Ask Your Question

Floating IP and 'system' ports

asked 2012-11-28 17:07:35 -0600

salvatore-orlando gravatar image


while reviewing some code I realised I can associate a floating IP to the DHCP port, as well as to router interfaces port. Even if I do not find anything terribly wrong with it, it just seems like it does not make a lot of sense, and I was wondering whether we should forbid it.

Only VIF ports probably should be associated with floating IPs.

What's your opinion?

edit retag flag offensive close merge delete

2 answers

Sort by » oldest newest most voted

answered 2012-11-28 19:14:10 -0600

danwent gravatar image

that's a good point. we're talking about something similar on the security groups thread, so I think limiting it to compute:* ports (or explicitly excluding network:* ports) would be best.

edit flag offensive delete link more

answered 2012-11-29 07:14:04 -0600

gongysh gravatar image

Do we need to forbid it? I think we can let it alone. Maybe some time in future, it becomes a famous hacking point for good.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2012-11-28 17:07:35 -0600

Seen: 39 times

Last updated: Nov 29 '12