Re: one question about CF security

Zhang Lei <harryzhang@...>

According to your graph, outbound traffic is not the response, it refers to how your app connect to the outside world.

Lei Zhang (Harry Zhang)

TEL: (+86) 15157180183
Cloud Team
Zhejiang University

在 2015-12-10 12:35:55,"姜恩龙jiangenlong" <jiangenlong(a)> 写道:


· Inbound: From the load balancer through the router to the DEA, then from the DEA to the App Container.

· Outbound: From the App Container to the DEA, then to the gateway on the DEA virtual network interface.

· This gateway might be a NAT to external networks depending on your IaaS.

· -------- this is come from CloudFoundry official docs.

Do Load Balancer and NAT have the same ip? In other words, do the two appliance locate on one host( or VM)?

If not, client send a request , destination ip is LoadBalancer’s address, then client receive a response, source ip is NAT address.

I think, in this situation, client can not communicate with cloudfoundry.




Join { to automatically receive all group messages.