Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NSX-T ALB Virtual Service Transparent mode and Pool Firewall Group membership (VCD 10.4.1+) #560

Merged
merged 12 commits into from
Mar 27, 2023

Conversation

Didainius
Copy link
Collaborator

@Didainius Didainius commented Mar 20, 2023

This PR continues on #549 and further catches up with latest NSX-T ALB features (requiring VCD 10.4.1+).

In this PR there are two features:

  • ALB Pool support for MemberGroupRef (which are NSX-T IP Sets)
  • ALB Virtual Service support for Transparent mode (Adjust ALB Settings configuration to support IPv6 and Transparent mode #549 added Transparent mode support for Edge Gateway settings).
    Note that transparent mode can only be enabled when ALB Pools are configured to use above mentioned MemberGroupRef and the backing Service Engine Group inside AVI is configured to use Service Engine Group configured in "Active-Standby" mode

Notes

  • New configuration field NsxtAlbServiceEngineGroup is introduced. Previously we relied on a Default Service Engine Group that was created, but Transparent mode requires Service Engine Group configured in "Active-Standby" mode therefore it must be specified.

Side note:
This PR includes a generic function addrOf which should be a solution to replace all our type-limited functions takeBoolPointer, takeIntAddress, takeStringPointer. I did not pollute this PR with replacements as that can be done at a later time

Testing

alb tests passed on 10.3.0, 10.3.3, 10.4.0, 10.4.1

Signed-off-by: Dainius Serplis <dserplis@vmware.com>
Signed-off-by: Dainius Serplis <dserplis@vmware.com>
Signed-off-by: Dainius Serplis <dserplis@vmware.com>
Signed-off-by: Dainius Serplis <dserplis@vmware.com>
Signed-off-by: Dainius Serplis <dserplis@vmware.com>
@Didainius Didainius changed the title NSX-T ALB Virtual Service Transparent mode and Pool Firewall Group membership NSX-T ALB Virtual Service Transparent mode and Pool Firewall Group membership (VCD 10.4.1+) Mar 21, 2023
Signed-off-by: Dainius Serplis <dserplis@vmware.com>
@Didainius Didainius marked this pull request as ready for review March 22, 2023 05:25
Copy link
Collaborator

@adambarreiro adambarreiro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

…Group is not present

Signed-off-by: Dainius Serplis <dserplis@vmware.com>
Signed-off-by: Dainius Serplis <dserplis@vmware.com>
Copy link
Contributor

@dataclouder dataclouder left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a small comment issue to be addressed

govcd/api_vcd_test.go Outdated Show resolved Hide resolved
Signed-off-by: Dainius Serplis <dserplis@vmware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants