Ask Your Question
0

Floating IP and 'system' ports

asked 2012-11-28 17:07:35 -0500

salvatore-orlando gravatar image

Hi,

while reviewing some code I realised I can associate a floating IP to the DHCP port, as well as to router interfaces port. Even if I do not find anything terribly wrong with it, it just seems like it does not make a lot of sense, and I was wondering whether we should forbid it.

Only VIF ports probably should be associated with floating IPs.

What's your opinion?

edit retag flag offensive close merge delete

2 answers

Sort by » oldest newest most voted
0

answered 2012-11-28 19:14:10 -0500

danwent gravatar image

that's a good point. we're talking about something similar on the security groups thread, so I think limiting it to compute:* ports (or explicitly excluding network:* ports) would be best.

edit flag offensive delete link more
0

answered 2012-11-29 07:14:04 -0500

gongysh gravatar image

Do we need to forbid it? I think we can let it alone. Maybe some time in future, it becomes a famous hacking point for good.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2012-11-28 17:07:35 -0500

Seen: 22 times

Last updated: Nov 29 '12