apache / apache/cloudstack

Allow public IP acquisition without Source NAT

Open
#13,081 1 comment 0 reactions 0 assignees View on GitHub
type:enhancement
Dominant language
Java
Stars
3.1k
Forks
1.4k
Avg merge
6d 19h
Merged PRs (30d)
32

Description

Allow public IP acquisition without Source NAT in Isolated Networks with Static NAT

ISSUE TYPE
- Improvement Request

COMPONENT NAME
```
```
CLOUDSTACK VERSION
```
4.20.3
```
SUMMARY

In an isolated network without Source NAT, it is not possible to add a public IP address when Static NAT is enabled.

Error:
```
Failed to acquire IP.
In zone of type Advanced ip address can be associated only to the network of guest type Isolated with the SourceNat enabled
```

It would be useful to have this capability, since Source NAT reserves a separate public IP address for itself. In scenarios where all VMs are expected to use Static NAT, the Source NAT IP remains idle and unused.

STEPS TO REPRODUCE
1) Create network offering for guest isolated network
2) Enable Static NAT in the offering
4) Create an isolated network using the created offering
5) Add a public IP address

Related discussion: [Error when adding a public IP in an isolated network without Source NAT (using Static NAT) #13052](https://github.com/apache/cloudstack/discussions/13052)

Contributor guide

Open the contributing guide

Research direction

No implementation files or tests are named. Start by reproducing the failure using the listed network-offering and isolated-network steps, then read the related discussion #13052 and trace the public IP acquisition validation. Done means a public IP can be added to an advanced isolated network with Static NAT and no Source NAT without breaking existing Source NAT behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
cloud, networking
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.