yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1091939] Re: nova-network applies too liberal a SNAT rule

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Vish Ishaya <vishvananda@xxxxxxxxx>
Date: Thu, 28 Feb 2013 21:04:28 -0000
Reply-to: Bug 1091939 <1091939@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: nova
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1091939

Title:
  nova-network applies too liberal a SNAT rule

Status in OpenStack Compute (Nova):
  Invalid
Status in “nova” package in Ubuntu:
  In Progress
Status in “nova” source package in Precise:
  In Progress

Bug description:
  Version: 2012.1.3+stable-20120827-4d2a4afe-0ubuntu1

  We recently set up a new Nova cluster on precise + essex with Juju and
  MaaS, and ran into a problem where instances could not communicate
  with the swift-proxy node on the MaaS network.  This turned out to be
  due to nova-network installing a SNAT rule for the cluster's public IP
  that applied to all network traffic, not just that traffic destined to
  exit towards the Internet.

  This problem has been fixed upstream in
  https://github.com/openstack/nova/commit/959c93f6d3572a189fc3fe73f1811c12323db857

  Please consider applying this change to Ubuntu 12.04 LTS in an SRU.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1091939/+subscriptions