I have to say documentation on this issue is confusing. My understanding 
is that, by default, individual components talk to each other through 
the "publicurl" from the keystone service catalog. Not all components 
are implemented consistently to obey the "public" vs "internal" 
separation. So at this point, it's probably safe to define ALL urls 
using the internal IP/hostname.  Do I understand this correctly?
Thanks,
Xin
On 9/19/2014 3:22 PM, Zhao, Xin wrote:
 Hello,
 When one defines services endpoints in keystone, eg. for neutron, the 
 publicurl should be using the outfacing NIC IP (or external hostname 
 of the controller), while the internalurl and adminurl should be using 
 the internal management subnet NIC IP (or the internal hostname of the 
 controller). Do I understand this right? My controller has an 
 out-facing IP/hostname and an internal hostname/IP on the management 
 subnet.
 Thanks,
 Xin
 _______________________________________________
 Rdo-list mailing list
 Rdo-list(a)redhat.com
 
https://www.redhat.com/mailman/listinfo/rdo-list