> Could this be more safely worked-around in openstack?
forgot to comment on this one, well, I am no OpenStack expert, however, OpenStack nova-network relies on dnsmasq for propagating IP addresses via DHCP to their (KVM/...) instances, and OpenStack supports simple networking (w/o VLAN) and VLAN-networking, and thus, I don't see how OpenStack could work around this except using a different software than dnsmasq (something that actually works) - or don't use VLAN at all.
> Could this be more safely worked-around in openstack?
forgot to comment on this one, well, I am no OpenStack expert, however, OpenStack nova-network relies on dnsmasq for propagating IP addresses via DHCP to their (KVM/...) instances, and OpenStack supports simple networking (w/o VLAN) and VLAN-networking, and thus, I don't see how OpenStack could work around this except using a different software than dnsmasq (something that actually works) - or don't use VLAN at all.