Can nova-compute connect database directly?

[shews]

Hello all.

Now nova-compute get or update database via rabbitmq rpc message to nova-conductor. If a region has a lot of nova-computes, this will increase the load of rabbitmq and nova-conductor.
Can nova-compute connect to database directly? not via rabbitmq and nova-conductor.

Thank you.

[shews (shews)]

Why nova-compute not connect to database directly by default?

[sean mooney (sean-k-mooney)]

it is explcitly not supproted.

we intoduced the condocutor to make sure that nova compute agents do not have db access directly.

[sean mooney (sean-k-mooney)]

we deprecated supprot for direct db acces in mitaka/ 2016 mitaka
https://github.com/openstack/nova/commit/a067a4c9be524c90677f511c96764ab327a4da4c
and it was removed in ocata in 2017 https://github.com/openstack/nova/commit/c36dbe1f721ea6ca6b083932c8f27022a03ddf53

direct db access is considered a potential security issue if the db credentials are available on the compute node and it is not something we plan to support again in the future.