Neutron and Designate integration covers use cases for ports which are exposed via floating IPs, or reside on provider networks.
However, the following use cases aren't being covered:
1. Ports reside on a no-NAT network, which is routable from outside the Openstack deployment.
2. Ports on any network which need exposure via DNS: e.g an app uses FQDNs to intercommunicate between app components.
As the no-NAT attribute belongs to the router, and not to the network, it might be tricky to detect port exposure via this attribute: a user could attach a network with some ports on it to a no-NAT network and so they're exposed even though they weren't during creation.
Or a router might be changed from NAT to no-NAT and vice versa.
To simplify I would suggest adding an attribute to the network via an extension, which would indicate that this network's ports should be published on the DNS.
So for networks which need exposure via DNS, we could flag these networks and force the DNS publishing.
Hi Koby,
I want to explore and clarify the requirement you are talking about here:
1) Have you read this section of the Networking guide: https:/ /docs.openstack .org/neutron/ latest/ admin/config- dns-int- ext-serv. html#use- case-3- ports-are- published- directly- in-the- external- dns-service?
2) How is the use case described in that section of the Networking Guide different to what you are proposing?