.14.2. Prerequisites
15.14.3. Creating a PVLAN-Enabled Guest Network

15.15. Security Groups

15.15.1. About Security Groups
15.15.2. Adding a Security Group
15.15.3. Security Groups in Advanced Zones (KVM Only)
15.15.4. Enabling Security Groups
15.15.5. Adding Ingress and Egress Rules to a Security Group

15.16. External Firewalls and Load Balancers

15.16.1. About Using a NetScaler Load Balancer
15.16.2. Configuring SNMP Community String on a RHEL Server
15.16.3. Initial Setup of External Firewalls and Load Balancers
15.16.4. Ongoing Configuration of External Firewalls and Load Balancers
15.16.5. Load Balancer Rules
15.16.6. Configuring AutoScale

15.17. Global Server Load Balancing Support

15.17.1. About Global Server Load Balancing
15.17.2. Configuring GSLB
15.17.3. Known Limitation

15.18. Guest IP Ranges

15.19. Acquiring a New IP Address

15.20. Releasing an IP Address

15.21. Static NAT

15.21.1. Enabling or Disabling Static NAT

15.22. IP Forwarding and Firewalling

15.22.1. Firewall Rules
15.22.2. Egress Firewall Rules in an Advanced Zone
15.22.3. Port Forwarding

15.23. IP Load Balancing

15.24. DNS and DHCP

15.25. Remote Access VPN

15.25.1. Configuring Remote Access VPN
15.25.2. Using Remote Access VPN with Windows
15.25.3. Using Remote Access VPN with Mac OS X
15.25.4. Setting Up a Site-to-Site VPN Connection

15.26. About Inter-VLAN Routing (nTier Apps)

15.27. Configuring a Virtual Private Cloud

15.27.1. About Virtual Private Clouds
15.27.2. Adding a Virtual Private Cloud
15.27.3. Adding Tiers
15.27.4. Configuring Network Access Control List
15.27.5. Adding a Private Gateway to a VPC
15.27.6. Deploying VMs to the Tier
15.27.7. Deploying VMs to VPC Tier and Shared Networks
15.27.8. Acquiring a New IP Address for a VPC
15.27.9. Releasing an IP Address Alloted to a VPC
15.27.10. Enabling or Disabling Static NAT on a VPC
15.27.11. Adding Load Balancing Rules on a VPC
15.27.12. Adding a Port Forwarding Rule on a VPC
15.27.13. Removing Tiers
15.27.14. Editing, Restarting, and Removing a Virtual Private Cloud

15.28. Persistent Networks

15.28.1. Persistent Network Considerations
15.28.2. Creating a Persistent Guest Network

In a CloudStack, guest VMs can communicate with each other using shared infrastructure with the security and user perception that the guests have a private LAN. The CloudStack virtual router is the main component providing networking features for guest traffic.