Comment 6 for bug 1358583

Revision history for this message
Andrew Laski (alaski) wrote : Re: List instances by IP results in DoS of nova-network

Unfortunately it is not a trivial thing to get a filtered list of instance uuids filtered by ip. The filtering for instances is somewhat complex and we don't want to duplicate that in the ip query. One potential approach would be to get a list of instance uuids not filtered by ip, and then send that to the network query to pare it down by ip filtering.

I think the easiest approach would be to put some policy in place around that filtering option to address the potential for a DOS and then the querying can be optimized later.