Citrix Systems 4.2 Setting Up Networking for Users

Chapter 10.
73
Setting Up Networking for Users
10.1. Overview of Setting Up Networking for Users
People using cloud infrastructure have a variety of needs and preferences when it comes to the
networking services provided by the cloud. As a CloudPlatform administrator, you can do the following
things to set up networking for your users:
• Set up physical networks in zones
• Set up several different providers for the same service on a single physical network (for example,
both Cisco and Juniper firewalls)
• Bundle different types of network services into network offerings, so users can choose the desired
network services for any given virtual machine
• Add new network offerings as time goes on so end users can upgrade to a better class of service on
their network
• Provide more ways for a network to be accessed by a user, such as through a project of which the
user is a member
10.2. About Virtual Networks
A virtual network is a logical construct that enables multi-tenancy on a single physical network. In
CloudPlatform a virtual network can be shared or isolated.
10.2.1. Isolated Networks
An isolated network can be accessed only by virtual machines of a single account. Isolated networks
have the following properties.
• Resources such as VLAN are allocated and garbage collected dynamically
• There is one network offering for the entire network
• The network offering can be upgraded or downgraded but it is for the entire network
For more information, see Section 16.5.1, “Configuring Isolated Guest Network”.
10.2.2. Shared Networks
A shared network can be accessed by virtual machines that belong to many different accounts.
Network Isolation on shared networks is accomplished by using techniques such as security groups,
which is supported only in Basic zones.
• Shared Networks are created by the administrator
• Shared Networks can be designated to a certain domain
• Shared Network resources such as VLAN and physical network that it maps to are designated by
the administrator
• Shared Networks can be isolated by security groups
• Public Network is a shared network that is not shown to the end users