External network doesn't need to be shared

Bug #1405403 reported by Yair Fried
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openstack-manuals
Fix Released
Low
Yair Fried

Bug Description

Please remove the "--shared" tag from the external network.
You can't creating an external network that is invisible to other tenants because limiting "external" network to a single tenant, doesn't make much sense, as VMs in this tenant can already connect directly to the network without the need for a router or floating IPs.

By marking a network as external you are already sharing it among all other tenants to be used as default GW and a source for floating IPs.

By Marking a network as "shared" you are allowing other tenants to connect VMs (and not router GWs) to the network.

Following the doc, marking an external network as "shared" would allow VMs of all tenants to connect to a network as well as pull floating ips from it (via router GW). While this is possible in Neutron, it is also redundant, as with the case above - There isn't much sense in pulling a floating IP from a network that you can connect to directly.

-----------------------------------
Built: 2014-12-11T19:42:53 00:00
git SHA: 4a4e294bccb1dbe86755bc14b112ef9b8a2c340d
URL: http://docs.openstack.org/icehouse/install-guide/install/apt-debian/content/neutron_initial-external-network.html
source File: file:/home/jenkins/workspace/openstack-manuals-tox-doc-publishdocs/doc/install-guide/section_neutron-initial-networks.xml
xml:id: neutron_initial-external-network

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-manuals (master)

Fix proposed to branch: master
Review: https://review.openstack.org/143845

Changed in openstack-manuals:
assignee: nobody → Yair Fried (yfried)
status: New → In Progress
Revision history for this message
Matt Kassawara (ionosphere80) wrote :

In the future, please wait until bugs are confirmed/triaged before suggesting a patch.

Changed in openstack-manuals:
importance: Undecided → Low
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-manuals (master)

Reviewed: https://review.openstack.org/143845
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=b9db6828ffde62ef9eccee59d0641392afd12228
Submitter: Jenkins
Branch: master

commit b9db6828ffde62ef9eccee59d0641392afd12228
Author: Yair Fried <email address hidden>
Date: Wed Dec 24 16:24:31 2014 +0200

    Fix misleading guidance for Neutron external network

    External networks shouldn't be "shared"

    Change-Id: I7511e2f956c219ab2155ca44023bdc6754400828
    Closes-bug: #1405403

Changed in openstack-manuals:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-manuals (stable/juno)

Fix proposed to branch: stable/juno
Review: https://review.openstack.org/143873

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-manuals (stable/juno)

Reviewed: https://review.openstack.org/143873
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=821a84bc42aecf8fed0ac182a8fda266fd4ff2c6
Submitter: Jenkins
Branch: stable/juno

commit 821a84bc42aecf8fed0ac182a8fda266fd4ff2c6
Author: Yair Fried <email address hidden>
Date: Wed Dec 24 16:24:31 2014 +0200

    Fix misleading guidance for Neutron external network

    External networks shouldn't be "shared"

    Change-Id: I7511e2f956c219ab2155ca44023bdc6754400828
    Closes-bug: #1405403
    (cherry picked from commit b9db6828ffde62ef9eccee59d0641392afd12228)

tags: added: in-stable-juno
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-manuals 15.0.0

This issue was fixed in the openstack/openstack-manuals 15.0.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.