Bookmark this page

Summary

In this chapter, you learned:

  • Public-facing applications require deploying an instance either on a provider network using an external network with DNS and DHCP configured, or on a tenant network with an associated floating IP address.

  • Provider networks can be of type local, Flat, VLAN, GRE, VXLAN, or GENEVE. Provider networks are the most common type of network used by OpenStack clients.

  • Routers are a logical OpenStack component that forwards packets between different networks. An external network must have an allocation pool to provide floating IP addresses to be used for public access path for tenant networks using routers.

  • SSH key pairs allow passwordless, secure, and trusted access to remote servers. You can create new key pairs in OpenStack, or import existing key pairs. When a new key pair is created, the public key is stored in the Compute service database and the private key is stored locally.

  • An instance with public access is an instance that has access to the external network. A public instance should be protected using a key pair and a security group.

  • A key pair cannot be attached to an instance after creation. The instance must be deleted and recreated with the --key-name option.

Revision: cl110-16.1-4c76154