Skip to content

Network Infrastructure Requirements

Jump to bottom
Rob Coward edited this page Oct 18, 2016 · 3 revisions

The HEAT template provided in this repository assumes that you have already started deploying network resources and instances in your OpenStack project, and that you now want to setup an IPSEC VPN tunnel to connect your project to external resources.

It assumes that the following resources have already been created:

  • A network and subnet on which you are creating instances.
  • A router to connect your subnet to the 'internet' external network.
  • An SSH Keypair that will be used to create instances.
  • A 'jumpbox' or 'bastion' linux server instance created on your subnet.
  • A floating IP Address allocated and assigned to your jumpbox instance.
  • A security group allowing inbound SSH access to your jumpbox instance.

If you have not already created these resources, we have also provided a sample HEAT template to get you started. This template will create the above resources for you, creating:

  • an internal network with the subnet 192.168.1.0/24,
  • configured to use an allocation pool of 192.168.1.20-192.168.1.200 and
  • using google's public dns server 8.8.8.8

To deploy this template, you can pass the url directly into the OpenStack Horizon UI: https://raw.githubusercontent.com/UKCloud/vpn-on-openstack/master/infrastructure.yaml

Infrastructure Stack

Alternatively, you can clone this repository locally and use the OpenStack CLI to create the stack with the following command:

openstack stack create --parameter flavor=t1.small --parameter image="CentOS 7" --wait -t infrastructure.yaml Infrastructure

ukcloud

Clone this wiki locally