When we create a user, we can assign a limit group to the user.

If we could associate a specific IP block with the Limit group (with the meaning that users inside that Limit group will only consume addresses from that block), this would open an amazing opportunity:

The IP block can already be associated with a specific VLAN. If we would create a per customer limit group, and associate the IP block with that limit group, then we could get all the customer VMs in a dedicated per-customer VLAN. This way, each customer could have his own VLAN, which is a very useful feature (for separation purposes).

I have tested the whole scenario, it works fine, the only missing gap is that I cannot say "customer X will only use IPs from this specific IP block".

If I disallow the customer to create VMs, and I create them myself, then I can manually set the IP address and achieve the desired result. But it is nicer to allow the customer to create his own VMs.