floatingip cannot be associated even there's static route to the network

[Bali Bao]

Hi All

Currently in the neturon floating ip associate code, there is a limitation that if the port's network is not connected to any router, then the floating ip cannot be associated.

(neutron) floatingip-associate 52a8cbea-cc3c-4162-8a16-bf7f31a92622 d40331e7-7c16-4ba5-ac38-44d805eb9cc0
External network cb3ac47c-60be-4754-a540-ee03e9b3668c is not reachable from subnet 14c83a82-ca86-45ad-93e4-a14720cfec54. Therefore, cannot associate Port d40331e7-7c16-4ba5-ac38-44d805eb9cc0 with a Floating IP.
Neutron server returns request_ids: ['req-91073bb6-a54e-4a6c-8400-4499e53a940d']
(neutron)

This behavior is right in normal case, but there is a real case will be blocked:
See the attached use case picture, we deployed a pfSense as router, the private-network-1 is not connected to the router but connect to the pfSense as the default gw. And in the router, we added a static route that any traffic going to the private-network-1 nexthop to pfSense. In case, we can not set the floating ip for the vm1.

So we suggest, when associating floating ip, neutron should not only check the direct connected subnets, but also check the whether there're static route can cover that port.

Thanks,

Bali

[Poonam Ghosh (poonam-ghosh)]

We are planning to pick this Wishlist Bug for our analysis and contribution.
This is to intimate our participation on this Bugs analysis.