Neutron does block DHCP/RA from instances by default:
https://github.com/openstack/neutron/blob/master/neutron/agent/linux/openvswitch_firewall/firewall.py#L929
But not from router/dhcp ports.
Are all these instances sitting on a shared network where they can see multiple neutron routers? I still don't have a clear picture.
Neutron does block DHCP/RA from instances by default:
https:/ /github. com/openstack/ neutron/ blob/master/ neutron/ agent/linux/ openvswitch_ firewall/ firewall. py#L929
But not from router/dhcp ports.
Are all these instances sitting on a shared network where they can see multiple neutron routers? I still don't have a clear picture.