Re: one question about CF security

Gwenn Etourneau

Inbound is connexion initiate from external, in this case dialog between
app and client is throught the LB / Gorouter

Outbound is connexion initiate from Internal that's mean your app want to
connect to something ....

Not sure I am clear ...

On Thu, Dec 10, 2015 at 1:35 PM, 姜恩龙jiangenlong <jiangenlong(a)>


· Inbound: From the load balancer through the router to the DEA,
then from the DEA to the App Container.

· Outbound: From the App Container to the DEA, then to the
gateway on the DEA virtual network interface.

· This gateway might be a NAT to external networks depending on
your IaaS.

· -------- this is come
from CloudFoundry official docs.

Do Load Balancer and NAT have the same ip? In other words, do the two
appliance locate on one host( or VM)?

If not, client send a request , destination ip is LoadBalancer’s address,
then client receive a response, source ip is NAT address.

I think, in this situation, client can not communicate with cloudfoundry.




Join { to automatically receive all group messages.