VIO+nsx-v网络相关接口和说明文档.docx

NSX-v + VIO NSX-v+VIO网络功能支持概览 2层网络：vxlan，dhcp，重叠ip。 3层网络：集中式路由，分布式路由，外部网络，静态路由，no-NAT支持 4层网络+：负载均衡器 安全组：分布式带状态功能防火墙（stateful firewall），同一个网络下的限制（subnet） 元数据服务 允许指定实例的专用元数据信息：主机名，ssh key，dns信息等 NSX-v和VDS 功能对比 NSXVDS OnlyDescription网络和安全功能交换机VLAN 私有网络YesYesCreate provider networks that are backed by VLANs on the physical network. Instances connected to the provider network will be plugged directly to these VLANs.子网支持重叠IPYesNoEach project can dynamically create networks that are private to the project. These networks can have IP subnets that overlap with each other.DHCPYesYesInstances get automatic addressing via DHCP (with vDS its using dnsmasq, with NSX its using Edge-DHCP)路由器逻辑路由YesNoEnable routing among multiple private logical networks, as well as between a logical network and an external network.外部网络YesNoNetworks that provide external access to the instances. Private networks will be uplinked to the external network via a router to provide external access to the instances on the private networks.静态路由YesNoInsert a static route.实例浮动IPYesNoAssign publicaly routable IP addresses to instances to enable external access in to the instances.No-NAT RoutersYesNoNo-NAT routing topology supported by NSXv Neutron Plugin (bug 1424942) 动态路由协议NoNoOpenStack doesnt support dynamic routing安全Firewalling (Security Groups)YesNoOpenStack security groups (with NSX, security group are used + DFW rules created using those SG. This allow micro-segmentation)Port SecurityYesNoNeutron Port Security is implemented using NSX SpoofGuard capabilitiesFirewalling (L3 FWaaS)FutureNoOpenStack FWaaS (with NSX, firewall rules are created on logical router Edge)其他Load BalancingYesNowith NSX, LB poo/VIP are created on logical router Edge. Target for LBaaS is Kilo.Quality of Service (流量控制)Not commited for futureNoExtension: Allowed Address PairsFutureNoThis extension is to support VMs r