Ask Your Question
0

Should neutron leak nameservers to public net?

asked 2016-07-13 03:50:24 -0600

appeno gravatar image

updated 2016-07-13 03:50:47 -0600

Hello,

A while ago I launched OpenStack in a company environment. With the configuration I had, people stared to get the nameservers (8.8.8.8 etc.) that OpenStack used which caused trouble because they could no longer resolve local company hostnames.

I used the selfservice setup presented in official documentation for Mitaka on Ubuntu Trusty. I know I sat the public interface to have a static IP which was wrong according to that documentation (should have no IP).

The question is, is openstack (neutron) supposed to share nameservers to other than the instances inside openstack?

edit retag flag offensive close merge delete

Comments

Nobody knows?

appeno gravatar imageappeno ( 2016-07-13 13:41:22 -0600 )edit

1 answer

Sort by ยป oldest newest most voted
0

answered 2016-07-13 14:41:12 -0600

james-denton gravatar image

If using Neutron, you can define nameservers on a per-subnet basis. DHCP will push those nameservers to the instances. If a nameserver is not defined, I believe the default behavior is to use the IP address of the DHCP server/agent that provided the lease.

edit flag offensive delete link more

Comments

But let's say, I'm sitting on the same network as openstack are using as provider network on an ordinary desktop computer. I'm not using any static nameserver but are depending on asking the network via broadcast. Should openstack answer me and deliver a nameserver? Because that's what happen.

appeno gravatar imageappeno ( 2016-07-14 04:47:20 -0600 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-07-13 03:50:24 -0600

Seen: 106 times

Last updated: Jul 13 '16