yahoo-eng-team team mailing list archive

[Claudiu Belu <cbelu@xxxxxxxxxxxxxxxxxxxxxx>]

Public bug reported:

Security Group rules created with ethertype 'IPv6' and protocol 'icmp'
cannot be added by the Hyper-V Security Groups Driver, as it cannot add
rules with the protocol 'icmpv6'.

This can be easily fixed by having the Hyper-V Security Groups Driver
create rules with protocol '58' instead. [1] These rules will also have
to be stateless, as ICMP rules cannot be stateful on Hyper-V.

This bug is causing the test
tempest.scenario.test_network_v6.TestGettingAddress.test_slaac_from_os
to fail on Hyper-V.

[1] http://www.iana.org/assignments/protocol-numbers/protocol-
numbers.xhtml

Log: http://paste.openstack.org/show/301866/

Security Groups: http://paste.openstack.org/show/301870/

** Affects: networking-hyperv
     Importance: Medium
     Assignee: Claudiu Belu (cbelu)
         Status: In Progress

** Affects: neutron
     Importance: Undecided
     Assignee: Claudiu Belu (cbelu)
         Status: New


** Tags: hyper-v juno-backport-potential

** Description changed:

  Security Group rules created with ethertype 'IPv6' and protocol 'icmp'
  cannot be added by the Hyper-V Security Groups Driver, as it cannot add
  rules with the protocol 'icmpv6'.
  
  This can be easily fixed by having the Hyper-V Security Groups Driver
  create rules with protocol '58' instead. [1] These rules will also have
  to be stateless, as ICMP rules cannot be stateful on Hyper-V.
  
+ This bug is causing the test
+ tempest.scenario.test_network_v6.TestGettingAddress.test_slaac_from_os
+ to fail on Hyper-V.
+ 
  [1] http://www.iana.org/assignments/protocol-numbers/protocol-
  numbers.xhtml
  
  Log: http://paste.openstack.org/show/301866/
  
  Security Groups: http://paste.openstack.org/show/301870/

** Also affects: neutron
   Importance: Undecided
       Status: New

** Tags added: juno-backport-potential

** Changed in: neutron
     Assignee: (unassigned) => Claudiu Belu (cbelu)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1466547

Title:
  Hyper-V: Cannot add ICMPv6 security group rule

Status in Hyper-V Networking Agent:
  In Progress
Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Security Group rules created with ethertype 'IPv6' and protocol 'icmp'
  cannot be added by the Hyper-V Security Groups Driver, as it cannot
  add rules with the protocol 'icmpv6'.

  This can be easily fixed by having the Hyper-V Security Groups Driver
  create rules with protocol '58' instead. [1] These rules will also
  have to be stateless, as ICMP rules cannot be stateful on Hyper-V.

  This bug is causing the test
  tempest.scenario.test_network_v6.TestGettingAddress.test_slaac_from_os
  to fail on Hyper-V.

  [1] http://www.iana.org/assignments/protocol-numbers/protocol-
  numbers.xhtml

  Log: http://paste.openstack.org/show/301866/

  Security Groups: http://paste.openstack.org/show/301870/

To manage notifications about this bug go to:
https://bugs.launchpad.net/networking-hyperv/+bug/1466547/+subscriptions