Public IP Addresses allocated to non-controller nodes
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Fuel for OpenStack |
New
|
Undecided
|
Unassigned |
Bug Description
{"ostf_sha": "e33390c275e225
Environment:
- Neutron with GRE
- Ubuntu
Problem:
In a Neutron-based environment, not all nodes should have a Public network address - only the controllers would require this. Having public IP addresses on the non-controller nodes increases the attack surface area and wastes public IP addresses. Having to have a public IP address for every node deployed also makes it an expensive exercise, especially since most of them remain unused.
It would be better to allocate Public addresses on an as-required basis and leaving any network interfaces configured that don't require them as 'manual' interfaces instead of 'static' interfaces.