neutron

Floating IP and 'system' ports

Asked by Salvatore Orlando

Hi,

while reviewing some code I realised I can associate a floating IP to the DHCP port, as well as to router interfaces port.
Even if I do not find anything terribly wrong with it, it just seems like it does not make a lot of sense, and I was wondering whether we should forbid it.

Only VIF ports probably should be associated with floating IPs.

What's your opinion?

Question information

Language:
English Edit question
Status:
Answered
For:
neutron Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
dan wendlandt (danwent) said : 		#1

that's a good point. we're talking about something similar on the security groups thread, so I think limiting it to compute:* ports (or explicitly excluding network:* ports) would be best.

Revision history for this message
yong sheng gong (gongysh) said : 		#2

Do we need to forbid it? I think we can let it alone. Maybe some time in future, it becomes a famous hacking point for good.

Can you help with this problem?

Provide an answer of your own, or ask Salvatore Orlando for more information if necessary.

To post a message you must log in.