Is this a routing problem or something else? pfSense&OpenStack (SOLVED)
-
I can't help but find running pfsense in openstack a bit… redundant. Maybe I'm missing something, but what exactly is wrong with using the many firewall layers of openstack that Neutron has built in?
I'm not saying there's no merit in this, but aren't you trying to solve a problem that openstack already has many tools to help you out? And surely, performance will suffer from the many overlay networks used.
-
Good question.
Openstack provides simple "port open or then not" -types of solutions whereas pfSense is a platform for building security.
Perhaps I have misunderstood OpenStack in this sense, but isn't it just iptables with a very very simplified interface on top?
-
You're right, but it just feels a bit weird implementing a virtual firewall on your openstack to access your virtual IP's
But god knows, openstack is the wild west so far as best practices are concerned, so don't let me tell you otherwise :D