yahoo-eng-team team mailing list archive

[Steve Wormley <openstack@xxxxxxxxxxx>]

Public bug reported:

FIP rules in agent/l3/dvr_fip_ns.py are given the range:
FIP_PR_START = 32768
FIP_PR_END = FIP_PR_START + 40000

And snat_idx in agent/l3/dvr_router.py used for ip rules as well is computed using:
            if snat_idx < 32768:
                snat_idx = snat_idx + MASK_30

So that the FIP rule range could overlap the snat_idx range in rare
cases.

The obvious solution is "if snat_idx <32768+40001"(I think) but there's
probably a better solution than hard coding 40000

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1434158

Title:
  snat_idx and FIP Rules may overlap

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  FIP rules in agent/l3/dvr_fip_ns.py are given the range:
  FIP_PR_START = 32768
  FIP_PR_END = FIP_PR_START + 40000

  And snat_idx in agent/l3/dvr_router.py used for ip rules as well is computed using:
              if snat_idx < 32768:
                  snat_idx = snat_idx + MASK_30

  So that the FIP rule range could overlap the snat_idx range in rare
  cases.

  The obvious solution is "if snat_idx <32768+40001"(I think) but
  there's probably a better solution than hard coding 40000

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1434158/+subscriptions