dhcp-agent and l3-agent should not run without namespace
Bug #1099837 reported by
Akihiro Motoki
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openstack-manuals |
Fix Released
|
High
|
Gary Kotton |
Bug Description
I have noticed that there is a case two subnets not connected each other via a router can communicate each other by changing default gateway to the IP address of the DHCP servers in a setup where l3-agent and dhcp-agent run on a same host without namespace. This may lead to a security issue.
We should document that l3-agent and dhcp-agent should be run on different hosts.
Changed in openstack-manuals: | |
status: | New → Confirmed |
importance: | Undecided → High |
status: | Confirmed → Triaged |
summary: |
- dhcp-agent and l3-agent should run without namespace + dhcp-agent and l3-agent should not run without namespace |
Changed in openstack-manuals: | |
assignee: | nobody → Gary Kotton (garyk) |
To post a comment you must log in.
Fix proposed to branch: master /review. openstack. org/21961
Review: https:/