| Excerpt |
|---|
| There are three (3) distinct network pools for IaaS provisioning: VM External Network, VM Private Network and VM Management network. |
- VM External Network IPs are assigned to PFSense WAN interface: One IP is considered the primary WAN IP and the rest are declared as virtual IPs)
- VM Private Network IPs are assigned to customer VMs and to PFSense LAN interface: One Private IP is assigned to PFSense LAN interface and acts as a gateway for all underlying customer VMs. For each VM private IP, a NAT rule is added to the PFSense configuration so that it will be translated to a public IP address (virtual IP in PFSense) and an access rule is also added to permit outgoing traffic originating from that VM towards internet (through PFSense). Private IPs are automatically generated by the Service Manager based on specific settings you choose during configuration of the Service Manager settings.
- VM Management Network IPs are assigned to PFSense Management interface: Customers do not have access to that network, it can only be used for administrative purposes as well as intercommunication between Cloud OSS Service Manager and Orchestration Servers.
...