Comment 7 for bug 1896438

I am seeing this issue as well. My case is slightly different though. I didn't have an interface on the public network, but the public network was routable. However, even though I could ping and telnet to the public IP of keystone, I couldn't properly talk to it.

In either case, if I could have forced GSSS to use just the keystone-int then there would have been no issue to begin with.