ungleich-staticcms/content/u/blog/uncloud-next

75 lines
1.6 KiB
Text
Raw Normal View History

2020-01-15 10:52:19 +00:00
x step 4 = database!
- image contextualisation
- dnsmasq
2020-01-14 13:47:22 +00:00
- metadata
- for getting keys
2020-01-15 10:52:19 +00:00
- user metadata
2020-01-14 13:47:22 +00:00
- user authentication
- otp or ldap or plain file
- for registering keys
- for creating VMs
2020-01-11 23:23:11 +00:00
- automating
- trigger / postgres / etcd
- building vm images!
2020-01-12 12:28:24 +00:00
- generate tap names matching vm??? problem, because inteerfaces are
limited in length!
[root@diamond hackcloud]# ip link add b23456789012345 type bridge
[root@diamond hackcloud]# ip link add b234567890123456 type bridge
Error: argument "b234567890123456" is wrong: "dev" not a valid ifname
[root@diamond hackcloud]#
- VMID is not uuid, but counter; using hexa; using 16**10,
gives 1099511627776 VMs
>>> (16**10)/(1000*24*365)
125515.02600182648
interface names:
x = vxlan ?
b = bridge
v = vm
=> 16 types possible
10+1 used => 4 left
2 positions for interface id? => 256 interfaces per VM
mac:
48 bits = 6 bytes
1 byte = 2hexa positions
prefix is 02:00: = 2 bytes
we have 4 bytes = 8 hexa left!!!!
embed mac suffix as ID!
full mac = 12 bytes
No vmprefix + counter -> because counter size might always be wrong
(how many interfaces? 16? 256? ... )
--------------------------------------------------------------------------------
No stale firewall entries as we regnerate, not keep the list!
table bridge filter {
chain prerouting {
type filter hook prerouting priority 0;
policy accept;
ibrname br100 jump netpublic-$version
}
chain netpublic-10 {
...
}
}
can generate new full chain, change only the jump
--------------------------------------------------------------------------------
2020-01-13 10:34:29 +00:00
Much later:
- rate limiting