OpenStack networking

Our OpenStack lets you create your own private networks. However, in contrast to the TUhost service, these networks cannot be connected to your institutional network directly (layer 2/VLAN). In exchange, virtual servers hosted on OpenStack are exempt from machine registration requirements.

How the networking works

You can either use the public network to host your virtual machines, or you can create a private network with a private IP address range. The latter is useful to conserve IP addresses.

To translate between the public and private networks, you can create routers, which work just like traditional routers. The routers can also NAT from your private address range to the public IP address.

In addition, you can also create Load balancers, which will load balance incoming connections between one or more virtual machines. Floating IPs let you create stable IP addresses that you can move from one virtual machine to another.

Firewalls are provided by security groups. Each virtual machine network port is assigned to a security group that governs its ingress or egress traffic.