[brugidou]

Quickly went through the docs:

* why do they require a "cluster controller" for each subnet (or vlan)? This seems like a waste of resources and added complexity. Is this a limitation because it's easier to set up for sysadmins than to request for a DHCP relay?

* how bad is the security? It seems that you approve clusters interfaces but MAC spoofing could do a lot of harm here.

Edit: I saw that the doc tells you to add network interfaces to manage multiple clusters from a single controller. Assuming you do 802.1q this works but what about multi-dc setups? Isn't this more complicated than a simple relay?