This document describes how to provide Internet access to your virtual machines managed with Abiquo on a private network with VLAN isolation through a gateway machine with an IP address in the cloud's Public Network.
Remember that Abiquo now enables you to create network topologies using the Abiquo integrations SDN systems such as OpenStack Neutron and VMware NSX.
Abiquo provides complete freedom to create, modify and delete network configurations using VLANs. Virtual appliances have private network addresses within VLANs, which is a very flexible way to configure network access for virtual appliances. However, this feature makes administration of the Abiquo System exponentially more complex. Hundreds of users can create, configure and remove isolated VLANs at the same time. So cloud administrators could conceivably spend much of their time managing Internet access for the VLAN configurations in a cloud. Thus, Abiquo provides a logical and automated solution for the administration of Internet access.
Before going any further with this how-to, it is important to understand the difference between private networks and public networks in terms of access and definition in the Abiquo platform.
When you create a private network the following splash screen appears:
The most important fields of this form are the network address and mask, which define the network, and the Gateway. The Gateway is the node of the network that will access another network (in this case, the Internet) and it must be defined. Every network packet will be sent to the gateway. Selecting a network in the network list displays the network details and the Gateway address.
The cloud administrator has privileges to provide Internet access to the public networks, so public IPs will have Internet access. In this solution, one virtual machine with a public IP address will act as a gateway to provide Internet access to every virtual machine in a virtual datacenter, as shown in the diagram below.
When the virtual machine gateway is deployed, it will forward all the private VLAN traffic to the public IP address. Because this public IP address has Internet access through the datacenter's network infrastructure, every machine in the VDC will now have Internet access.
This example implements the solution shown in the above diagram.
Step 1. Create a Virtual Datacenter
The Abiquo Cloud Admin has defined a public VLAN with the following parameters:
The public VLAN is a Network with the address range 184.108.40.206 to 220.127.116.11 using 18.104.22.168 as a gateway.
Step 2. Buy a Public IP Address
Step 3. Create the Gateway Virtual Machine
Create and configure a virtual machine node_gateway to redirect all the VLAN traffic to the public address.
Step 4. Deploy the Machine
Step 5. Set Up Forwarding and Firewall
Now forward all the traffic to the NIC that belongs the IP address 22.214.171.124. You can configure Unix firewall iptables to do this.
Step 6. Check the Configuration
Virtual machine 1:
Virtual machine 2: