[pve-devel] rfc : implementing a cloudinit metadata server

[Dietmar Maurer]

> on proxmox host, we add an iptables rules like
> 
> iptables -t nat -A PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --port 80 -j
> DNAT - to-destination <proxmoxhostip>:8006
> 
> to redirect request to proxmox host.
> 
> (Not sure if we need to implement a separate daemon, or reuse pveproxy and add
> openstack endpoints)

This would expose the API server to all guests, so I guess it would be better
toö use a separate daemon instead.

> Now, the tricky part, is that we need to make api responding the correct datas
> for the correct client. 
> I don't have found how they are doing that in openstack or ec2,
> 
> but I think it could be possible to check client macaddress in arp table from
> the src ip 169.254.x.x, then from mac address, find vmid.
> 
> 
> What do you think about it ?

Sounds good, but you need to find a reliable way to detect the correct client.

Also, does this method work for windows guest?