| aprats | Hi! I was looking at the VIP for octavia. Is it possible to differentiate traffic based on which additional VIP is targeted ? For example if I try to reach VIP1, i'll be lb to backends A but if I target VIP2 I'll be redirected to Backends B. | 13:47 |
|---|---|---|
| frickler | aprats: why not use two different LBs for that? | 13:53 |
| aprats | Will definitely work but as my traffic is pretty slim. So I was looking for some kind of way to bind a frontend to a VIP. But perhaps I mistaken what is the use case for additional VIP. | 14:06 |
| johnsom | aprats The major use case was to have IPv4 and IPv6 VIPs on the same load balancer. That said, you may be able to do what you want with L7policies and rules. For example, if you have different host names for the two VIPs you could use the L7 "HOST_NAME" rule to send the traffic to different pools. You may also be able to use the "HEADER" rule, but I'm not positive on that. | 14:18 |
| johnsom | We do not currently have an L7 rule for which VIP received the traffic. It's possible, but would need to come in as an RFE and get added to a future release. | 14:19 |
| *** dkehn_ is now known as dkehn | 14:24 | |
| aprats | Since I'm on a TCP level L7 rules are not an option for me. I'll think about this and propose a RFE if I find my use case relevant. Thanks for your answers ! | 14:27 |
| spatel | johnsom my end users getting error - # openstack loadbalancer list - Policy does not allow this request to be performed. (HTTP 403) (Request-ID: req-58ba796f-e1fa-4656-b9fe-8c9835a7fac1) | 18:31 |
| johnsom | spatel That error is what it says. The user doesn't have the right roles to access that command in your deployment. | 19:05 |
| spatel | johnsom sorry i was in meeting :( | 20:52 |
| spatel | Where I should give them permission? Assuming it has to be some policy.json file correct? | 20:53 |
| spatel | This is first time I have seen this issue, in Stein I haven't seen error like this | 20:53 |
| johnsom | stein? lol | 21:14 |
| johnsom | spatel What RBAC mode are you using in Octavia? | 21:15 |
| johnsom | https://docs.openstack.org/octavia/latest/configuration/policy.html | 21:17 |
| johnsom | Check if you have a policy.yaml configured in the octavia.conf, if not, you are using advanced RBAC. | 21:18 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!